Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e261c24b-13a0-4019-b3b3-0562e86aea2f.roa
File:                     e261c24b-13a0-4019-b3b3-0562e86aea2f.roa (raw, json)
Hash identifier:          Dz8Y4r6fwZ6ER4ScktkwsGEck1tL0DssDQaqAZfv8tg=
Subject key identifier:   02:79:53:08:A8:76:1B:6C:9F:A2:90:F4:93:E9:80:C7:5B:C1:7F:35
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7A3AC836302C7831D8268BF9FE0F1977931AEDF0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e261c24b-13a0-4019-b3b3-0562e86aea2f.roa
Signing time:             Sat 08 Aug 2026 00:00:08 +0000
ROA not before:           Sat 08 Aug 2026 00:00:08 +0000
ROA not after:            Fri 06 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        68.223.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:3a:c8:36:30:2c:78:31:d8:26:8b:f9:fe:0f:19:77:93:1a:ed:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  8 00:00:08 2026 GMT
            Not After : Nov  6 23:59:59 2026 GMT
        Subject: serialNumber=187c37d75caeb9f4e5f342c4a64326e5d58ac542a7a5d52cd7be5cf50285b2df, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:aa:55:83:9e:94:e1:d6:c1:b1:18:1f:c2:0a:
                    8b:23:3b:f6:8b:9e:3d:b5:31:43:d3:bd:f4:1c:59:
                    ad:d3:8d:4e:31:2c:3c:8a:a7:4b:19:4c:ff:44:36:
                    e4:e4:fa:23:81:f7:27:4e:8b:18:d9:71:34:00:99:
                    6a:95:67:78:c3:2a:d5:af:25:f1:b6:f3:29:7e:71:
                    47:68:56:36:e4:4d:a8:80:d8:2c:eb:1b:d4:22:4a:
                    24:b2:71:5e:81:62:78:e7:f6:b9:16:7d:1f:ad:43:
                    9e:4b:6f:2b:bf:59:3f:14:80:cc:02:f4:6f:28:38:
                    be:3b:e7:b5:15:fe:2e:64:78:2b:17:e5:b1:44:7e:
                    d6:74:89:43:34:24:ba:0d:45:05:2f:8d:d9:4b:4e:
                    11:1e:2a:3f:b9:75:3d:7c:94:e6:c1:d3:67:67:84:
                    90:90:1a:d7:3f:c6:51:af:e6:6d:25:57:f7:62:5e:
                    eb:4b:f6:e6:7e:65:ae:d8:dd:73:eb:31:be:08:17:
                    d3:dd:a5:bb:50:13:34:0c:9f:7d:ef:d4:2e:f2:21:
                    4d:dd:6b:fb:af:9f:06:5e:8f:56:da:ef:c1:1d:98:
                    d7:9f:f4:3c:82:89:5f:d2:a5:3d:7c:b3:1f:bb:83:
                    b5:51:9e:24:d3:d3:9b:71:3e:7e:b7:86:a8:d9:80:
                    65:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:79:53:08:A8:76:1B:6C:9F:A2:90:F4:93:E9:80:C7:5B:C1:7F:35
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e261c24b-13a0-4019-b3b3-0562e86aea2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.223.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         19:66:88:67:90:c1:57:d5:82:84:25:6b:52:b1:75:43:be:7c:
         0b:cd:c1:89:ac:ff:1c:dc:1d:22:cd:7c:a7:fd:af:c4:e0:22:
         bc:0b:b2:ec:08:04:74:e1:0b:87:8a:94:5f:e2:23:5b:73:ac:
         9d:42:f7:00:bb:4e:62:6b:58:03:d5:b3:46:e1:e8:b0:61:cf:
         75:b4:06:7e:0d:46:9e:04:97:81:ca:64:27:c9:55:92:09:f7:
         f7:7e:4b:72:df:65:0d:02:71:46:3a:7d:56:fe:85:46:8f:48:
         a6:ad:1b:c7:e8:ba:a4:f7:df:b6:f8:9a:aa:f0:66:68:76:a7:
         8e:ed:bf:a2:17:db:f8:e5:17:2f:4b:bc:e9:36:76:c8:4a:c0:
         6c:4d:78:95:67:4b:ae:85:99:04:e7:20:aa:d9:4a:12:b3:db:
         c6:1f:05:b5:cf:99:40:80:1b:f3:d5:b6:7c:b5:5f:d5:4f:8d:
         3b:92:76:df:b3:72:21:52:a8:6d:20:25:e2:7c:c1:01:ee:50:
         95:ae:ae:a1:28:98:13:38:00:26:fd:5f:f2:e8:fc:41:97:7f:
         29:90:cf:19:3a:2f:1a:4c:50:ad:bf:97:19:7f:cf:d6:6a:83:
         5c:1e:ad:10:e7:30:60:e8:36:45:f2:5a:7c:b9:57:c1:ed:30:
         49:79:aa:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 11:00:33 2026 by rpki-client