Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64416939-e386-4747-9efd-e38b0c06dbeb.roa
File:                     64416939-e386-4747-9efd-e38b0c06dbeb.roa (raw, json)
Hash identifier:          0yLLE0E7s+6v1mUKIGgGRMM385cuhcCkHbhcn+sx4GA=
Subject key identifier:   BC:BA:B0:C1:C2:93:83:84:77:9C:63:07:1C:45:9D:7D:3A:CB:8F:10
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       681241C848F6ED11A2A26BF2C8B2BAF36450575F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64416939-e386-4747-9efd-e38b0c06dbeb.roa
Signing time:             Sat 24 Oct 2026 00:41:13 +0000
ROA not before:           Sat 24 Oct 2026 00:41:13 +0000
ROA not after:            Fri 22 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        207.202.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:12:41:c8:48:f6:ed:11:a2:a2:6b:f2:c8:b2:ba:f3:64:50:57:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 24 00:41:13 2026 GMT
            Not After : Jan 22 23:59:59 2027 GMT
        Subject: serialNumber=7ae253661e9788594de0d5e6a9a5177a71713773f1a49fc7c7434bc1eaef4e0f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:77:ee:5e:41:ad:81:52:58:a2:46:3e:02:f6:
                    2d:f9:e5:02:a1:0a:c1:d4:02:ed:69:5b:7c:7a:91:
                    d2:ef:f8:99:10:2d:d3:c5:aa:27:37:e9:b6:7a:12:
                    4b:15:67:7e:86:33:e4:e4:7f:29:3b:50:41:98:80:
                    6c:0c:c2:19:85:ad:8e:bf:3e:5b:cc:0e:51:46:32:
                    86:08:ed:23:11:0a:50:95:c4:2b:0d:2b:69:1d:c5:
                    73:23:be:6f:f6:1b:5b:dd:3e:83:57:08:10:7b:23:
                    53:fe:c8:3e:58:de:93:f3:7b:4b:f5:5b:df:d0:3d:
                    fd:18:f1:05:5b:e1:e2:0a:e5:b2:d2:bb:9c:8f:10:
                    98:72:f6:b9:8c:80:eb:36:ac:b4:d8:f3:14:15:de:
                    41:e5:e9:8e:7c:a3:a4:01:a4:cb:5c:17:db:1c:85:
                    a0:c0:f9:57:19:8b:5b:00:a9:99:1b:e1:56:3d:02:
                    0f:3d:e5:bc:ce:67:f4:60:8f:dc:de:8d:62:9d:a0:
                    ef:49:08:d8:10:47:3b:f1:5d:91:eb:fc:47:3a:cb:
                    ff:b7:bb:f1:9e:c9:bb:92:39:4d:10:64:15:5f:75:
                    32:dc:75:34:37:6a:e1:a9:7a:99:ea:08:3d:7e:41:
                    73:ce:55:09:65:09:93:dd:ed:4a:98:35:21:42:11:
                    a4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BA:B0:C1:C2:93:83:84:77:9C:63:07:1C:45:9D:7D:3A:CB:8F:10
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64416939-e386-4747-9efd-e38b0c06dbeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6c:2a:5b:ae:e3:0e:3f:09:08:08:cc:a7:0c:98:a2:76:e9:06:
         5a:50:33:3e:e0:15:83:e9:f1:fd:fb:da:02:66:4b:31:9d:1e:
         00:f5:e3:00:2a:73:ce:e7:3a:c8:f5:13:47:70:bd:aa:b8:b2:
         30:86:3c:61:f3:cd:0b:6d:3f:6c:ac:50:70:13:1d:f4:f2:82:
         74:28:d2:ae:25:4d:bb:d4:68:63:cb:a8:c5:d7:7b:cc:d1:f0:
         99:b0:bd:1c:b5:1a:09:8b:f6:ef:c2:79:ad:77:3a:a0:c1:70:
         c7:8b:76:3f:ab:19:55:fa:9a:87:17:dc:e2:cc:2e:8a:0e:5d:
         d1:4f:82:8e:a4:2b:59:97:19:06:5c:a4:87:ec:9a:37:a8:c6:
         32:8b:6f:08:1f:9e:4a:c7:5c:eb:28:72:9f:ef:6a:51:20:3d:
         de:5e:be:4d:00:c0:2a:4b:d3:fe:05:ff:8c:76:d7:f8:d3:c4:
         ef:d1:e5:48:6f:c6:45:60:e8:f0:5a:a4:c2:ec:cd:03:d8:80:
         5c:1c:59:43:ef:8e:ee:78:28:f0:f0:b5:2f:8c:96:8c:1f:a3:
         70:f1:4a:8b:e0:f5:0f:1c:47:4d:c4:4b:d3:06:eb:9c:58:9b:
         2e:cb:cb:43:7c:eb:4e:b2:c2:2b:54:e6:82:00:42:ae:3b:76:
         39:00:eb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 17:58:26 2026 by rpki-client