Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1f8c9e3-3911-40c8-b8ba-66bc4a4b8aaf.roa
File:                     a1f8c9e3-3911-40c8-b8ba-66bc4a4b8aaf.roa (raw, json)
Hash identifier:          bl2vPLZgvAF1MCtQMT/FJpQv/ibRgNhfV5SNdV4cM08=
Subject key identifier:   44:D4:7A:A8:64:37:BF:AF:0C:9E:3C:AC:6D:C3:1E:E3:78:D3:65:74
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       45C3BC0B32DD41FE5648CD152D97F62424373341
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1f8c9e3-3911-40c8-b8ba-66bc4a4b8aaf.roa
Signing time:             Mon 03 Aug 2026 00:20:10 +0000
ROA not before:           Mon 03 Aug 2026 00:20:10 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        157.175.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c3:bc:0b:32:dd:41:fe:56:48:cd:15:2d:97:f6:24:24:37:33:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 00:20:10 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=a67589ec86769313a2c0a3f27f64f465aea94688f0316de55bced43ec244b5d1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:61:66:a8:3c:25:7b:61:6a:a5:e3:6d:72:d3:
                    3a:72:4b:71:87:c8:b0:fa:b3:ad:6b:1e:45:39:c7:
                    5f:9e:ac:87:39:2b:4d:01:b7:e3:8c:55:b6:64:79:
                    69:33:2b:26:c6:61:d9:b1:f2:0d:34:56:3f:35:6a:
                    e0:6d:be:1f:2c:2b:c6:68:73:79:af:ed:43:c7:85:
                    fb:64:97:54:17:74:c7:65:2e:14:7c:12:bc:7c:e6:
                    4f:eb:20:07:23:17:3e:65:12:62:79:7a:d3:76:a6:
                    74:c6:7f:8f:84:08:8a:2b:9b:44:e2:d2:4a:a6:71:
                    e5:e9:66:6a:a9:f9:69:e7:f1:15:db:12:7f:7c:6f:
                    53:c1:a9:0e:d9:2c:ed:79:4f:d5:f6:18:88:07:a0:
                    ff:e7:33:b2:23:1d:51:b3:f2:d7:2e:00:af:28:d9:
                    b5:00:67:37:e1:22:43:df:63:3d:d5:02:90:94:0a:
                    44:73:ca:a4:d9:a7:1f:1d:f1:42:f0:40:c8:ac:9c:
                    ee:12:f4:89:bf:18:df:b4:79:fb:b8:72:67:2c:73:
                    13:11:0c:49:6c:09:94:e3:7d:b9:67:43:22:23:45:
                    1a:78:e1:2b:06:f4:8c:79:ba:28:11:75:4e:3d:55:
                    e3:4a:fe:83:96:1b:a4:ed:a1:ac:04:50:c5:3e:68:
                    cb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D4:7A:A8:64:37:BF:AF:0C:9E:3C:AC:6D:C3:1E:E3:78:D3:65:74
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1f8c9e3-3911-40c8-b8ba-66bc4a4b8aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.175.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:25:0f:4e:d5:9f:61:59:9f:ed:4f:10:ce:73:c1:43:39:3e:
         67:b2:d9:53:2c:c0:93:17:00:9e:f6:5a:88:2d:10:f4:08:23:
         ed:f7:ad:76:95:ae:30:4c:e0:c0:d1:71:5a:a0:46:ce:5f:92:
         1d:96:50:3f:72:b3:f2:41:1f:d1:51:af:c5:d9:0a:df:05:d3:
         a1:6d:0e:4b:a9:00:79:ed:1d:f1:92:0f:63:fb:81:46:ab:6c:
         3c:ce:4e:1e:7c:98:25:68:35:1b:53:5d:4e:51:19:1d:67:0c:
         c0:3b:c8:f1:8d:45:bf:ab:98:01:2c:a8:97:1e:fc:bd:ed:51:
         3c:2f:95:6e:31:8d:72:c4:92:0d:b8:f0:d7:81:0b:31:8d:ac:
         69:51:9e:cb:3f:05:78:01:b2:04:69:38:8d:9a:bd:66:84:6e:
         aa:c6:23:61:5e:6e:7b:a7:f7:51:ed:8f:7a:a9:9d:ff:92:c6:
         5a:79:9a:ee:7d:e8:32:38:d5:03:62:f9:9d:f5:19:41:71:bf:
         20:de:76:58:98:c5:5b:b3:47:d3:95:7e:67:a5:36:49:1f:df:
         e8:02:6c:81:b1:91:f4:87:ca:7b:bf:22:74:61:2a:0e:2f:63:
         8d:70:ff:4a:91:87:a2:7e:50:73:e7:09:a4:c6:df:0c:50:14:
         14:93:09:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:39:33 2026 by rpki-client