Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6177c01a-062c-4ee0-a13a-c6306967b6d0.roa
File:                     6177c01a-062c-4ee0-a13a-c6306967b6d0.roa (raw, json)
Hash identifier:          NNZTAaKPd+bwrN87xTogPHjMg0WpSP1YibON2mXMF2E=
Subject key identifier:   EF:F4:0B:AF:48:02:43:C7:5D:80:B3:6A:EA:D9:76:C8:EE:16:DC:BB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2A1896D4D5436992E83F7F06F2D9428799690FDD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6177c01a-062c-4ee0-a13a-c6306967b6d0.roa
Signing time:             Tue 04 Aug 2026 00:20:38 +0000
ROA not before:           Tue 04 Aug 2026 00:20:38 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        174.129.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:18:96:d4:d5:43:69:92:e8:3f:7f:06:f2:d9:42:87:99:69:0f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 00:20:38 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=b9d853db97117a0ddf7bf22ee20a18e7f788f21313d0768231636ea4573765b6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0a:2b:c6:37:82:bf:cc:88:6e:f5:28:b0:9b:
                    62:ac:65:c9:3a:de:40:90:99:69:e6:47:39:42:26:
                    cc:9a:b3:4b:e6:fe:90:85:04:d6:8a:62:b5:e6:fa:
                    7d:6e:39:15:29:bf:e1:63:ee:69:37:7d:e9:be:49:
                    fe:87:8a:5e:6a:72:44:bb:04:bd:88:f6:72:f5:10:
                    e4:7f:b3:58:a6:8c:9e:81:c2:55:71:d7:4c:e1:1a:
                    af:6f:1c:0e:4e:20:c0:4f:5b:59:f7:27:9a:b1:f1:
                    31:5d:f3:d9:8f:d9:c1:26:94:64:9b:c0:38:e4:4c:
                    8f:1a:95:c7:c4:06:16:54:d6:02:0b:73:e7:12:ad:
                    33:36:35:8b:99:df:17:22:ea:10:42:4e:e7:52:b9:
                    b1:a5:51:ea:95:07:74:88:25:0f:5e:47:a6:0c:67:
                    e6:32:1f:20:f3:6a:06:6c:6a:5e:f9:6b:4e:30:b2:
                    5f:db:fc:5a:14:08:b4:96:d0:75:d4:c9:f0:7f:bb:
                    2f:54:b6:f6:14:11:d1:21:31:23:b7:0d:a7:a9:bc:
                    9b:54:d0:f4:c3:28:ed:70:df:36:ed:8f:dd:bc:a8:
                    3e:2a:5f:c5:04:5d:7f:9d:00:70:01:27:3f:dc:0e:
                    20:54:b8:e9:37:ea:b7:52:e8:df:b8:4c:55:de:9d:
                    35:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F4:0B:AF:48:02:43:C7:5D:80:B3:6A:EA:D9:76:C8:EE:16:DC:BB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6177c01a-062c-4ee0-a13a-c6306967b6d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.129.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:bc:36:ac:ef:01:62:67:d7:2f:bd:32:c7:0a:27:4c:23:5a:
         b2:9a:5f:92:5f:93:7e:79:a5:c8:4e:b2:58:44:5b:b5:a4:d5:
         5e:40:f4:a2:d3:a7:6f:5d:3e:34:eb:47:c6:c1:dd:10:ee:4b:
         69:6c:d0:d7:c4:87:3a:9b:cd:3e:8a:a9:db:3f:c1:47:50:58:
         76:32:1f:01:41:3a:d1:14:92:5e:2d:fe:81:a1:23:6d:bd:28:
         1e:48:a0:60:c2:16:9f:d9:6e:ff:a5:01:f1:bd:dd:e5:fe:08:
         9e:85:0c:8d:f9:3c:8d:5d:5f:60:c8:55:98:87:f8:a9:b0:33:
         24:8c:8c:f7:bb:cc:63:53:25:92:c0:d3:be:28:c4:94:5c:5b:
         de:3f:78:9a:da:ce:90:49:c6:c9:75:fc:bd:c7:a9:f5:ba:4b:
         e3:46:7d:c8:a1:d5:1b:ef:d3:7f:e7:93:7a:48:e1:cc:56:38:
         cc:45:cf:a8:1f:93:a8:45:61:27:6f:da:0f:0e:a9:c2:e5:33:
         df:34:fa:76:8d:d2:77:47:ce:4a:a4:08:8f:2e:7c:3e:e4:40:
         a5:c4:ec:b9:43:8d:9f:b4:c1:50:3a:0b:bc:4b:08:22:4d:7c:
         d1:83:72:31:cc:51:04:e1:bb:4a:1e:f7:18:8a:a2:e5:38:73:
         fc:9a:2a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:27 2026 by rpki-client