Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fa0c82b-3f64-4bfc-8456-ad2c6fe0bc65.roa
File:                     3fa0c82b-3f64-4bfc-8456-ad2c6fe0bc65.roa (raw, json)
Hash identifier:          jS41W4V0E8wBOFNdK6IDjV8jazvzLTHwrpxMTIj4mU4=
Subject key identifier:   F9:C7:4C:D5:DA:E5:E8:12:8A:07:F0:58:DC:E5:98:58:83:EB:C7:7D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       62C7E229E4A3091127E79D1237AE042C4CA6AB9A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fa0c82b-3f64-4bfc-8456-ad2c6fe0bc65.roa
Signing time:             Thu 15 Oct 2026 00:30:13 +0000
ROA not before:           Thu 15 Oct 2026 00:30:13 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        158.252.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c7:e2:29:e4:a3:09:11:27:e7:9d:12:37:ae:04:2c:4c:a6:ab:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 00:30:13 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=654e99315115e7340d967264fab3ba8bd70c89d257924e7c88ca7c3508359be3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ec:0c:9a:00:7b:b7:25:1c:30:51:c7:b9:11:
                    42:9e:67:03:07:6b:4d:64:70:a3:32:d7:35:6f:25:
                    2d:b2:e7:8a:64:47:72:dc:01:62:29:87:33:18:e4:
                    6b:d8:16:5b:e5:05:35:e8:8d:a5:fe:f3:51:15:7e:
                    80:37:06:df:64:48:50:c0:19:a2:8d:4c:29:94:94:
                    b2:35:1b:b7:68:62:f3:78:08:02:b7:bb:4a:5e:a5:
                    a0:9b:c6:14:05:42:c1:06:66:08:24:d0:d7:da:3e:
                    5f:a0:d1:2b:b7:cb:e1:0b:4b:e1:f3:4b:0b:9c:80:
                    42:e0:df:03:81:8c:a0:79:ca:02:81:4e:22:bd:69:
                    e1:31:ed:4f:54:7d:b9:a1:b5:32:6f:17:8c:8c:21:
                    8e:4b:22:5d:80:62:9e:54:c9:24:e8:3d:2e:d2:80:
                    9e:4b:40:ae:27:74:01:63:e5:95:f3:3a:4a:61:d4:
                    e1:6e:d4:52:2a:69:49:57:8b:a1:7d:a1:ae:e6:08:
                    17:ad:de:bb:3d:34:38:66:35:6a:e1:ae:9d:df:2b:
                    0e:4f:cf:68:7b:e5:53:4a:ce:bc:a1:02:2e:e8:91:
                    d6:95:9d:ac:48:92:08:87:9f:a0:ee:0e:d5:9f:8b:
                    e7:f6:c1:b6:8a:b1:0b:ef:70:fb:09:a1:ac:f4:d8:
                    20:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C7:4C:D5:DA:E5:E8:12:8A:07:F0:58:DC:E5:98:58:83:EB:C7:7D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fa0c82b-3f64-4bfc-8456-ad2c6fe0bc65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.252.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         95:ac:52:f0:f0:00:22:9a:4f:1c:d4:a7:8b:d7:6d:be:2c:5b:
         76:5c:5f:e2:5e:e9:27:a6:72:14:5d:b3:6f:6a:ce:e7:d2:ff:
         e3:0c:89:07:ad:d0:ac:e8:1f:5d:f5:39:15:d7:c5:3a:fb:9c:
         57:43:ea:d2:80:a4:68:cf:b6:8a:40:f8:79:14:48:7a:ca:4e:
         6a:3d:a1:57:36:5f:77:68:94:eb:ca:96:ca:a1:f8:45:1c:98:
         34:bc:07:0c:cd:55:2b:44:50:f9:81:ca:55:ef:fe:e0:29:b6:
         9a:3d:39:e4:c8:40:82:c1:af:fe:94:50:30:41:ab:04:f6:8f:
         86:04:25:73:fa:01:66:c3:90:6a:d2:a0:2b:45:5f:a3:23:f4:
         35:69:63:82:c4:dc:4b:a8:07:5d:44:95:33:8b:cc:35:f8:61:
         95:f5:8e:86:02:c6:23:fa:b6:71:12:ef:56:57:22:9f:e6:a3:
         39:48:13:94:2d:03:f4:3c:2f:6d:7e:53:61:e1:0f:12:23:a7:
         79:5e:94:d2:03:83:66:3a:4b:82:45:c5:f1:d1:d1:99:aa:72:
         5c:f6:e4:82:46:5b:32:c8:d4:ab:d3:57:e7:58:a6:05:d9:64:
         62:2f:41:09:73:54:79:ab:d6:d2:d8:54:77:d0:a8:60:dc:3c:
         bf:90:73:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 02:44:58 2026 by rpki-client