Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/617df86b-9cc7-4caf-ab73-d26f39bcdfc8.roa
File:                     617df86b-9cc7-4caf-ab73-d26f39bcdfc8.roa (raw, json)
Hash identifier:          wQHqdzO8Qwh4Tsp7V/mNWtdNjpf3CR3tRvCi7NyNLy0=
Subject key identifier:   C7:9B:6A:F3:AF:D3:D7:22:89:F8:77:D4:1E:E4:B6:12:B0:79:C7:9A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       40EDD4EBDF7F69B916BE098C00FE441BCDD94543
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/617df86b-9cc7-4caf-ab73-d26f39bcdfc8.roa
Signing time:             Tue 18 Aug 2026 00:00:07 +0000
ROA not before:           Tue 18 Aug 2026 00:00:07 +0000
ROA not after:            Mon 16 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        23.234.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ed:d4:eb:df:7f:69:b9:16:be:09:8c:00:fe:44:1b:cd:d9:45:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 18 00:00:07 2026 GMT
            Not After : Nov 16 23:59:59 2026 GMT
        Subject: serialNumber=0c4372ef6268ef959a37c22100888986e0821b7eea054baaf413d3cf9afae47e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:db:2b:d7:c7:9e:86:af:14:f4:a2:68:5b:
                    12:79:26:47:8b:53:f4:72:43:bb:1c:26:23:93:bc:
                    25:1c:5f:8f:59:85:5c:b7:df:5f:0d:da:38:30:ba:
                    13:5b:4a:2f:93:4a:83:0a:f3:37:08:9b:97:a9:b8:
                    ae:19:66:59:50:bc:b0:2c:6e:f1:0b:48:d5:cd:46:
                    95:ba:77:74:30:b3:e0:8e:bc:f5:50:93:13:5a:d7:
                    0b:e6:6c:ba:55:d3:a8:96:fb:84:bd:4e:e6:8a:6f:
                    4f:32:63:75:89:c6:dc:16:5c:be:5b:20:65:22:0a:
                    d1:ef:53:b2:c2:56:02:73:8d:c5:52:1d:86:dd:27:
                    30:6b:b8:35:b4:07:e9:ef:37:01:e4:80:1c:02:b2:
                    d5:dd:f7:81:37:bb:38:65:61:19:09:a5:dd:29:36:
                    7c:51:ee:9e:34:2f:5e:a3:48:8c:c8:9a:97:ff:df:
                    23:43:64:ab:d1:5e:3c:2e:31:30:1a:f2:63:10:80:
                    4f:a3:48:07:1d:0e:b8:fa:4e:d2:32:60:8a:72:71:
                    f4:8c:23:71:ef:e0:e0:ad:30:9e:e3:14:e3:cc:29:
                    11:d4:0c:62:c0:07:3e:6f:8f:4a:46:6f:88:fe:29:
                    fe:1d:ff:7b:d7:d9:e2:2d:96:bb:27:e3:4d:e1:2d:
                    3c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9B:6A:F3:AF:D3:D7:22:89:F8:77:D4:1E:E4:B6:12:B0:79:C7:9A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/617df86b-9cc7-4caf-ab73-d26f39bcdfc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.234.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:16:e9:91:10:70:77:f5:c2:67:07:bf:e8:57:ef:be:49:05:
         73:e8:28:a4:00:90:05:e4:90:3a:f0:a8:fb:42:d2:a8:25:f3:
         15:87:95:f9:0e:44:f1:2d:70:6f:de:27:a5:41:7c:55:79:64:
         c9:44:01:38:05:06:87:1a:0b:77:0a:bb:4e:36:45:fa:a4:1a:
         bb:28:87:e1:96:e2:86:72:c3:9a:61:51:8e:e2:d4:1b:77:95:
         a8:6e:16:5d:17:7b:d4:11:6c:11:b1:14:cc:ea:34:47:88:c4:
         d2:9c:b1:58:75:10:fc:39:52:e9:a1:21:cd:a3:e6:1d:b5:87:
         b5:4b:cc:05:61:fa:18:98:18:f0:30:70:e0:9a:f4:a6:0d:03:
         5c:a4:a4:cc:29:dd:46:41:b5:0e:f8:82:b1:06:be:ee:64:0c:
         d6:52:70:41:7c:b0:6f:35:21:b6:3a:cc:e8:54:d9:71:08:8d:
         b0:b9:7a:bc:ca:6d:cf:64:fb:2d:55:b2:f9:37:1b:a9:35:cf:
         8f:fc:f3:76:71:34:c0:01:f3:fe:7c:4c:93:f5:84:8f:0b:3a:
         cf:ab:3d:de:ff:0d:72:85:bf:d7:f2:b9:7a:22:2e:97:4f:cd:
         e0:00:f4:e3:80:d9:3b:b4:96:b8:5a:e7:22:6d:f6:e7:f5:15:
         51:41:5d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:13:57 2026 by rpki-client