Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e5b43b68-4a81-43d9-a088-9c956cc45ef7.roa
File:                     e5b43b68-4a81-43d9-a088-9c956cc45ef7.roa (raw, json)
Hash identifier:          JKWv5oGNA+dWY0wQkUCkTRO6t/LCJZLPqrUddfRpw48=
Subject key identifier:   9E:19:5A:F2:9C:63:BE:53:A9:78:F7:EC:09:A4:FB:B0:9C:1C:C4:BA
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       66F88B2A5CB78DC3CF3D5DABD550CE3DA33514C2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e5b43b68-4a81-43d9-a088-9c956cc45ef7.roa
Signing time:             Tue 17 Feb 2026 01:30:10 +0000
ROA not before:           Tue 17 Feb 2026 01:30:10 +0000
ROA not after:            Mon 18 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.181.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f8:8b:2a:5c:b7:8d:c3:cf:3d:5d:ab:d5:50:ce:3d:a3:35:14:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 17 01:30:10 2026 GMT
            Not After : May 18 23:59:59 2026 GMT
        Subject: serialNumber=1c0af24dc16d0bd6593135121ae1f8ac522d5b6ad66c1bfe67529efaa161de8c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:0a:9d:b1:5e:11:7b:e2:2d:bd:30:94:9f:
                    e3:0e:fe:70:d1:af:89:f7:33:74:d8:05:ee:14:96:
                    a9:eb:46:03:58:ca:ca:2b:31:6b:f7:2b:c1:20:1f:
                    1d:6c:23:98:7c:12:9d:f1:6b:6d:99:1b:1c:50:34:
                    a8:84:91:e7:32:03:4e:c0:98:c2:cc:b7:fa:23:48:
                    b4:7c:5e:52:4f:66:61:a9:52:cb:86:6e:c3:99:eb:
                    58:7e:55:ad:9f:4c:bf:30:e4:cb:be:1e:d0:7a:45:
                    12:0b:4f:d8:4b:26:ab:74:83:52:1c:8a:13:e6:8f:
                    70:93:b2:41:3d:a6:8c:50:de:3c:84:b2:f0:a2:37:
                    65:f5:8a:40:e1:d0:aa:c0:1d:1b:5e:76:3e:8e:5c:
                    18:a3:ca:6b:62:de:ab:dc:89:da:fa:99:c9:ce:e4:
                    d0:a9:8b:e0:bb:a8:51:1d:05:18:9e:7d:bd:f0:49:
                    5e:a1:b3:34:b9:e0:27:aa:4f:b2:df:ef:28:eb:a1:
                    6e:62:53:69:5d:99:d0:bb:a3:69:7a:68:16:67:a7:
                    2c:bb:8b:68:c2:8b:65:3f:bf:e3:1e:20:61:15:ff:
                    f0:86:3e:8e:14:06:9b:bb:6a:71:ec:a1:0e:40:9e:
                    22:4f:23:86:ca:f0:19:68:51:aa:e0:e7:bc:4a:a0:
                    b7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:19:5A:F2:9C:63:BE:53:A9:78:F7:EC:09:A4:FB:B0:9C:1C:C4:BA
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e5b43b68-4a81-43d9-a088-9c956cc45ef7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.181.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:82:c3:50:59:3d:ad:8a:97:77:06:46:a0:4f:93:fd:57:15:
         a4:ed:00:7d:37:0d:80:a5:4e:38:7f:71:f5:e2:e9:51:7b:b1:
         9b:8a:eb:7e:94:85:ca:1f:5c:9f:ce:3a:31:97:ca:0d:08:20:
         79:5e:35:f3:8c:43:48:c6:86:38:6d:5e:fe:bb:87:66:64:3d:
         7b:75:f9:fa:4e:b6:a3:33:9e:bd:c9:b4:3d:03:52:8d:2f:50:
         4c:f2:23:1f:d8:3d:94:c3:c0:e0:8b:ee:d8:34:17:3c:28:63:
         4d:6b:75:97:9a:95:cd:dc:96:9f:2d:1c:f9:16:aa:b0:64:78:
         77:87:00:ea:1c:f8:94:6f:09:61:16:41:90:21:52:35:e7:f7:
         d2:02:c6:79:b5:43:23:21:27:8d:3b:35:7b:70:01:41:be:00:
         12:f6:cc:5f:6d:bc:77:61:2c:56:d1:b3:f6:a5:ff:cb:b3:c0:
         45:f3:b1:57:aa:c7:34:01:e1:5e:ce:5d:b9:b8:a3:4c:ed:82:
         a6:59:bd:77:23:24:91:a9:49:e9:50:4a:b1:31:8e:41:b7:40:
         d3:2e:54:6d:c7:2f:32:9d:eb:0b:9a:c7:0c:bf:e8:95:60:89:
         34:96:2c:95:76:7e:01:48:eb:a1:08:83:6a:b1:fe:0b:2a:16:
         58:aa:ca:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:44:57 2026 by rpki-client