Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2755257d-c981-4d5f-b9da-b6d3b66c1cb7.roa
File:                     2755257d-c981-4d5f-b9da-b6d3b66c1cb7.roa (raw, json)
Hash identifier:          CSYzgymi7Fsh9KSw/97FyXS4uYHplHucqPRKoM98Ak8=
Subject key identifier:   9D:C0:67:5B:3B:99:AF:61:7E:0E:3B:6A:87:2B:1C:9B:50:A3:22:9D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       20C09CBC260EF03C38A8C22A2365035501C044E6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2755257d-c981-4d5f-b9da-b6d3b66c1cb7.roa
Signing time:             Mon 05 Oct 2026 00:01:14 +0000
ROA not before:           Mon 05 Oct 2026 00:01:14 +0000
ROA not after:            Sun 03 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        35.54.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c0:9c:bc:26:0e:f0:3c:38:a8:c2:2a:23:65:03:55:01:c0:44:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  5 00:01:14 2026 GMT
            Not After : Jan  3 23:59:59 2027 GMT
        Subject: serialNumber=0f1677217d6dedb0efc05145236a96e5ba3576b3f53fa321028d9c8a18de151e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:12:4d:1d:b3:86:b6:1a:2d:8f:41:f4:50:f3:
                    2f:04:5e:3c:02:41:bb:af:77:b2:6c:e9:94:a8:4a:
                    5c:e7:77:4f:3b:06:85:c3:a3:a5:19:8a:f4:f6:23:
                    d1:20:3b:1c:fd:4c:dc:2b:fe:83:75:ab:b5:4d:dd:
                    66:b0:0c:a3:5d:9a:3c:87:de:ea:4a:0c:30:4f:f8:
                    3c:6f:2e:f4:6f:eb:17:c4:13:df:e8:fd:4a:97:09:
                    ea:cf:cd:24:70:b9:90:26:73:3c:a1:ef:23:7e:cc:
                    39:da:92:3f:84:c0:6f:0a:89:e7:fb:ff:ce:14:29:
                    d9:08:08:59:1d:51:07:a2:4b:06:bd:2b:94:99:75:
                    6f:aa:57:1d:35:c0:3d:e4:f1:94:70:be:bc:33:3f:
                    2d:f1:1f:b2:17:80:5e:ab:50:45:2f:fb:39:21:8d:
                    06:fb:e3:76:58:40:4f:bf:6c:ef:24:57:bb:fb:9e:
                    67:a5:80:13:45:50:93:54:41:41:9a:7e:e6:18:8c:
                    a3:39:a7:e6:41:45:29:ff:6b:ce:11:e1:2f:28:d7:
                    a4:3f:8f:ac:10:8b:a7:3e:65:d3:9d:be:bf:5e:62:
                    84:a8:af:c3:3c:70:b3:df:80:4a:0a:8e:cc:24:be:
                    98:8f:c8:b1:e6:4b:e6:f6:0c:fa:45:55:35:b9:6d:
                    83:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C0:67:5B:3B:99:AF:61:7E:0E:3B:6A:87:2B:1C:9B:50:A3:22:9D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2755257d-c981-4d5f-b9da-b6d3b66c1cb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.54.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:31:fe:35:f5:0a:7e:cd:05:97:60:a1:b9:38:14:3c:e5:a8:
         53:69:72:7b:c3:af:b1:5f:2e:95:65:21:3b:b3:b3:84:b4:f7:
         28:52:23:64:6f:aa:80:ac:f4:45:d6:5b:96:c5:6b:2a:85:bc:
         05:59:15:22:db:d2:9c:e8:b4:dd:d3:48:4b:79:20:64:47:dd:
         c9:c1:d1:7e:03:3e:d6:a2:64:65:2b:f1:cc:9e:e8:1e:34:a7:
         25:f6:66:db:bd:ea:00:49:62:b1:58:a2:1f:48:30:56:37:be:
         bc:07:1f:ed:94:b1:03:20:94:55:1b:f4:87:03:28:75:68:7c:
         51:bf:5a:f9:5d:3a:d0:c3:84:87:92:72:e2:7c:2c:3b:53:7a:
         79:84:71:23:1c:bc:49:7f:ed:9b:a2:17:b4:2d:d5:fc:c5:19:
         ab:ab:0a:5b:9d:dd:4c:38:f9:ab:b5:4c:91:f0:14:d4:99:36:
         0a:79:67:1f:f9:bb:f2:fb:f0:da:ca:ea:74:05:d4:bf:04:24:
         45:66:95:ef:79:0d:2a:07:d6:ce:e4:67:04:9e:53:42:68:60:
         5c:dd:ab:30:28:9a:29:04:5e:b9:5e:f4:ab:d6:b0:ed:57:6a:
         42:53:4b:64:f9:44:06:ab:4c:67:11:0f:4c:fd:84:a7:7f:e0:
         7a:0a:65:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 01:26:53 2026 by rpki-client