Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ef35af6-a704-4311-b43f-c62b39327200.roa
File:                     5ef35af6-a704-4311-b43f-c62b39327200.roa (raw, json)
Hash identifier:          AAbkv6LNQZU27wGcpvaq8mF0Iy7UOMRo1mmJWI0fdKo=
Subject key identifier:   0E:C0:5C:54:21:DD:65:FA:BB:5A:EB:77:96:95:69:7D:B4:29:EA:A6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       19914F6E141F1F7D0D3113762B1CFEA684674FAF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ef35af6-a704-4311-b43f-c62b39327200.roa
Signing time:             Tue 06 Oct 2026 00:40:08 +0000
ROA not before:           Tue 06 Oct 2026 00:40:08 +0000
ROA not after:            Mon 04 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        99.105.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:91:4f:6e:14:1f:1f:7d:0d:31:13:76:2b:1c:fe:a6:84:67:4f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 00:40:08 2026 GMT
            Not After : Jan  4 23:59:59 2027 GMT
        Subject: serialNumber=5542ad3c1e82fe9e20707b8160ea1d3a52f23f2ada3f7e5b14569cc13c78f150, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7e:7b:2e:f3:cc:65:9e:31:b4:38:ff:18:ef:
                    e0:d1:3c:c7:cc:19:24:1b:d8:c7:ae:6e:02:6f:f6:
                    49:a8:44:99:1f:bf:e3:f9:d7:49:7c:ef:10:90:9c:
                    19:d9:76:0c:16:99:ca:60:8c:0e:a7:ef:cc:58:89:
                    92:e3:0a:03:70:ee:60:26:00:5d:f1:f9:f1:8f:46:
                    4c:0b:35:91:17:8c:47:e9:96:e0:6a:d8:a5:23:55:
                    43:65:fd:71:e8:e1:5f:0d:ba:50:95:7d:7e:80:71:
                    ff:c4:1d:01:97:d9:79:0f:64:be:d2:cd:4d:3d:e1:
                    31:71:2c:c2:b2:93:fe:ae:ae:a6:74:11:80:7d:6b:
                    23:7b:7d:22:ef:99:71:77:83:42:bc:ed:a8:3b:5a:
                    0d:b1:a1:0e:ee:38:84:5e:1f:09:65:3b:d0:b2:e3:
                    de:5c:e4:50:c7:6b:49:a3:f3:5c:b0:34:8f:cc:1f:
                    61:6f:07:45:bf:07:23:27:6d:e2:00:d9:15:7a:1c:
                    ad:ec:4a:e0:e6:6b:e0:06:38:30:d9:3a:a7:00:4f:
                    07:7d:22:8e:21:7a:61:de:9d:e1:7a:d0:76:ff:af:
                    11:5c:fe:11:40:29:42:bf:35:be:8b:40:ff:5b:40:
                    f7:ba:40:70:79:ae:58:44:83:ae:44:88:4e:33:69:
                    c7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C0:5C:54:21:DD:65:FA:BB:5A:EB:77:96:95:69:7D:B4:29:EA:A6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ef35af6-a704-4311-b43f-c62b39327200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.105.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         36:eb:79:f3:03:a1:67:f9:ef:fd:6d:9c:60:79:f8:98:72:17:
         bb:e2:42:11:57:e0:8e:a5:10:24:db:36:52:82:62:2f:6f:47:
         e3:96:ad:ac:7a:7f:c2:04:a2:ca:9b:a3:1c:77:83:20:82:48:
         27:45:65:f2:a6:f4:fe:6e:36:0e:63:34:c5:47:c7:15:07:c6:
         f4:de:9c:8f:3f:f0:3f:62:62:e1:b6:a6:d2:29:27:03:2e:f0:
         b5:6d:45:7d:b5:1b:79:48:58:d7:89:40:87:37:2f:31:17:f9:
         f7:f4:93:86:de:1e:22:93:f1:96:d8:04:5a:0f:b6:ba:ab:95:
         b9:3e:57:43:fa:86:a4:35:51:e8:c7:12:01:b5:13:34:c5:9b:
         ef:f9:25:8d:a4:67:9e:ba:6a:47:f0:45:b5:c6:85:56:ee:49:
         53:87:3a:c2:98:3c:c3:f0:59:80:0b:0e:e2:27:99:fd:be:98:
         89:04:a3:cd:43:fc:99:57:45:49:10:de:77:4f:73:04:80:d0:
         ba:0a:45:5f:e6:be:f2:c3:44:06:d2:3f:bf:fd:54:e4:d5:39:
         5c:bd:e9:7c:96:bc:41:24:2f:f7:19:c2:6f:15:c2:72:2b:42:
         97:79:66:16:cb:f0:e9:c0:0b:69:8b:3f:72:34:92:c8:f5:4a:
         49:c8:b2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 02:45:30 2026 by rpki-client