Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/094fa198-22df-45ed-b9ab-686db72562f1.roa
File:                     094fa198-22df-45ed-b9ab-686db72562f1.roa (raw, json)
Hash identifier:          zZzLXslbopgD9mS4iMJH446NohMfdt4AqrUl+n2fCZk=
Subject key identifier:   61:99:49:20:18:44:3C:7F:84:73:AC:52:DF:2B:CD:C0:DF:71:84:86
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5D4381403BA80C97EC037D5C616AEB6B263F2E09
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/094fa198-22df-45ed-b9ab-686db72562f1.roa
Signing time:             Thu 22 Oct 2026 01:40:46 +0000
ROA not before:           Thu 22 Oct 2026 01:40:46 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        108.130.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:43:81:40:3b:a8:0c:97:ec:03:7d:5c:61:6a:eb:6b:26:3f:2e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 01:40:46 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=dab7eb2f1285ff47664cefaac352815536fdd2cd201cfc156c14a1fd9e33551d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ce:43:15:e2:cb:cd:ba:cb:5a:b2:40:ad:3a:
                    09:72:0b:5e:ed:69:8d:e5:7c:3e:af:64:1d:8c:0c:
                    cb:3b:55:4f:59:0a:a5:74:d2:08:8a:97:e7:d1:08:
                    42:df:87:f8:0e:ba:35:fd:39:9e:6f:fc:c6:b0:da:
                    31:29:3f:dc:52:4c:12:b2:b6:1c:3e:76:46:8f:2b:
                    d7:15:bc:84:96:0c:e0:45:06:36:80:8a:d6:55:e1:
                    d6:65:92:e2:dc:5f:52:26:76:c6:ac:aa:50:4d:06:
                    06:e9:7d:30:64:b6:92:b7:26:60:c1:79:9e:77:9b:
                    b6:e3:dc:ce:bc:6e:f2:cd:62:6d:a6:7f:2f:87:52:
                    b3:d8:8e:12:b9:1b:41:0f:7b:9d:05:ba:ee:19:cf:
                    5b:b1:8d:9b:33:d7:78:7a:76:36:5d:2c:9a:59:47:
                    b4:25:27:79:12:ba:d8:10:76:c8:c6:a0:2f:72:6f:
                    f9:61:46:9f:7e:e0:61:b3:c0:96:17:01:af:71:c8:
                    a2:cc:a6:1a:be:c2:90:17:9b:75:c2:fb:bd:4f:a2:
                    17:69:46:c3:38:8e:b4:13:53:30:77:dd:dc:ae:e8:
                    b5:ee:e6:da:00:c0:28:fa:c9:22:24:0e:26:1d:64:
                    80:c6:80:56:c7:c1:1c:24:cd:22:99:30:b0:32:fe:
                    6b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:99:49:20:18:44:3C:7F:84:73:AC:52:DF:2B:CD:C0:DF:71:84:86
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/094fa198-22df-45ed-b9ab-686db72562f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.130.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:83:a7:13:da:f7:a1:ae:89:73:24:fc:88:87:99:d4:e4:00:
         71:e4:65:48:d8:bc:8b:f3:7a:be:23:f8:60:35:38:31:82:4b:
         4b:72:59:f4:04:00:45:9f:f2:2a:0b:b2:d0:83:97:c4:f6:f8:
         98:3a:49:f2:a3:7c:35:00:1d:90:0b:b1:16:f7:c6:e9:db:59:
         ba:17:41:21:ca:12:2d:78:b4:d2:a6:8f:45:ab:74:07:c5:eb:
         46:2d:10:4c:d7:fc:3f:52:a2:65:f1:97:3f:0d:e2:1b:00:5a:
         87:2c:7d:d5:a6:ba:44:3f:4f:15:df:6f:48:5c:03:fc:b3:9c:
         5c:73:ed:d5:de:fa:92:3d:e6:d5:22:aa:10:7d:29:10:f6:7d:
         29:fe:76:27:24:f4:10:2e:16:44:1b:a0:05:8f:b5:2d:bf:fd:
         d9:d2:45:bf:21:1d:43:c1:0a:56:13:b5:cc:09:84:58:9c:35:
         7e:82:72:a1:3c:87:b5:4a:cc:84:61:03:80:ff:6e:ac:f2:70:
         88:20:9d:62:fd:d0:c6:8e:ef:72:d5:af:8a:bb:9a:6b:a7:62:
         87:dc:e6:52:97:b5:16:c6:79:ba:22:71:2e:4e:73:5b:24:2b:
         28:a7:a2:5f:17:58:1a:3d:e4:dc:8d:b3:37:01:14:a7:16:04:
         16:71:d4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 01:51:01 2026 by rpki-client