Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fd8acf6-d0a7-49f3-8c69-919bc20fe541.roa
File:                     6fd8acf6-d0a7-49f3-8c69-919bc20fe541.roa (raw, json)
Hash identifier:          9jUF0gW84iiSWu4Nb2HTZDJxMrlvJtJh2Gg22LmvvWE=
Subject key identifier:   BD:B5:A5:29:EF:CC:14:08:40:4F:91:88:55:6D:8B:BB:EA:E3:CF:AD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2ADB0D79FF080B513A2A639A87F40D91B233C55E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fd8acf6-d0a7-49f3-8c69-919bc20fe541.roa
Signing time:             Sat 08 Aug 2026 00:21:56 +0000
ROA not before:           Sat 08 Aug 2026 00:21:56 +0000
ROA not after:            Fri 06 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        32.164.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:db:0d:79:ff:08:0b:51:3a:2a:63:9a:87:f4:0d:91:b2:33:c5:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  8 00:21:56 2026 GMT
            Not After : Nov  6 23:59:59 2026 GMT
        Subject: serialNumber=762a8a5eb72e2d9d6970b99b91efe9742cf877a580eb66fbd7c59806f2a71b90, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:66:0a:da:cf:35:04:6d:61:c3:fa:01:46:de:
                    86:32:7c:19:7d:ab:71:d4:9d:a9:26:f2:e3:af:11:
                    28:10:d5:02:e5:2e:ce:36:72:46:18:eb:71:77:84:
                    d8:d7:ea:13:bc:91:d2:e2:ba:fc:70:23:e8:5b:1c:
                    7b:4c:e2:ca:9a:22:78:d9:c3:8c:53:49:b0:d2:5a:
                    35:1c:13:fd:a5:e2:48:94:df:37:26:4e:6d:d5:cb:
                    33:97:e8:eb:45:4f:18:d9:a2:65:90:35:c3:4c:5f:
                    ed:3f:2c:5a:9c:63:19:a1:d5:bc:e2:7d:fe:dd:ee:
                    ba:97:54:d5:70:32:5b:93:b8:48:7f:dc:6d:ba:19:
                    dc:9d:98:89:b0:8c:bc:a1:e0:29:0d:71:71:77:64:
                    5b:bb:2f:02:7a:1b:f5:b2:66:d1:ac:b5:86:ca:a7:
                    0f:8a:8c:75:e6:72:db:96:61:1b:3a:d2:e7:7a:6b:
                    76:34:4a:6f:f4:c0:55:7d:07:69:e9:b1:e9:c4:f9:
                    80:f5:80:10:99:56:da:2c:2b:07:95:20:00:55:46:
                    0e:b4:de:cb:df:b3:be:5f:29:ec:61:10:a9:b2:47:
                    9d:3e:34:e1:42:50:da:ed:67:d4:db:e5:77:53:68:
                    9a:02:b2:4b:4c:21:85:fd:b3:c8:90:f2:a7:23:b3:
                    c0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B5:A5:29:EF:CC:14:08:40:4F:91:88:55:6D:8B:BB:EA:E3:CF:AD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fd8acf6-d0a7-49f3-8c69-919bc20fe541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  32.164.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         91:28:39:a7:a7:ab:7e:5a:6b:d5:08:c7:81:90:bd:06:44:90:
         e3:3b:27:c8:08:40:a8:05:81:ef:8c:2f:aa:e4:c5:67:f0:f6:
         b6:72:34:a1:ad:5d:d9:ff:e4:48:38:16:2c:a6:f0:78:bd:34:
         e7:f1:8f:96:21:a2:22:d5:31:f9:f8:43:95:e5:71:74:6f:85:
         f9:0c:f2:da:51:b0:8a:59:3a:94:93:e7:e3:38:43:87:16:5e:
         9a:dc:21:3a:3c:1b:03:6f:7d:c2:16:34:d0:3e:32:f5:08:0f:
         da:2f:10:ac:c0:0d:c4:dd:3d:74:e1:06:63:0e:aa:80:5e:38:
         a5:0b:b3:c9:22:fa:14:c9:12:c5:d1:93:31:f0:03:87:fa:19:
         71:e2:3b:f6:6f:4d:4f:6d:a1:57:2a:d7:36:e0:37:3c:5e:43:
         59:09:1c:00:38:cb:8a:84:23:59:23:ec:d7:0b:43:88:b3:a0:
         93:e7:49:29:8d:1f:87:5c:17:b6:20:76:8f:9b:60:90:92:05:
         c1:36:71:3f:27:13:90:2f:4f:58:16:eb:a0:ab:8c:a2:33:74:
         40:7c:34:93:a6:d1:c3:7e:dd:c7:88:83:5c:29:84:77:c1:74:
         84:e6:5d:e4:39:50:13:c4:71:d1:5f:d3:28:06:df:f1:74:24:
         ee:f9:12:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 11:37:37 2026 by rpki-client