Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1635219-0478-4d11-8584-daad290ee200.roa
File:                     c1635219-0478-4d11-8584-daad290ee200.roa (raw, json)
Hash identifier:          8nrYK1ic4WnM7+3bE2S+bxy9R7UOhvzhagJ3rL3hejM=
Subject key identifier:   43:BA:53:A2:15:9F:5D:B8:A0:21:36:29:42:DE:3C:90:BD:F8:02:CD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5F4E9265A53451FC3D6027DEB88E77E60000E6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1635219-0478-4d11-8584-daad290ee200.roa
Signing time:             Fri 31 Jul 2026 01:22:02 +0000
ROA not before:           Fri 31 Jul 2026 01:22:02 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        71.152.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:4e:92:65:a5:34:51:fc:3d:60:27:de:b8:8e:77:e6:00:00:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 31 01:22:02 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=08a83ddae469b7d1fb3328566a17d4e7e5566bcad50d9c711cc6c4627798e95b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b9:d4:f4:e4:92:8e:bf:3d:bc:ab:bc:b6:9a:
                    e5:d8:bf:18:0b:e4:e7:72:31:59:e4:29:0a:0f:7c:
                    2b:16:11:e8:79:a6:5d:a6:7c:2e:7c:7e:f2:77:43:
                    8e:f2:9f:65:42:85:b4:f0:b4:a5:08:d1:ac:33:39:
                    70:12:38:f5:7a:f7:3d:ab:c1:57:54:27:05:2d:0f:
                    e9:18:15:bf:d2:21:7c:8e:b6:69:fc:dc:92:d5:9f:
                    77:ed:a1:bb:76:a8:e9:05:11:11:81:a5:7a:79:f9:
                    24:12:67:d5:fd:74:a1:5a:5a:07:57:8d:d0:1f:e1:
                    fb:a4:bb:5e:bd:29:cb:b4:67:2c:19:c3:0e:3d:39:
                    1e:c9:a6:1f:d6:0a:bb:73:28:ef:0d:69:2e:18:a1:
                    79:b4:4c:b1:da:4b:9e:eb:89:c2:35:59:f1:26:c1:
                    1b:99:4d:ac:44:76:09:f7:cc:20:60:2d:05:7c:98:
                    2c:2f:f8:0d:42:89:31:a9:c7:70:51:bd:d8:66:95:
                    f2:ff:29:6e:63:68:c8:b7:56:fc:a3:08:ca:7a:93:
                    e1:c4:9a:57:4d:89:39:54:76:7a:77:23:71:f3:c2:
                    67:dc:1d:74:25:f2:4a:d3:4c:38:0b:eb:89:ad:52:
                    04:2a:d8:4e:21:bb:b5:01:a6:e3:a2:48:8d:5c:9e:
                    0c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BA:53:A2:15:9F:5D:B8:A0:21:36:29:42:DE:3C:90:BD:F8:02:CD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1635219-0478-4d11-8584-daad290ee200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.152.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:1d:56:b3:b7:ec:1c:cf:a3:76:cb:96:19:0c:26:2c:e6:40:
         cb:35:6d:d7:31:0f:85:ff:74:ea:cb:d5:37:1a:fd:99:ac:c3:
         02:35:17:46:26:38:6a:de:fe:9a:04:f1:9a:af:2a:83:18:6b:
         f1:ff:94:59:82:82:d9:d0:8d:44:11:f1:c2:68:7a:20:1a:b2:
         e5:06:c8:d1:f4:0c:2d:89:7e:bc:07:cf:6f:63:1c:b0:4c:a5:
         a2:fe:ca:38:42:3f:a7:e8:0a:f5:b6:77:6f:02:91:ed:05:07:
         a7:95:c2:4a:3b:c6:cf:c2:0f:c1:36:5b:58:07:22:27:45:24:
         fd:98:4c:c1:74:70:87:ed:34:db:a6:b9:08:4b:76:4c:6b:f5:
         1a:a6:f0:81:6f:e0:a3:fe:25:35:cc:44:ed:81:83:c3:cf:ed:
         94:c3:77:42:5c:c0:a8:91:39:19:64:ff:6e:fe:ea:e2:a9:00:
         20:26:4a:64:d4:89:cc:d1:51:0c:54:9c:06:9a:c1:4e:62:e9:
         34:19:30:81:ab:86:50:ed:83:93:73:49:41:63:c1:89:29:67:
         68:7b:6e:d1:fe:74:50:45:4f:25:e7:d9:2f:03:31:83:17:df:
         09:20:8c:cd:7c:ab:ca:51:20:ba:db:0b:c8:2c:3d:01:e8:52:
         06:d9:5f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:44:53 2026 by rpki-client