Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b4c0bc3-b91f-4b99-a1f8-22d669788ad4.roa
File:                     7b4c0bc3-b91f-4b99-a1f8-22d669788ad4.roa (raw, json)
Hash identifier:          uDzevEAcmyW+XOGwHuuuAfzDy2bHIk/oul+JuwX0/XM=
Subject key identifier:   F1:26:A5:76:B2:50:16:D1:22:32:5A:47:6B:B4:8B:2D:B4:65:DD:34
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       13D312030A6E6058B3C1284548884AE9BDAF4602
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b4c0bc3-b91f-4b99-a1f8-22d669788ad4.roa
Signing time:             Sun 11 Oct 2026 01:11:31 +0000
ROA not before:           Sun 11 Oct 2026 01:11:31 +0000
ROA not after:            Sat 09 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        93.77.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d3:12:03:0a:6e:60:58:b3:c1:28:45:48:88:4a:e9:bd:af:46:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 01:11:31 2026 GMT
            Not After : Jan  9 23:59:59 2027 GMT
        Subject: serialNumber=0dc0be680795a8381cbfa85d4073fc17c5ae69b3f68bffb0bec2c279de8ece8c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8d:ff:7a:ca:79:8d:4f:d2:8a:37:5f:f3:38:
                    87:5e:2d:47:05:e9:39:2a:ad:5a:d7:ca:dd:b1:31:
                    bc:19:c8:bc:f4:db:59:a5:91:21:cf:32:14:5f:ea:
                    39:21:08:c3:63:b4:37:38:9d:e3:54:65:4b:93:8f:
                    1f:00:06:8d:40:7d:12:1f:72:f9:b7:eb:03:5a:9f:
                    5a:d3:8d:0a:03:e6:46:1c:a9:96:57:28:00:9c:0d:
                    e8:1f:00:7c:b3:71:f6:c7:a7:11:2f:22:cc:31:29:
                    b9:e9:c3:b2:95:cb:78:36:42:39:11:7e:9b:dc:7c:
                    0f:c8:cb:e6:ff:5d:8a:42:ef:53:22:e2:c4:54:df:
                    0d:f2:3f:12:fb:7d:12:be:2b:f6:2c:54:90:92:61:
                    94:ed:b1:c9:8e:19:eb:15:9d:5b:a8:9f:e4:30:5f:
                    b2:ad:e2:46:5e:a4:74:dd:9a:b4:e9:45:3c:07:0c:
                    cf:a8:f9:40:09:e7:68:b7:c7:0c:9f:b5:84:07:98:
                    b9:16:c9:fe:ba:cd:11:12:b5:9b:10:9a:fd:05:b0:
                    0e:d1:e4:14:f1:2b:1f:42:37:6f:05:7e:1d:00:34:
                    19:ad:0e:e5:fd:24:6f:bf:ca:10:d2:34:e8:1b:c2:
                    f3:53:cf:2e:77:ea:77:d1:04:ad:fb:47:a2:aa:e3:
                    bc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:26:A5:76:B2:50:16:D1:22:32:5A:47:6B:B4:8B:2D:B4:65:DD:34
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b4c0bc3-b91f-4b99-a1f8-22d669788ad4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.77.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:20:4d:e6:9e:0e:1d:71:83:a7:e9:dc:9e:05:53:9f:6d:f7:
         20:dd:71:2e:86:eb:18:e3:93:60:0f:36:0e:71:b2:9f:29:c4:
         e2:2e:35:c3:55:35:09:8d:fd:12:af:f0:dc:b2:f3:4b:ce:98:
         f5:38:3f:ba:78:79:7f:95:8e:f2:ef:c2:5c:4f:94:f4:26:d1:
         9e:9c:f1:77:c4:d4:bc:81:68:89:87:8d:6c:79:0b:2f:a0:97:
         50:ad:58:91:2d:4a:1f:5d:48:33:e3:5f:f5:ba:90:8d:7f:63:
         db:5c:df:b9:49:3c:51:7b:10:3d:f7:b3:48:88:54:b6:b7:ed:
         4c:c3:8c:32:b1:bb:f2:70:57:63:a8:c3:fe:7c:f6:57:3b:c7:
         d2:a3:6b:54:0e:ff:ee:50:b9:27:29:bd:4d:77:48:51:06:31:
         7e:be:0d:06:00:c6:13:d0:f7:f9:02:7d:4a:3e:a9:36:2b:17:
         ea:22:18:87:b0:e4:86:21:0c:65:71:cf:2e:91:dc:c2:86:61:
         2a:c4:61:54:84:ee:03:f6:86:d0:ee:c5:e5:44:44:9b:e7:c4:
         0e:2d:d6:d5:50:cb:92:63:c7:d2:92:4f:9e:cc:56:10:1b:c1:
         53:ec:77:f6:b6:67:e4:1e:76:0f:fe:f1:86:b6:ba:05:3d:26:
         c3:4e:f9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 18:49:55 2026 by rpki-client