Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77f68970-d1fc-44f1-b19a-60ec049cd06a.roa
File:                     77f68970-d1fc-44f1-b19a-60ec049cd06a.roa (raw, json)
Hash identifier:          RoYS9eg9Yt9/iU3qj+Y7w8uN20yRRirO7Mwr2oadjPQ=
Subject key identifier:   52:CA:B3:60:8C:EE:D6:64:6F:95:F9:0E:EC:6A:95:A0:52:44:6E:71
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       55FD0DC090DFE9F25EA6FAF1FE79F790ABD43C93
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77f68970-d1fc-44f1-b19a-60ec049cd06a.roa
Signing time:             Wed 05 Aug 2026 00:41:10 +0000
ROA not before:           Wed 05 Aug 2026 00:41:10 +0000
ROA not after:            Tue 03 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.153.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:fd:0d:c0:90:df:e9:f2:5e:a6:fa:f1:fe:79:f7:90:ab:d4:3c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 00:41:10 2026 GMT
            Not After : Nov  3 23:59:59 2026 GMT
        Subject: serialNumber=eb7c2662da5d222c13c91d520e1221e758e80a2ce7152b0fe04b36232cbc7896, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ac:84:1c:83:b4:19:4d:0b:49:46:4b:04:0d:
                    0f:34:10:21:a7:d4:39:82:0f:00:d8:29:fa:0b:a3:
                    4e:63:82:95:96:5c:1b:7d:ba:5e:49:cb:62:3b:23:
                    d8:21:76:0c:63:25:e2:99:56:1a:e1:12:10:57:17:
                    7f:92:4a:5f:53:3c:9e:3a:df:3d:ed:a0:d4:38:d9:
                    ca:b6:57:8e:a2:48:ab:6a:34:37:b8:2a:5b:41:fc:
                    b7:21:ee:a5:97:3a:67:5d:0a:d7:19:40:41:fe:87:
                    2b:82:ba:29:df:cb:a2:d1:81:5e:7f:5d:d9:dc:bc:
                    f6:e5:38:60:d4:98:c8:94:d7:a4:ed:24:cf:f2:97:
                    99:9d:ba:b9:64:c9:7d:94:89:2f:c3:1a:1b:b5:40:
                    6f:b9:c8:b6:42:80:73:f8:80:da:4b:be:42:b3:00:
                    0d:b0:21:18:f6:a5:f5:44:12:5b:7d:35:68:3e:09:
                    31:15:f8:12:f7:38:8f:0d:2e:3a:5a:08:da:98:16:
                    48:16:cd:fa:82:dd:ed:3b:38:44:e8:be:35:06:be:
                    b1:43:4d:ab:29:11:9d:22:b5:68:84:2c:0d:af:00:
                    e5:0d:d2:21:8d:35:17:71:8a:b0:25:63:c5:a8:63:
                    c4:6b:57:df:01:9b:11:aa:6f:8c:5c:37:59:82:d7:
                    3a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CA:B3:60:8C:EE:D6:64:6F:95:F9:0E:EC:6A:95:A0:52:44:6E:71
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77f68970-d1fc-44f1-b19a-60ec049cd06a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.153.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d8:6e:0c:15:d4:c9:22:c8:e3:8d:6e:db:c7:7f:13:a5:22:ef:
         ba:a4:fa:be:e5:64:ae:eb:e8:68:fe:5a:eb:a2:a8:9b:a3:d4:
         83:4f:ef:05:64:8c:7d:24:14:55:af:62:86:c3:18:7d:d2:e8:
         fe:2b:fa:ee:7b:ae:8b:60:bb:fc:bd:89:b4:63:cf:cf:75:35:
         66:2d:a5:fe:2c:1e:6a:9b:ee:2c:82:57:f9:fd:86:cc:92:5d:
         e2:3c:0d:bb:b7:17:bf:ef:d5:1b:2a:2c:99:1c:dc:fe:65:88:
         e8:69:bc:d4:b9:69:92:a0:ac:f2:b7:16:28:e1:b9:c5:3f:29:
         0d:fd:ca:bd:f1:3e:66:d8:62:f3:0d:b5:6b:93:9c:02:75:b8:
         a8:74:a1:83:27:80:fe:c8:e8:6c:ce:a8:85:02:f7:e9:53:d5:
         23:4a:09:01:cf:11:4e:ac:14:c9:46:14:f3:1b:22:f2:45:c1:
         0e:66:54:5d:db:56:82:c6:f4:60:b2:8d:57:f6:3e:09:14:61:
         54:8d:43:9b:c8:4c:a5:8d:33:e4:a7:d0:35:07:24:a6:c7:52:
         cb:ee:30:e2:ec:c5:7d:1b:46:0d:09:e4:4e:aa:d5:31:ef:a8:
         cc:cd:2f:ad:83:1f:fa:b8:68:81:ba:8b:01:f2:ca:70:d4:1b:
         bc:4e:a8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 11:38:28 2026 by rpki-client