Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eaa1ee33-9aeb-42cf-b892-fdbcb7bf6091.roa
File:                     eaa1ee33-9aeb-42cf-b892-fdbcb7bf6091.roa (raw, json)
Hash identifier:          Dpvu1tH0oC2NBwD90nol+3G6JGcV5+hDwAcmzUqYew0=
Subject key identifier:   29:4A:05:58:D0:16:0F:BD:82:21:20:3F:8E:53:75:90:C2:B0:E0:C4
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6FB51CAD6C5FE4C19E1CD7676D043FAA0E5EF345
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eaa1ee33-9aeb-42cf-b892-fdbcb7bf6091.roa
Signing time:             Wed 13 May 2026 00:50:07 +0000
ROA not before:           Wed 13 May 2026 00:50:07 +0000
ROA not after:            Tue 11 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        144.220.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 31 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b5:1c:ad:6c:5f:e4:c1:9e:1c:d7:67:6d:04:3f:aa:0e:5e:f3:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 13 00:50:07 2026 GMT
            Not After : Aug 11 23:59:59 2026 GMT
        Subject: serialNumber=4e3a9d6b8c3ed227a14838706e24fcd4fcff11e2f9216f21a68ccd794eabf4ab, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:77:e6:98:8d:bd:5c:43:e5:35:7c:e1:76:f7:
                    a5:22:9d:3d:2e:0f:1e:6d:a7:67:d2:a4:77:f1:58:
                    40:00:7e:33:2b:30:91:12:6f:e4:96:ce:77:e0:4e:
                    c3:a2:f5:9c:56:3f:63:fe:8b:dd:ea:1e:0e:e9:7f:
                    a7:b6:e1:05:e7:ea:77:71:d3:3f:8d:bf:dc:9e:cf:
                    ef:b5:0f:6b:79:b6:cf:fa:7f:ea:88:3a:b8:10:f2:
                    f3:db:0b:68:77:1e:8b:64:01:d3:e0:e4:ad:56:2a:
                    ff:84:b8:f3:67:a8:0b:6b:6b:0d:a9:c1:f3:97:21:
                    4f:11:00:5c:21:48:41:fb:e2:84:b5:13:8b:cc:12:
                    83:3e:42:3d:e9:cf:ca:96:78:18:6a:8a:83:0c:59:
                    4a:18:cd:36:f1:9a:cd:2d:70:ef:b2:e7:58:d8:e6:
                    7b:25:1f:44:02:71:72:71:ef:1b:1b:ff:83:03:69:
                    2a:98:54:d7:a8:51:d6:a2:12:b7:a4:3b:9d:35:8a:
                    b5:34:74:f0:84:e1:13:cb:bc:b7:46:8f:a5:31:24:
                    4c:a3:06:31:c3:63:21:f3:d5:c9:eb:ae:a4:96:b7:
                    53:74:ae:be:bf:03:1f:94:ff:1b:5e:f9:48:33:4a:
                    2d:f3:c4:a3:ae:02:89:55:ff:77:6e:12:95:dd:c2:
                    84:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4A:05:58:D0:16:0F:BD:82:21:20:3F:8E:53:75:90:C2:B0:E0:C4
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eaa1ee33-9aeb-42cf-b892-fdbcb7bf6091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.220.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:c3:ea:c2:0f:30:f4:98:a3:fd:ab:40:62:98:0d:a2:6d:05:
         48:7d:a7:4d:61:31:54:82:80:45:b1:a6:97:30:7a:3a:cb:6b:
         c9:d6:36:52:75:7b:1c:95:66:4e:a1:67:1e:32:25:34:2d:ca:
         7f:fb:54:e3:9c:2d:b2:09:6c:5d:2f:ec:94:b1:b7:a2:46:c6:
         a3:08:d6:fb:ff:18:70:57:d6:df:30:6e:bc:85:0f:3a:26:3a:
         5e:69:81:a1:0e:f4:74:90:c3:2d:79:74:b8:d0:8e:e6:03:22:
         f5:a1:ab:0f:39:7e:6e:06:7b:e1:0f:6d:22:23:41:f8:45:0f:
         c9:d8:b3:c3:b6:1c:d5:2b:88:d8:a7:6f:af:3d:f4:ec:7d:15:
         70:88:0e:b9:c0:04:bf:96:ed:02:29:64:03:ed:65:e7:a2:18:
         73:2a:ff:0d:94:1d:93:12:cc:a0:fc:7a:4f:8f:cb:14:4c:0c:
         33:50:fe:92:27:78:0f:6b:7a:6c:ac:5c:71:6a:92:2e:b9:e5:
         69:23:1b:84:35:96:92:d7:69:5b:eb:81:bd:62:7d:1e:ac:03:
         a4:6a:bb:75:32:d7:33:ce:f9:8c:30:78:27:a2:6f:b3:1c:3c:
         bf:79:1d:61:c8:5d:19:ec:24:3f:c1:fa:77:34:0f:d5:4f:1b:
         4d:8e:0c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:59:06 2026 by rpki-client