Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54c55cc4-cd0a-40f9-907d-3ad9bd6cdda0.roa
File:                     54c55cc4-cd0a-40f9-907d-3ad9bd6cdda0.roa (raw, json)
Hash identifier:          eXTIY5NkUGwgsCrQU40OvFOO4zXhQDsHWL8U4vue1vk=
Subject key identifier:   A8:18:10:0E:87:DC:E5:0C:79:72:38:80:71:E0:BC:57:7F:6E:BA:DD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7862549389AB308EDA09DCA9B956BF1665B91574
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54c55cc4-cd0a-40f9-907d-3ad9bd6cdda0.roa
Signing time:             Fri 04 Sep 2026 00:00:49 +0000
ROA not before:           Fri 04 Sep 2026 00:00:49 +0000
ROA not after:            Thu 03 Dec 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        35.54.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:62:54:93:89:ab:30:8e:da:09:dc:a9:b9:56:bf:16:65:b9:15:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  4 00:00:49 2026 GMT
            Not After : Dec  3 23:59:59 2026 GMT
        Subject: serialNumber=d932827f1832988a91ed524e33cfa444f52d8ae19e90157bdf81caf06c27c960, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3e:76:24:b3:d2:5a:fc:22:6a:ad:c6:11:5b:
                    57:39:52:57:6a:41:3a:ce:36:2c:e5:38:85:c8:ec:
                    0e:0b:81:9f:81:11:76:1d:e7:7b:90:7d:d9:22:0c:
                    3d:da:f0:98:f1:50:65:cc:1e:ad:20:20:b4:97:fc:
                    3d:22:cb:34:45:48:f3:c8:dd:62:bd:9c:bf:83:52:
                    9e:3c:b8:b2:3a:e6:99:c9:ae:cc:cb:75:59:1f:90:
                    ea:d8:1c:1e:e0:73:90:e1:8f:ea:3d:70:c1:3f:64:
                    31:c7:71:8a:fb:7a:4a:c2:19:73:01:70:58:77:8d:
                    63:18:b2:4f:d2:cf:a3:f7:13:a6:15:67:dd:af:b9:
                    d4:2a:72:60:87:c1:d6:d9:80:7b:93:29:f5:26:bf:
                    5e:c0:c7:57:e2:ff:15:0b:ad:8c:b4:2d:b3:f0:40:
                    9b:e0:d6:ca:37:dd:3b:9b:55:7e:56:a9:d6:fb:05:
                    7f:1a:ba:87:0f:e0:c3:9f:86:df:b8:2f:b3:ad:fd:
                    78:f3:88:e6:58:93:59:4f:3f:b9:92:40:eb:4b:6a:
                    2f:a1:92:fb:48:03:6b:d2:d8:66:88:17:f4:f9:72:
                    08:65:4a:b4:90:e7:08:63:1a:ee:9d:03:ea:c2:74:
                    a8:db:d1:64:91:51:d5:d1:f8:db:70:dd:64:4f:74:
                    30:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:18:10:0E:87:DC:E5:0C:79:72:38:80:71:E0:BC:57:7F:6E:BA:DD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54c55cc4-cd0a-40f9-907d-3ad9bd6cdda0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.54.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         15:a5:33:89:b4:de:b2:89:fd:3d:da:a8:f3:3c:38:83:6d:df:
         de:c0:f5:ce:b0:ec:55:da:f5:ad:06:94:71:c9:8f:2e:d5:4f:
         0d:41:5a:6f:1f:bb:61:07:63:9b:c1:e7:ab:32:45:3f:7a:a8:
         40:b9:f0:34:53:23:30:41:65:b6:97:83:18:6d:3f:0f:45:44:
         a9:d5:bd:d3:65:5f:9f:57:84:bd:51:c0:5b:46:82:46:55:b1:
         9f:98:23:5b:02:c4:98:13:bf:c5:53:4c:c9:8b:30:85:07:7a:
         f3:fd:7c:b7:1c:66:74:e7:1d:69:02:39:5b:a2:08:fc:c4:8e:
         fa:ed:41:cb:c7:d7:a9:8c:dd:95:92:de:21:4a:2a:04:4a:df:
         e5:e9:63:23:b4:e5:90:08:f3:a9:74:14:8e:f3:22:b1:cb:0e:
         5a:ed:16:a8:a2:55:54:56:81:00:f1:2f:33:9b:e4:46:63:fe:
         0f:70:bb:b6:7f:dc:c3:53:67:d4:86:36:c3:bc:d3:d7:3b:33:
         05:3c:9d:af:46:c9:ae:ad:d5:a0:03:de:00:cd:57:40:bf:78:
         18:04:a4:e2:ef:d6:1a:79:7b:2a:e3:b2:41:60:b3:39:4f:7c:
         36:8f:95:81:c5:8c:95:a7:19:d4:da:e4:01:f6:55:f9:9e:2b:
         e3:f2:1f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 17:54:36 2026 by rpki-client