Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b328c46-ba48-416d-99ac-6a2f6f35ffd7.roa
File:                     4b328c46-ba48-416d-99ac-6a2f6f35ffd7.roa (raw, json)
Hash identifier:          WOpT/QY61gxm4WikqARnmxe6sHznyQzpJWZuIgxYOtY=
Subject key identifier:   18:BC:84:A1:44:44:0B:66:EF:71:37:75:BC:23:3A:13:BE:63:B1:95
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2E5FC89A1AE627FC81B7B5504B415B40466330
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b328c46-ba48-416d-99ac-6a2f6f35ffd7.roa
Signing time:             Sun 04 Oct 2026 00:20:10 +0000
ROA not before:           Sun 04 Oct 2026 00:20:10 +0000
ROA not after:            Sat 02 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        75.45.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:5f:c8:9a:1a:e6:27:fc:81:b7:b5:50:4b:41:5b:40:46:63:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  4 00:20:10 2026 GMT
            Not After : Jan  2 23:59:59 2027 GMT
        Subject: serialNumber=f877b091b2ad27cdcc3655812609f4613dbb87c32e3543fd82b5d0832f0b9d89, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:64:d1:bd:04:05:d2:95:63:af:71:98:ae:78:
                    af:e6:14:fe:1e:1b:d7:a5:ab:bd:7f:33:49:6c:19:
                    71:0c:38:4d:56:87:da:85:ef:1c:3d:98:aa:07:26:
                    ee:76:8c:d8:38:98:a9:71:ad:71:9c:86:5c:1b:30:
                    c6:10:71:5a:02:e6:30:be:ae:98:9e:2c:e1:94:48:
                    a5:95:29:22:f9:fa:18:a1:7b:82:a7:6e:e0:92:dc:
                    13:d6:d7:2f:73:70:34:fc:73:7c:a4:12:1e:c4:ac:
                    8e:2a:02:ca:b9:ff:b1:c6:d1:20:e4:48:9b:40:3a:
                    6a:33:0b:9e:b8:9d:bb:c7:52:85:8d:06:b6:23:54:
                    98:20:cc:9a:fc:cf:6b:1e:92:ea:9b:55:ba:8a:20:
                    a4:59:37:d4:50:4f:68:22:c2:17:80:88:b1:6b:22:
                    d2:1d:b4:bc:1a:31:52:ad:d0:05:f2:cf:69:57:80:
                    d1:ac:ca:ff:3e:a4:37:29:e3:b8:f0:52:1b:7c:38:
                    bc:fa:af:5b:e6:a6:83:0b:19:ca:8f:39:32:fe:aa:
                    d1:f5:08:9d:a0:bd:02:aa:59:e3:9e:56:f8:be:cc:
                    cf:62:98:22:34:83:21:c3:bf:bc:2c:8f:d8:22:b1:
                    f5:c2:cf:3c:56:b4:63:c1:cf:74:08:0a:b9:1b:5f:
                    96:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BC:84:A1:44:44:0B:66:EF:71:37:75:BC:23:3A:13:BE:63:B1:95
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b328c46-ba48-416d-99ac-6a2f6f35ffd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.45.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6a:20:ee:68:c0:ca:90:eb:52:12:66:1e:a6:df:17:55:ad:94:
         a3:37:1e:59:af:fe:bb:7a:bd:60:a5:8d:53:00:67:25:5f:ee:
         ba:55:3b:89:33:82:40:66:44:be:a3:d9:05:06:97:e9:db:6f:
         a1:74:fd:98:e5:5b:34:60:1f:55:df:0f:19:3f:4a:2f:2a:b5:
         6d:22:7d:c7:b5:3d:56:33:8d:78:b2:47:e5:d9:93:73:95:2f:
         53:2e:a6:02:e9:6c:c3:ac:15:76:3f:dc:57:90:56:72:03:44:
         c6:12:7d:ed:2c:cc:01:20:32:6f:65:40:da:ad:47:36:7b:e8:
         8b:cb:77:52:7c:a0:c2:91:0c:c1:8c:20:9b:ee:55:cc:29:0f:
         5f:06:45:ac:ec:07:ae:20:8a:93:fe:fd:c1:ce:71:d1:da:dd:
         26:8e:66:81:43:90:03:59:f8:ae:d0:25:74:b5:70:4d:82:8d:
         8a:5f:36:1a:57:ab:5f:cb:cd:5c:75:eb:33:72:b4:64:56:c4:
         b2:4c:9c:a1:84:7a:3e:d3:d3:29:f1:04:7a:5b:d0:2a:78:e2:
         9b:8c:df:b6:af:2f:0b:c5:be:ac:f9:26:45:b3:1e:3a:25:f3:
         73:b9:89:ed:94:36:26:70:08:fc:43:d2:7f:73:88:df:86:5d:
         81:ba:ef:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:43:59 2026 by rpki-client