Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4c28d27-ae81-4877-9c93-6322e55fc6ec.roa
File:                     c4c28d27-ae81-4877-9c93-6322e55fc6ec.roa (raw, json)
Hash identifier:          NpWnYEPbqag+tzsb0VYIPnTN0IaBhzu7Zr4+A7WhH7o=
Subject key identifier:   FD:80:E5:93:64:C5:40:48:51:41:CA:DE:F3:F5:6F:8F:BC:9B:1A:E2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7C9C660FC438732B80FA058A1BEDD402ABF09C36
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4c28d27-ae81-4877-9c93-6322e55fc6ec.roa
Signing time:             Tue 28 Jul 2026 00:31:08 +0000
ROA not before:           Tue 28 Jul 2026 00:31:08 +0000
ROA not after:            Mon 26 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.230.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:9c:66:0f:c4:38:73:2b:80:fa:05:8a:1b:ed:d4:02:ab:f0:9c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 28 00:31:08 2026 GMT
            Not After : Oct 26 23:59:59 2026 GMT
        Subject: serialNumber=fee912077263264bd3341556acf1f0598709f52bfe5e95c2f163715f1cc13d69, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:13:6c:8f:97:f6:3b:bb:1e:cd:90:04:d1:f7:
                    11:44:8f:6c:18:35:d8:38:d0:e9:5c:ca:5b:2f:36:
                    82:68:89:d7:a7:ed:7d:a3:31:6b:3e:85:4f:7a:ee:
                    11:67:c9:00:18:aa:78:d5:24:3f:af:1b:c0:67:36:
                    ec:d9:64:d6:10:85:ee:3d:0a:77:87:09:22:4c:ce:
                    fb:4f:b2:75:42:f7:4b:db:d4:05:f3:ed:14:ce:18:
                    f8:e3:0c:5c:79:eb:d6:df:eb:2b:6f:da:d6:7d:0a:
                    7d:12:84:30:fa:20:6a:8a:72:1c:95:6e:1f:cd:c2:
                    b0:82:17:e3:d8:6e:97:2a:25:81:56:84:8d:68:eb:
                    d5:fd:7a:b6:aa:f6:48:f6:5d:a3:41:2d:62:02:81:
                    90:b4:8d:85:7c:0c:b3:90:88:2b:43:6f:eb:5f:cd:
                    09:b0:5e:90:7c:db:25:3c:6a:e1:1e:eb:63:0a:a3:
                    3e:16:9a:e0:41:7a:b2:2f:c2:c7:37:be:05:7d:65:
                    24:e3:d6:83:d5:fd:20:16:3c:d1:ad:e0:7f:30:31:
                    73:1c:80:a0:c6:d9:82:48:23:33:74:92:8f:cb:8e:
                    4f:f3:c6:c1:e0:c8:bc:d7:42:17:19:1b:3c:34:db:
                    e9:8b:79:a6:60:ca:8d:73:21:d3:5c:32:9e:c7:62:
                    b6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:80:E5:93:64:C5:40:48:51:41:CA:DE:F3:F5:6F:8F:BC:9B:1A:E2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4c28d27-ae81-4877-9c93-6322e55fc6ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:c4:08:62:9d:f2:7d:36:7f:7f:35:e2:a5:57:bb:b3:4c:58:
         61:29:d0:77:4c:00:e0:af:eb:d1:ab:a0:4b:07:f1:13:77:f4:
         cd:2a:2e:b4:dc:55:e4:16:d2:a9:2d:18:e5:79:a8:db:93:ac:
         fc:50:3e:1c:09:67:4b:d1:df:59:90:4a:18:f1:30:69:e9:84:
         54:65:26:e8:ac:aa:3f:27:50:35:8d:6b:9e:ee:76:12:1f:f8:
         1f:4c:bb:7e:b3:29:31:77:73:fc:e6:d4:2e:2a:07:dd:91:df:
         60:db:fa:77:e0:f0:2e:a2:27:79:be:65:af:f3:6e:08:1a:05:
         b3:60:b5:80:06:04:ad:8e:e0:27:83:a4:af:2c:74:80:11:dd:
         b0:e1:5e:57:a1:92:cc:69:ca:81:83:5d:67:ff:67:1b:df:a9:
         bd:ee:34:0f:bf:39:d9:6a:e0:e3:4a:8c:7b:97:9b:41:4a:67:
         bb:86:e5:e7:92:45:12:b8:d7:43:54:a6:8f:ae:41:e4:e3:7d:
         3d:63:42:44:bb:21:02:05:60:af:be:82:74:f8:37:c0:a1:75:
         60:bf:61:0e:c6:d6:61:06:94:c3:0b:a8:b4:98:30:3d:94:91:
         8d:28:d4:8a:6a:c6:c1:5f:b3:5c:4d:e1:9a:b6:df:fa:06:da:
         42:87:45:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:41:46 2026 by rpki-client