Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98cc72ea-914b-406d-a713-eb0cb9240ff9.roa
File:                     98cc72ea-914b-406d-a713-eb0cb9240ff9.roa (raw, json)
Hash identifier:          78eL7IfVkWMFsxtDWXMbXrpFsLFlKTvV72X+2DeBa2s=
Subject key identifier:   13:81:BF:78:B1:9E:B6:65:37:AD:4B:4B:7B:05:C2:8F:0B:C9:9A:0C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       52DE57EAD75FF61592013F1245764C57BD633A64
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98cc72ea-914b-406d-a713-eb0cb9240ff9.roa
Signing time:             Fri 09 Oct 2026 00:40:34 +0000
ROA not before:           Fri 09 Oct 2026 00:40:34 +0000
ROA not after:            Thu 07 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        40.187.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:de:57:ea:d7:5f:f6:15:92:01:3f:12:45:76:4c:57:bd:63:3a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  9 00:40:34 2026 GMT
            Not After : Jan  7 23:59:59 2027 GMT
        Subject: serialNumber=a4341a2e7a60f8bed77d4db83e9c8cab920849ea9efb4e70bbcc1cbc0223b705, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a7:4c:30:ca:3b:10:77:70:0a:95:e7:f2:96:
                    d4:39:cd:aa:dc:99:0a:c3:c1:9e:34:d7:63:34:56:
                    ec:f0:11:75:eb:87:65:4a:74:b8:6f:8b:7e:4d:4b:
                    fd:69:9c:80:6e:30:95:75:f5:13:91:60:c8:62:89:
                    d9:a0:7b:ed:02:7a:d5:92:ab:ed:d7:4f:a2:20:cc:
                    fa:93:59:ed:73:97:79:25:35:6d:53:46:10:ea:2e:
                    bb:c3:71:ed:39:b6:b4:7a:9f:92:8e:dd:04:81:b9:
                    a2:42:3c:b8:6a:3f:f4:e2:4c:06:88:91:d9:df:fe:
                    2f:a4:48:a5:2c:88:03:dc:4e:53:f5:08:b4:59:eb:
                    1e:19:bd:c3:f3:3f:bd:bc:a0:95:9f:02:64:b5:5c:
                    9c:5d:87:c5:cf:62:8f:5e:40:1d:bb:13:68:8e:09:
                    64:ff:6f:26:99:a5:b2:75:c4:21:82:9c:fc:1a:8d:
                    18:d5:c8:01:85:45:4e:d4:e1:7b:33:51:5b:82:0c:
                    2f:4e:37:6d:61:55:4c:c0:fc:fb:22:a8:c7:99:3b:
                    2b:0d:38:39:33:8b:fd:1e:cd:be:3c:64:da:ec:8e:
                    d9:75:2f:00:ff:b9:13:3a:3d:67:28:55:98:ed:b1:
                    e1:f0:e1:f7:84:03:43:73:13:a0:41:22:4c:52:6f:
                    1d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:81:BF:78:B1:9E:B6:65:37:AD:4B:4B:7B:05:C2:8F:0B:C9:9A:0C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98cc72ea-914b-406d-a713-eb0cb9240ff9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.187.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         87:c9:5f:53:ad:b2:56:ee:49:ba:dc:33:c1:28:94:4b:26:7f:
         d9:4b:35:9a:8e:8c:5b:dc:30:64:87:2a:8b:dc:b0:3b:70:bf:
         0d:4f:b0:f2:77:d9:3c:ac:20:ae:35:a3:c2:23:ef:92:5e:81:
         b3:c9:37:0c:e0:14:f8:32:31:94:24:e4:05:49:66:42:c5:42:
         d1:05:3f:13:5c:47:d8:09:3c:e6:38:10:97:f1:5d:73:ae:f8:
         8b:05:a0:80:25:b6:cf:19:53:6f:9f:02:fa:f2:e5:d7:00:a6:
         ac:ed:b8:0c:c9:c0:8f:14:2e:35:89:42:81:42:2e:84:c0:b1:
         f2:68:1d:65:3c:2d:18:a9:9c:c0:f8:85:44:2b:78:8e:3f:b0:
         c4:6e:74:32:3e:e0:5a:62:7e:37:c2:8a:f6:33:1a:13:ff:a7:
         b0:ac:98:92:7b:87:db:98:8a:4e:54:7e:ff:40:01:96:0e:2f:
         94:74:90:3d:8e:32:97:bc:6d:33:d2:39:ed:5c:05:e9:e0:e2:
         75:ff:ab:10:d1:fd:1f:e9:2f:c4:b2:37:a8:1b:ef:7e:cc:8c:
         03:6f:eb:eb:e2:ae:86:e0:b8:a4:1b:6a:76:67:94:b4:f9:e8:
         31:35:ac:55:fc:74:bc:97:e5:3b:52:1b:d0:c5:65:a5:55:2e:
         14:4e:fb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 12:51:09 2026 by rpki-client