Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ee3f9ec-8189-4018-ab25-db2edd39ea25.roa
File:                     7ee3f9ec-8189-4018-ab25-db2edd39ea25.roa (raw, json)
Hash identifier:          N+LAnx3TT1SSNjQJCFO1ZaamAPkBAQ9V66r6r34jZBw=
Subject key identifier:   9D:62:A2:B8:5B:13:B1:06:2C:64:00:4F:92:A2:D8:73:DB:BA:4A:5E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2DE33B06F3684414DBF151BA736E9DE5CB075D14
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ee3f9ec-8189-4018-ab25-db2edd39ea25.roa
Signing time:             Sun 03 May 2026 16:48:49 +0000
ROA not before:           Sun 03 May 2026 16:48:49 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        23.238.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e3:3b:06:f3:68:44:14:db:f1:51:ba:73:6e:9d:e5:cb:07:5d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 16:48:49 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=42847921a0fdd848837714a9c99fbff59dd5cdcaf709ccca1a2ddbe12eedffad, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:52:5c:c5:f8:1e:66:81:56:45:b2:42:18:2c:
                    a4:72:5b:56:c1:ce:84:62:df:78:7a:5e:b9:bb:5b:
                    2c:62:bf:29:17:77:74:74:bb:0c:23:cb:f8:90:bb:
                    5c:8b:ea:83:8a:45:2e:91:b9:70:91:99:3e:77:7c:
                    5c:88:9b:f1:45:eb:d1:15:ee:10:c6:e8:19:a9:aa:
                    cd:e6:2c:6a:5a:7c:f7:55:55:3b:fd:7e:2a:37:fb:
                    e3:01:ef:71:09:53:d5:43:c4:f1:cf:0c:13:5d:43:
                    ae:c1:80:65:2a:db:58:4a:49:55:de:85:cf:4b:15:
                    7c:41:f8:33:bc:94:2b:af:21:69:14:af:91:a8:95:
                    ef:d9:0a:4b:a1:5f:e4:3a:aa:a3:6d:0f:b8:f2:a8:
                    35:2c:b1:0b:d0:51:70:06:cc:ff:77:81:63:7b:fa:
                    10:07:25:ea:8f:7e:f8:3e:dd:a2:1e:87:28:cf:ba:
                    e3:a7:54:fe:68:ab:01:3f:f1:be:e7:ab:fd:a0:a2:
                    4d:33:a3:9b:93:4f:53:18:e1:33:3a:71:a9:81:d3:
                    6a:ff:d4:ec:0a:c9:ca:18:3c:01:cf:d4:2d:0f:03:
                    2e:69:64:b9:be:74:8c:11:41:c1:92:2f:60:6b:6c:
                    b4:a4:40:c1:dc:9d:c6:28:c5:a8:c0:47:60:7a:17:
                    fc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:62:A2:B8:5B:13:B1:06:2C:64:00:4F:92:A2:D8:73:DB:BA:4A:5E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ee3f9ec-8189-4018-ab25-db2edd39ea25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.238.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:05:5e:84:2f:dd:b7:d5:71:78:b6:fc:8c:4a:4f:c1:9b:bf:
         31:2a:0c:f7:fd:6d:81:fb:3d:c7:c8:fd:92:82:43:b5:b1:fc:
         1c:a9:0e:ff:f9:ee:2d:ef:1f:ca:02:ee:aa:33:06:0f:9c:5c:
         88:a8:31:73:63:24:b9:e8:f0:f8:42:e1:13:82:6a:73:7e:71:
         51:c1:26:56:d8:f3:6f:bf:81:a9:90:d8:4e:fc:bc:45:c3:91:
         64:47:db:19:56:5d:0b:33:87:6b:5a:d4:7b:f4:8c:ef:74:84:
         a3:6c:4f:90:8a:ba:02:17:bd:41:87:f4:09:2f:8b:b0:19:70:
         f5:67:fc:10:80:87:80:05:fc:34:02:a0:33:5a:4a:9d:5d:fd:
         eb:a9:85:0e:ab:70:22:66:63:f7:40:ee:11:68:7a:f8:f9:e7:
         52:aa:ed:bc:00:22:8d:a4:32:dc:db:98:12:46:d8:28:58:79:
         73:ee:67:4a:c1:5b:73:a7:ed:0c:55:37:aa:34:19:22:46:d0:
         29:4a:27:79:ea:ee:53:df:45:31:80:0b:0e:31:a8:8d:d6:af:
         d4:d2:42:a2:9e:88:42:05:ec:52:e1:96:91:d7:1c:5e:e5:e7:
         59:1d:73:e4:c9:2b:49:3d:fe:91:4f:2a:fe:ad:13:50:f0:d5:
         59:9a:9b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 22:58:08 2026 by rpki-client