Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36aa37a5-85a5-4267-a40d-909515892745.roa
File:                     36aa37a5-85a5-4267-a40d-909515892745.roa (raw, json)
Hash identifier:          63Gw17F0gOdqfH4Cz1Jep7/3ApzR37Cc/Z1SOzHA6Mw=
Subject key identifier:   6C:EF:25:6D:2E:37:1D:DD:82:6B:78:18:E2:9B:B2:CD:93:29:43:E0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       45A7DCE5D6B3DD637B2264C7D2F91169ADA46D0E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36aa37a5-85a5-4267-a40d-909515892745.roa
Signing time:             Sat 01 Aug 2026 00:41:27 +0000
ROA not before:           Sat 01 Aug 2026 00:41:27 +0000
ROA not after:            Fri 30 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        205.184.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a7:dc:e5:d6:b3:dd:63:7b:22:64:c7:d2:f9:11:69:ad:a4:6d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  1 00:41:27 2026 GMT
            Not After : Oct 30 23:59:59 2026 GMT
        Subject: serialNumber=58444c257504dfd7b04c74b61393a45f2be2818b7302f69a1ccf209c1348cc1b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5a:13:9c:2b:8d:8b:74:ab:9a:db:f8:3e:5d:
                    07:23:c4:2c:ec:7f:1f:8a:e6:5a:90:32:42:17:d8:
                    a5:ce:4e:7e:26:df:e7:96:58:27:3d:31:1e:41:27:
                    e0:9f:93:72:8c:62:84:49:76:46:db:e3:dd:d4:67:
                    e5:64:57:38:01:9e:ea:ef:3d:e9:77:64:b6:e9:e3:
                    ff:2d:e4:85:97:e9:e5:50:f8:0e:50:82:a6:a8:85:
                    8e:fe:16:c7:a6:3a:96:49:20:65:db:51:b3:2a:4b:
                    43:21:67:1d:a3:66:df:ab:e0:08:a6:0b:30:e2:1e:
                    b8:c1:8d:91:6f:50:f9:b3:d7:48:39:0e:34:4d:82:
                    19:0e:9a:a5:fa:52:5c:46:c1:42:06:15:25:32:13:
                    b7:82:15:3c:49:8f:ae:21:18:9a:7f:c4:86:83:c8:
                    01:ab:4f:d6:24:a9:95:5e:36:1b:6f:b8:0a:7c:85:
                    82:6f:6b:ca:1c:78:d1:d5:48:8b:a1:1e:47:06:da:
                    09:4b:8b:70:38:ba:d3:34:6b:6a:6e:4d:98:66:5e:
                    c9:22:92:0d:64:ef:a9:fa:fc:a5:8c:7e:b6:8c:77:
                    85:0d:94:b1:e3:e2:7a:c1:97:27:ba:a7:48:f7:9a:
                    3c:e3:08:21:9a:91:be:14:d0:93:fa:fc:d8:65:c2:
                    c0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:EF:25:6D:2E:37:1D:DD:82:6B:78:18:E2:9B:B2:CD:93:29:43:E0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36aa37a5-85a5-4267-a40d-909515892745.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.184.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:8e:b4:f3:68:da:cf:c4:0e:ab:76:79:40:8b:7e:4a:90:aa:
         03:91:04:89:dd:56:94:70:d1:07:b2:54:94:40:f0:06:47:c7:
         8a:8f:b1:9b:af:19:c3:ef:78:f3:b9:93:aa:d6:11:64:03:3c:
         b8:03:18:b5:66:a6:5a:bc:52:ac:58:ba:4d:64:cb:d3:75:e1:
         c5:8e:cf:b5:fb:95:4a:56:7f:ac:a9:50:5f:12:a8:43:66:ae:
         42:f0:60:01:ea:2b:02:e2:6e:85:d2:f4:68:aa:07:a9:7e:9a:
         0e:30:47:63:df:de:86:0b:22:e6:10:d4:db:9f:9a:f6:d9:0d:
         43:45:0f:b6:a2:2f:0b:55:d6:96:dd:2b:68:69:e2:53:08:f8:
         46:b8:0e:83:69:cb:96:b7:83:cb:6e:52:5d:8c:ea:29:de:19:
         10:a6:0c:b2:95:8e:eb:58:8e:6c:64:32:e7:09:62:f0:46:64:
         8c:51:88:56:d4:6c:09:03:a3:67:c3:1f:72:34:04:ad:41:57:
         c5:ae:20:93:fd:a3:43:57:69:a8:e8:55:6c:fc:6b:b7:5a:7a:
         2a:40:53:02:e0:6a:7d:d7:55:3a:14:ee:10:b3:56:0a:ae:77:
         17:c4:42:ed:e8:1e:2a:8c:41:10:41:4f:3f:08:15:74:61:21:
         03:97:5f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:44:53 2026 by rpki-client