Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3642f1fa-fa6b-4cfe-b125-733951f3ebaf.roa
File:                     3642f1fa-fa6b-4cfe-b125-733951f3ebaf.roa (raw, json)
Hash identifier:          jtpFCS/PD0Eo9dS8q3YIMb/B7owjqI4uuIwdiqdj7WM=
Subject key identifier:   B9:88:0B:D6:7E:05:9F:0A:47:7E:FF:53:98:4B:99:11:C8:31:65:63
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7BF2E2550500EB17E788F82BC49A4257B54DD382
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3642f1fa-fa6b-4cfe-b125-733951f3ebaf.roa
Signing time:             Wed 05 Aug 2026 00:30:26 +0000
ROA not before:           Wed 05 Aug 2026 00:30:26 +0000
ROA not after:            Tue 03 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        75.101.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f2:e2:55:05:00:eb:17:e7:88:f8:2b:c4:9a:42:57:b5:4d:d3:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 00:30:26 2026 GMT
            Not After : Nov  3 23:59:59 2026 GMT
        Subject: serialNumber=5561b36e22ec14f7739a0cdacb241106666126e4ff1436d33463161a8056137f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bf:87:5e:bd:e4:bc:db:ba:b6:02:ed:cc:c4:
                    bf:d1:f1:b6:73:83:96:2d:77:74:3e:96:91:40:cc:
                    58:9a:1d:e0:e2:d4:0f:28:fe:b5:5e:fc:d3:90:ac:
                    51:7b:ea:26:da:dd:7a:93:45:a8:4d:24:d7:ca:22:
                    7b:2e:f6:ad:5f:a1:17:61:81:56:e0:85:74:53:15:
                    70:4a:99:33:8a:ac:d2:a0:cc:36:10:2b:82:fa:3f:
                    72:a0:d7:c6:7e:ec:70:68:99:03:f3:76:17:57:09:
                    65:07:da:e8:91:e6:b7:41:bc:01:be:8b:1f:f6:78:
                    86:f9:68:21:d6:b9:56:e1:08:a8:69:49:91:8b:61:
                    a2:91:f5:b5:5b:e9:ec:32:03:e3:21:a8:b7:24:ef:
                    eb:e5:f4:29:25:96:6e:2f:ce:f9:97:31:57:c2:33:
                    78:4b:3c:dc:d9:8b:bc:fa:1f:d9:4d:d8:b7:e4:85:
                    54:58:e5:2d:14:63:33:d7:fb:0d:0b:9e:1d:5a:ca:
                    b0:bf:48:2d:ee:52:eb:f6:45:86:c2:eb:bc:6d:56:
                    36:4d:9f:9a:b7:ce:c7:eb:b3:1c:56:3f:c7:10:7a:
                    e5:30:cd:23:03:e1:cc:b5:55:8a:c6:0b:a3:8b:0a:
                    70:3a:11:50:3c:44:cf:88:e6:b3:4e:4d:73:ea:72:
                    de:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:88:0B:D6:7E:05:9F:0A:47:7E:FF:53:98:4B:99:11:C8:31:65:63
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3642f1fa-fa6b-4cfe-b125-733951f3ebaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.101.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5f:84:b0:85:1e:f4:de:de:27:d8:26:6d:42:1b:fd:5b:11:cf:
         6a:b3:f9:3d:91:92:c0:f2:b4:a2:ce:f4:6f:2a:7f:9a:46:57:
         80:d8:98:ff:e4:b3:33:7d:f5:3e:33:9f:f8:22:46:64:34:03:
         5a:37:3a:4d:88:c4:e4:d5:cd:a5:ff:30:17:63:35:bf:42:f7:
         ae:b5:af:cf:b4:9c:39:c6:41:08:2e:4f:94:27:e5:25:8a:56:
         40:54:f9:03:1a:6c:2d:d6:b6:d1:21:c4:c8:77:7f:49:09:ec:
         a7:ed:f7:30:74:58:87:e8:e9:24:3b:98:ed:85:43:6d:0b:a7:
         55:7f:d5:15:46:5c:70:cc:9d:f1:43:29:e0:9f:ba:53:b5:98:
         9e:7b:37:f6:be:0c:ac:19:74:50:87:6d:ea:0e:08:3e:06:e6:
         01:76:8a:dd:45:8f:af:72:87:1e:af:c8:d0:5b:fe:36:9d:30:
         d5:a1:8e:4b:f5:05:aa:4a:84:48:63:9b:12:30:f8:09:61:f2:
         b4:5a:38:59:25:18:fb:73:9c:42:f1:02:4f:72:7b:84:15:c5:
         9e:c2:e2:26:c0:b2:35:52:9b:2f:81:2e:79:3f:73:20:99:67:
         37:db:2c:3f:32:88:19:3f:6c:d0:7a:84:1f:9e:d4:2e:dd:d4:
         9a:60:c9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:50:08 2026 by rpki-client