Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8a1d699-66bf-4eac-bb45-6e3527625d81.roa
File:                     b8a1d699-66bf-4eac-bb45-6e3527625d81.roa (raw, json)
Hash identifier:          gzDRZkZCRIIilYp1dNWQsQI9V7iXDS+ReZehkw65rrU=
Subject key identifier:   24:4C:9B:49:33:DB:56:CB:36:42:0D:D7:9A:0D:8D:B3:C8:C5:43:67
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5138345A4A2402937012AB789C27DF5C945A8723
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8a1d699-66bf-4eac-bb45-6e3527625d81.roa
Signing time:             Fri 15 May 2026 00:30:46 +0000
ROA not before:           Fri 15 May 2026 00:30:46 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        192.43.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:38:34:5a:4a:24:02:93:70:12:ab:78:9c:27:df:5c:94:5a:87:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 00:30:46 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=bfde72ecacbc7d5b58516e2c96728659366ea815c56f44ec9c04ca731246b399, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a4:77:8d:b0:e6:69:c8:2d:74:cd:05:1c:e0:
                    d9:c1:92:32:69:0f:19:21:31:18:a4:0f:e0:12:32:
                    33:00:88:dc:98:34:50:47:28:f3:4a:36:2d:92:bd:
                    f8:4c:75:7f:d6:6d:f1:ee:d4:dd:33:e9:ee:92:27:
                    af:08:f8:e2:1a:5b:9a:e8:f7:31:02:96:dd:ee:f1:
                    9d:c4:b3:bd:7e:41:03:80:76:dc:8b:3d:04:d6:16:
                    a1:5e:32:88:05:b1:ee:de:19:41:03:cc:7d:63:8d:
                    03:83:c7:f3:52:04:6d:8a:46:15:54:a2:d3:d4:a0:
                    f4:bb:99:f9:c4:be:e1:7d:31:57:b5:a5:ed:49:c8:
                    e2:a8:23:8b:e8:e0:a2:33:44:50:86:6d:05:21:39:
                    27:42:d7:98:92:ff:b8:10:0f:10:d8:bc:fe:e1:9d:
                    13:89:2a:f8:97:2d:da:03:2b:00:41:9b:61:d3:1f:
                    fb:cc:8a:c3:fa:64:ea:dc:1b:c0:a1:ff:2c:05:d9:
                    20:d1:e2:b3:33:2d:77:fa:b6:f9:a8:fa:b9:41:6c:
                    61:df:7e:98:0e:e2:ce:16:5e:4f:5d:00:49:cd:44:
                    d0:88:22:de:07:4c:d9:08:9a:84:00:1b:82:82:3b:
                    8a:cd:89:17:63:d9:6a:0f:8d:20:ba:ed:32:cf:74:
                    22:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4C:9B:49:33:DB:56:CB:36:42:0D:D7:9A:0D:8D:B3:C8:C5:43:67
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8a1d699-66bf-4eac-bb45-6e3527625d81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:72:65:7e:d6:56:9b:8c:86:9b:cb:cf:c7:62:f4:db:7c:2b:
         44:d6:6d:14:02:16:53:a1:ec:ed:72:cd:9a:71:22:09:fc:98:
         51:11:57:3a:b6:8e:ca:9c:30:fc:e2:19:58:13:ea:87:ca:45:
         0a:a6:18:b5:69:95:cc:d4:67:1f:20:04:ef:1e:71:15:84:2d:
         ed:3a:90:03:85:b6:8f:28:54:91:4c:1d:6f:0d:07:53:00:bd:
         11:b1:38:1f:eb:97:66:a1:11:64:d9:b5:0e:aa:25:c1:76:7c:
         6e:33:6e:b1:4a:7f:dd:d0:b8:61:07:d1:ed:f5:9a:6c:cc:90:
         9a:7d:02:d0:ce:82:5c:32:0d:9e:96:32:6b:82:1b:0e:d8:10:
         46:29:65:f6:69:1f:a7:4b:0c:04:bf:3b:84:60:c3:cc:f5:03:
         68:44:53:5b:c4:8e:85:5b:d7:64:46:a6:3e:1d:cc:18:50:b6:
         a8:9f:6f:d3:ff:56:5d:73:1f:f5:95:85:30:eb:73:7f:b4:cb:
         e2:9f:60:7b:61:a9:89:6e:9e:1f:21:ab:9a:67:b7:d0:f3:e4:
         7b:b0:ed:95:a9:72:fe:3d:6d:c5:53:33:a7:d6:42:29:38:78:
         9b:72:7f:10:5e:36:2a:8c:fb:db:a3:80:a9:0d:8d:6b:d1:4d:
         66:c9:6b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:36:43 2026 by rpki-client