Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45880192-1fc7-4dc6-9421-bbcd6f0736bf.roa
File:                     45880192-1fc7-4dc6-9421-bbcd6f0736bf.roa (raw, json)
Hash identifier:          Lb+s/HDL5GJcNZHCyE+9RHnjHUbyWMaZYUJsZwGuon8=
Subject key identifier:   5C:7F:34:8C:2A:B5:F8:4B:A3:B0:43:F6:D6:8C:44:DA:96:A0:21:A8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1C2E52572607E8A611ED7543DB0B1B94712E0B30
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45880192-1fc7-4dc6-9421-bbcd6f0736bf.roa
Signing time:             Tue 06 Oct 2026 13:33:01 +0000
ROA not before:           Tue 06 Oct 2026 13:33:01 +0000
ROA not after:            Mon 04 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        83.160.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:2e:52:57:26:07:e8:a6:11:ed:75:43:db:0b:1b:94:71:2e:0b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 13:33:01 2026 GMT
            Not After : Jan  4 23:59:59 2027 GMT
        Subject: serialNumber=50e6415473bea8a213862ea5043aabf1e1e1e9ee52000e759b4df7cffba0f65e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f4:af:24:3a:96:e9:92:af:9b:26:1a:10:85:
                    d5:32:e1:80:b6:81:28:17:ab:78:95:89:77:23:8c:
                    bc:d2:2d:d3:c7:cb:7d:ba:86:dc:9a:f4:2c:6c:13:
                    30:b6:28:3b:2b:b7:55:a3:51:22:77:12:2e:d9:b5:
                    03:a4:dd:ca:3b:85:4d:30:dc:ca:ab:9c:b9:62:15:
                    28:da:1d:75:92:69:76:c0:2c:15:c1:c9:60:f0:63:
                    01:cd:97:78:a2:3e:ef:29:b6:64:39:6a:86:87:e8:
                    17:2d:37:79:ab:b2:2b:f6:ba:6d:29:2c:c1:e1:28:
                    04:71:53:22:7f:e3:0c:b4:ee:6b:2a:b0:95:21:56:
                    f3:fc:82:47:36:16:17:ac:35:dd:f9:d5:19:a0:9c:
                    9d:e6:d1:b3:d6:43:fa:85:b1:f3:9c:63:49:be:fa:
                    5e:58:73:0c:da:04:fb:fd:4b:4e:8d:81:9f:8a:28:
                    c6:d0:6a:aa:3d:c7:26:b6:25:e5:a8:64:eb:04:34:
                    bd:24:45:a4:93:a9:25:d6:1b:25:62:16:ae:42:04:
                    54:d1:81:4e:1c:5b:96:e8:96:3a:aa:70:74:17:a3:
                    5b:c5:13:ac:4e:6d:d1:11:d1:9e:90:1e:c8:0b:66:
                    48:89:c2:e6:9b:b0:10:f4:3e:76:26:aa:4f:f2:17:
                    b2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7F:34:8C:2A:B5:F8:4B:A3:B0:43:F6:D6:8C:44:DA:96:A0:21:A8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45880192-1fc7-4dc6-9421-bbcd6f0736bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.160.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:05:16:d2:26:92:0d:6e:a2:08:06:f6:10:45:fe:f9:6d:ee:
         b6:eb:e2:5d:ab:d3:40:d0:69:78:6a:0b:49:32:a2:5b:c0:0c:
         29:a4:90:b1:7b:56:39:34:fb:48:f3:3e:42:de:b5:92:bd:22:
         22:98:f3:12:03:01:ab:16:9f:4d:11:04:ce:3d:eb:2d:fe:16:
         6a:88:90:2f:bc:ff:9f:85:84:93:39:0f:de:64:7b:ce:e7:5e:
         8f:80:59:80:79:28:d8:19:ae:8a:13:47:c1:75:aa:af:88:9e:
         81:73:21:2b:df:48:24:dc:86:6c:b4:9f:2a:f9:0d:63:6e:70:
         9b:90:b8:c6:12:61:12:7d:83:63:70:66:9a:37:76:1f:4a:13:
         ab:35:49:4a:cd:80:b0:f9:07:02:21:be:3b:02:0b:17:08:fc:
         21:4f:f0:a9:6e:2d:f1:af:1b:03:99:04:fb:81:12:ed:e3:5e:
         70:ff:93:77:f1:59:17:84:0f:f1:ad:e9:c7:51:7a:89:bb:72:
         38:2b:79:41:79:52:b9:27:d7:db:31:30:e4:ca:cf:bf:f8:16:
         3a:1a:21:0b:3f:ac:74:76:af:1a:19:e9:de:23:30:99:52:db:
         6e:91:22:7c:24:37:f3:2f:54:58:20:5a:52:9d:e7:80:2b:ed:
         c4:9b:e9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:32:38 2026 by rpki-client