Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a128055-89f2-4d33-91a5-5d6fcff45064.roa
File:                     6a128055-89f2-4d33-91a5-5d6fcff45064.roa (raw, json)
Hash identifier:          4xLQeJptTyu2Qk+nHhoGnG0RLoVNh0dbCGecTeKlgIY=
Subject key identifier:   29:F0:D9:E1:B4:04:E2:6E:FF:8B:98:9D:77:FE:50:5B:F4:C5:3F:8C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       308079CC3A26E032865B3A285C3E3283E6758054
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a128055-89f2-4d33-91a5-5d6fcff45064.roa
Signing time:             Fri 24 Jul 2026 00:20:38 +0000
ROA not before:           Fri 24 Jul 2026 00:20:38 +0000
ROA not after:            Thu 22 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        209.177.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:80:79:cc:3a:26:e0:32:86:5b:3a:28:5c:3e:32:83:e6:75:80:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 24 00:20:38 2026 GMT
            Not After : Oct 22 23:59:59 2026 GMT
        Subject: serialNumber=1cf109d711a644e7cbe7175f37835aa1d8aad26da183ee4be339fdb154e0b8fd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:99:33:33:73:89:20:ab:9f:7e:1d:0c:50:a2:
                    c4:b1:b6:d2:7e:36:d0:d3:82:59:7e:25:a7:85:17:
                    58:24:1a:ec:11:58:1b:b2:f0:48:32:59:39:ee:3f:
                    a1:25:7c:3b:55:b4:ff:1c:66:5d:7b:92:38:c9:c3:
                    04:2b:35:8c:45:ad:bb:76:47:ed:23:a0:a9:bb:89:
                    b7:98:74:97:09:c3:29:66:de:35:d6:0e:5b:1c:8a:
                    db:18:dc:62:04:6c:52:c4:d8:3d:aa:bd:55:46:91:
                    d7:8d:52:c4:50:12:68:1a:91:01:52:d5:56:71:98:
                    2b:d9:38:d0:cf:39:b6:8f:25:47:5f:bd:2f:0c:04:
                    2b:2f:ef:73:29:ae:6f:47:6e:52:2b:19:dc:c1:f4:
                    47:ec:56:f8:13:85:70:ad:65:6a:fd:67:df:25:af:
                    a9:52:00:4c:db:5f:e1:1d:02:3b:1d:3d:e5:92:50:
                    d5:f5:ff:51:d8:10:b3:1d:03:87:b6:65:05:c8:71:
                    eb:b7:15:bf:ff:ef:f5:46:69:6a:62:a9:3d:b9:3a:
                    c5:84:bc:72:cc:49:ba:32:2f:78:16:16:25:73:ae:
                    37:d8:c2:f2:87:41:52:48:e7:ee:68:f8:b7:6a:65:
                    39:d4:dc:ba:90:87:94:b6:d3:fb:08:95:7e:a3:11:
                    bc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F0:D9:E1:B4:04:E2:6E:FF:8B:98:9D:77:FE:50:5B:F4:C5:3F:8C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a128055-89f2-4d33-91a5-5d6fcff45064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.177.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         08:29:3f:25:2c:a1:6b:de:74:3b:c8:06:b7:57:8b:8e:2c:ae:
         78:fa:d2:c7:62:dd:4f:2f:9f:24:6b:05:19:e4:33:1d:78:c1:
         25:74:fd:9f:88:43:c2:5a:18:f3:18:0e:fc:ba:d8:6f:89:9a:
         27:68:f5:9a:b2:1a:97:f8:9a:70:1d:a9:d4:64:15:b5:e2:6e:
         77:cc:fc:21:82:27:7b:ae:a7:32:29:0d:95:33:cd:0d:9c:03:
         77:44:ba:30:ca:fb:4d:f0:5f:49:d9:9f:40:37:ba:23:14:a4:
         d1:f9:86:16:7a:70:81:f5:0a:1a:70:f0:77:38:3e:f4:22:a9:
         aa:9a:aa:e1:53:4e:65:88:73:f0:9d:57:60:ec:b0:e9:53:84:
         af:49:8d:96:58:0c:4c:b1:29:2f:a7:84:db:54:0a:b0:3e:d4:
         52:c7:f0:5e:2c:ee:25:18:7a:de:e7:97:c8:d7:06:31:eb:a0:
         db:39:16:a2:2c:8b:32:59:70:ea:80:77:13:16:ab:bd:23:d8:
         c7:64:a8:9c:68:e7:0c:a7:c4:e3:8d:d2:80:14:3a:75:d4:a2:
         51:cd:8b:4f:45:f3:b1:85:54:f4:97:0c:41:fc:a3:68:ba:25:
         0f:35:a3:bf:b8:72:c0:94:9f:a1:b4:b4:9a:13:5e:b4:7c:55:
         3c:34:4c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 13:24:17 2026 by rpki-client