Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/694cc990-6ba0-42d8-90f9-1c5d8b78a034.roa
File:                     694cc990-6ba0-42d8-90f9-1c5d8b78a034.roa (raw, json)
Hash identifier:          VBLrQd9muOJvo7T+NDXaoKRCF25/o7S2EnwOElxVPF4=
Subject key identifier:   95:17:5C:27:0F:CF:BA:FE:08:87:20:B3:E9:A5:F0:A1:C0:7A:89:0F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1089665E7E4F696F059249CD5D3BE07419A2B76F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/694cc990-6ba0-42d8-90f9-1c5d8b78a034.roa
Signing time:             Tue 04 Aug 2026 00:40:39 +0000
ROA not before:           Tue 04 Aug 2026 00:40:39 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        69.81.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:89:66:5e:7e:4f:69:6f:05:92:49:cd:5d:3b:e0:74:19:a2:b7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 00:40:39 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=ffdd2ca221f90ef42bb0ea29dc9d41d4ab488391c2317947b6afc2e276939a40, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:3b:fc:8a:31:f1:b8:cb:6c:ce:a2:19:ea:
                    ec:84:0c:7d:b8:55:62:0c:42:eb:66:fd:96:75:15:
                    a4:a0:55:b6:96:df:ac:70:0a:cd:a9:6e:95:47:71:
                    6b:a3:e0:d8:df:f6:88:7e:0d:0c:b8:b0:57:57:ea:
                    86:27:5b:5c:ff:79:fb:12:7a:39:5d:cd:72:f9:d8:
                    4a:90:41:6f:d2:18:dc:71:b9:3e:c4:dd:3b:11:88:
                    c4:6f:68:ed:dd:36:87:84:67:1b:64:8c:4a:f6:6a:
                    90:c9:72:e6:d8:b4:d4:36:7d:79:5b:02:3e:28:19:
                    0f:5d:0b:63:ba:fa:69:95:c5:a6:f6:cb:6d:cd:af:
                    5b:b0:60:32:d5:16:7a:17:fc:e9:90:06:7b:e9:2f:
                    2f:15:c5:a7:2e:d9:7c:af:c3:54:8d:0f:28:2c:e0:
                    b2:fd:3e:78:a6:37:14:0c:5c:fa:87:6b:52:44:60:
                    92:eb:8a:07:64:b5:45:0d:2d:2b:ce:90:4c:f9:5c:
                    3a:e3:f3:42:61:da:1c:44:f0:ea:3b:0f:83:49:f6:
                    26:76:7f:93:65:92:6a:82:9c:26:90:fc:6d:d5:25:
                    ac:5f:94:e3:7f:3a:f9:e7:76:f5:4a:d2:08:94:7b:
                    c7:cc:41:00:3b:b6:d9:a9:59:29:bf:71:07:06:f5:
                    3c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:17:5C:27:0F:CF:BA:FE:08:87:20:B3:E9:A5:F0:A1:C0:7A:89:0F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/694cc990-6ba0-42d8-90f9-1c5d8b78a034.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.81.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b6:61:e3:83:5a:a5:00:e8:4a:3a:ca:77:ef:ab:85:b2:36:8f:
         d3:0a:6a:9a:ac:d9:b4:4e:73:0a:ff:1e:3f:26:ff:ab:b5:c1:
         71:45:c4:f9:e7:46:49:dc:3a:f5:43:c3:0d:1d:aa:87:22:99:
         32:ec:6a:68:e4:1a:ea:dc:b9:67:be:eb:e3:9d:c4:3b:9c:6f:
         6d:b5:f3:f7:72:80:5f:5f:cb:de:11:64:ba:8f:87:ad:7d:75:
         8d:fe:43:28:bb:cd:b0:94:2b:41:4e:24:be:06:6a:25:09:58:
         59:2e:3a:e8:ba:98:35:e7:33:a0:1e:40:52:85:a5:73:b7:19:
         ea:ba:a1:14:76:d2:fd:27:28:a7:f7:95:91:68:e7:51:d2:d4:
         c5:be:35:0f:44:d4:be:37:38:e6:40:4c:92:94:b1:45:b7:99:
         14:49:25:c3:76:aa:cc:ab:dd:4f:2a:62:a0:dd:d5:f1:61:56:
         f1:b4:50:2b:29:c1:82:ff:4a:14:22:e7:bf:aa:cf:a7:29:2f:
         34:02:b3:5a:67:31:9e:4d:29:22:79:62:cd:73:c0:15:31:c3:
         e4:20:2e:d5:50:33:f6:18:c6:b9:f5:6d:f7:df:2e:df:64:b6:
         dd:a0:99:72:d7:35:a0:32:b6:d1:3a:94:28:92:2b:7b:9a:be:
         f4:a1:a8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:51:27 2026 by rpki-client