Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/404e92f3-75c8-4009-90ff-77096b5f65f8.roa
File:                     404e92f3-75c8-4009-90ff-77096b5f65f8.roa (raw, json)
Hash identifier:          +30SyVDeWU2ntxtKoAHU6+C+oe9WiCjZITNFeCBI32Q=
Subject key identifier:   ED:8E:EA:EE:11:F4:7F:03:10:64:88:B9:C7:E7:5E:61:4C:AE:39:31
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       694B6E6E411E8723E07863352562D9E5B338D917
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/404e92f3-75c8-4009-90ff-77096b5f65f8.roa
Signing time:             Tue 10 Feb 2026 00:20:44 +0000
ROA not before:           Tue 10 Feb 2026 00:20:44 +0000
ROA not after:            Mon 11 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.78.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:4b:6e:6e:41:1e:87:23:e0:78:63:35:25:62:d9:e5:b3:38:d9:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 10 00:20:44 2026 GMT
            Not After : May 11 23:59:59 2026 GMT
        Subject: serialNumber=f3f087c024469cae448803e04e2e9bfae9a2203239820c134a8145c0af411fb2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4c:d8:db:ec:28:e9:b9:4f:cf:ab:4d:f4:8c:
                    b2:07:b5:73:e0:9b:20:de:47:20:15:7b:bc:84:1c:
                    f2:51:59:62:15:5c:09:1d:92:14:80:04:a6:39:48:
                    51:fe:4c:2e:1b:83:0e:c4:97:af:86:b8:15:90:42:
                    0a:9c:4a:54:4c:7e:6c:e4:23:59:b0:4b:61:6f:9f:
                    a5:e5:b1:42:95:7c:db:f0:89:f3:6c:da:5d:98:77:
                    c5:7c:70:0a:08:4d:32:5c:24:03:9c:7f:35:b6:ad:
                    4a:b4:a3:91:e9:f0:ef:e1:57:59:ce:62:1f:a2:89:
                    d5:74:d0:47:74:1c:72:30:f1:86:f0:05:e7:ee:2a:
                    f9:7c:72:7a:6a:23:a3:b5:57:1e:fa:39:39:ea:36:
                    37:47:a0:80:ff:4f:f9:5f:20:16:1f:8f:cc:5f:2d:
                    d6:cd:9e:19:ed:ac:f3:e5:6c:9a:87:19:0f:ab:a4:
                    9a:9f:f4:8b:51:08:2c:12:9a:a6:3d:8b:5f:b9:ac:
                    3a:33:81:e8:ad:c3:a5:0b:1e:f7:8f:ab:dd:59:23:
                    41:fb:fb:a0:4d:fe:c5:a0:82:f8:73:f5:3a:e5:09:
                    f0:be:bf:18:ec:23:12:be:b0:2d:f1:26:fa:d2:d2:
                    f8:86:63:9d:13:da:ec:b2:ff:2c:ec:e8:f0:7b:dc:
                    09:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8E:EA:EE:11:F4:7F:03:10:64:88:B9:C7:E7:5E:61:4C:AE:39:31
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/404e92f3-75c8-4009-90ff-77096b5f65f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.78.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         bf:8a:16:af:74:11:d1:3d:61:c6:68:8d:c6:b9:41:6f:f7:36:
         6b:9b:eb:33:2f:7e:c7:7a:54:18:10:35:65:85:be:d9:90:5b:
         c4:22:61:6a:04:ea:d5:0d:84:8d:1d:1f:63:7d:30:28:52:31:
         e4:92:b8:dc:37:86:bb:f0:e6:6d:2f:f2:4e:74:df:d6:20:8b:
         dc:f8:b1:f9:bc:0d:0f:6e:e1:93:6e:50:5a:b5:de:65:41:16:
         4a:23:9c:41:99:d1:dc:73:ac:99:7d:89:2e:9f:4b:7c:9a:ec:
         cd:9f:2a:ec:29:d2:4c:4a:fe:c4:a3:77:cd:05:d3:16:27:c6:
         bd:7d:08:e4:c5:6e:7a:6a:1c:5c:9d:d4:fc:db:eb:10:ce:ea:
         fc:f7:e4:92:f6:c0:fe:98:f5:56:a1:2e:44:9b:11:c9:9f:aa:
         f9:f0:34:de:10:cd:a9:1b:9f:b1:aa:2c:99:39:53:12:8f:80:
         53:f6:a6:22:a6:c1:c1:25:d9:f5:57:da:7a:48:bf:7d:39:d0:
         a4:c0:d1:6d:88:d7:e3:3b:c8:bc:01:0e:56:02:d1:9b:f2:40:
         48:90:0c:c8:ad:bb:a1:fc:3e:04:35:56:3e:4c:e7:30:76:7b:
         59:a7:f1:f7:82:f3:d6:f9:fc:d9:2c:22:76:d1:d4:ba:8e:53:
         c9:1f:5f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 15:16:45 2026 by rpki-client