Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7840150d-90b6-4a97-8609-5a40556c4e1b.roa
File:                     7840150d-90b6-4a97-8609-5a40556c4e1b.roa (raw, json)
Hash identifier:          YpsmjSeqvR785RQ+U2U82lON8h8hlNSX5nn4t8GqJWE=
Subject key identifier:   C9:65:30:12:2F:C4:12:75:12:6A:66:18:8E:2E:4A:F7:CA:CA:4F:D9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1B235FF26EFD21F364B1E76288BB0ACC7310D10A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7840150d-90b6-4a97-8609-5a40556c4e1b.roa
Signing time:             Fri 01 May 2026 00:10:05 +0000
ROA not before:           Fri 01 May 2026 00:10:05 +0000
ROA not after:            Thu 30 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        205.149.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:23:5f:f2:6e:fd:21:f3:64:b1:e7:62:88:bb:0a:cc:73:10:d1:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  1 00:10:05 2026 GMT
            Not After : Jul 30 23:59:59 2026 GMT
        Subject: serialNumber=3b5c23f306ff5d7623fca590b99e85d6f8d4c954f5017b2a4fcfc15f27284882, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:ed:83:58:00:ac:6c:be:eb:37:3d:9a:eb:
                    b9:8a:5f:75:51:1a:a1:88:de:f3:fa:67:fb:6c:94:
                    33:4f:f6:16:84:86:e4:e5:55:37:51:33:d4:a8:38:
                    91:1a:b5:74:53:4e:d8:23:f8:e6:52:9b:38:28:6e:
                    98:1e:f9:02:26:14:c3:36:8e:90:f8:fb:eb:ea:04:
                    41:24:3c:c5:ad:28:a2:ab:df:2e:c5:42:12:dc:f0:
                    81:eb:74:f2:c9:3a:1f:6c:5c:67:5f:b9:ec:15:0c:
                    80:6e:af:c4:13:33:af:3d:69:4e:8d:9e:bb:ec:75:
                    28:57:41:23:91:17:02:4a:fd:b0:5a:d5:5a:97:26:
                    05:74:fd:e1:af:8d:03:06:09:60:44:1d:c8:f3:44:
                    a0:d7:ef:e7:50:83:99:b8:9a:32:0c:cc:56:0a:a8:
                    58:49:4c:61:82:a4:6f:30:9c:20:0e:be:a0:45:b8:
                    7e:b1:fd:43:16:4e:9d:89:70:4d:79:62:10:dd:db:
                    b6:84:1e:65:79:1d:6b:3e:13:06:ef:05:00:60:8b:
                    17:d9:53:e8:d5:3c:b6:46:d4:c7:50:22:ea:8d:d7:
                    45:7b:0f:5e:62:f8:d7:61:e7:b3:5e:65:74:5d:2d:
                    75:c8:a2:89:d9:79:e7:66:f7:c0:e8:f5:fe:e4:ea:
                    5f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:65:30:12:2F:C4:12:75:12:6A:66:18:8E:2E:4A:F7:CA:CA:4F:D9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7840150d-90b6-4a97-8609-5a40556c4e1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.149.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         67:c3:f8:14:f2:32:dd:e4:c0:f5:49:b0:b0:ef:62:a8:b1:10:
         45:38:4d:e5:f0:c0:5a:f1:73:71:95:9d:5d:25:b8:4a:80:4d:
         1d:f1:49:4a:db:d2:6a:be:a5:26:0f:3e:92:9d:ef:0a:54:da:
         de:72:93:06:f9:ae:64:ff:18:e7:0f:81:b3:2e:69:05:bf:d1:
         43:55:c3:cd:b4:95:5f:41:2a:8e:2f:b6:8b:dc:38:bf:26:08:
         74:a2:64:78:f0:2f:cd:ce:ed:37:4f:e5:2c:89:8a:9c:1c:c3:
         92:e4:27:10:9c:b5:3e:24:3d:8f:9d:f9:9e:a7:5c:9a:c2:87:
         a9:f4:92:7a:a0:af:27:f2:30:1f:f7:91:12:80:ef:fb:f4:a4:
         c5:93:29:37:89:49:c8:e8:da:c1:91:a3:0b:e2:ac:9e:08:15:
         70:5a:53:cd:84:bc:d8:af:8d:5f:c7:05:dd:87:d2:31:49:d8:
         36:7f:28:7d:f5:83:fc:12:71:58:e9:f1:9f:a2:84:d7:e2:84:
         9d:c2:27:74:f2:2f:f5:4b:d1:bc:a1:1d:ee:c2:12:61:ca:67:
         9a:3d:59:d0:3c:ec:db:81:db:c7:be:7b:5e:2c:e7:c0:49:bc:
         c5:6c:0d:0b:e9:cc:78:75:ff:4d:38:b5:6f:d9:34:19:ec:14:
         4e:aa:65:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 14:47:00 2026 by rpki-client