Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb0f4228-6d0b-4e4f-8c10-a388510d7ca8.roa
File:                     eb0f4228-6d0b-4e4f-8c10-a388510d7ca8.roa (raw, json)
Hash identifier:          l0oRKMPQoNOO7cv+ZxbT2DoQrEXwb2dxNJpzpPRChNM=
Subject key identifier:   0C:D9:59:32:45:BD:72:DF:34:27:BE:5C:ED:67:ED:1B:1B:F7:A2:7A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E50493A4DAD04B1AA81D38CCB1D25834A4D73DD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb0f4228-6d0b-4e4f-8c10-a388510d7ca8.roa
Signing time:             Mon 05 Oct 2026 00:21:53 +0000
ROA not before:           Mon 05 Oct 2026 00:21:53 +0000
ROA not after:            Sun 03 Jan 2027 23:59:59 +0000
asID:                     62785
IP address blocks:        173.83.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:50:49:3a:4d:ad:04:b1:aa:81:d3:8c:cb:1d:25:83:4a:4d:73:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  5 00:21:53 2026 GMT
            Not After : Jan  3 23:59:59 2027 GMT
        Subject: serialNumber=5e9516809dff34e8d8032cc2de07ba6d31f7d064baf24bcb3d5de9d09a733b60, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:98:28:5b:db:29:0e:8a:af:cc:b3:a5:14:f5:
                    99:85:9f:d3:bf:a7:0c:b7:0d:0c:51:ab:4a:b6:eb:
                    34:d7:e4:ec:7d:3b:40:2e:fe:a5:f2:42:11:95:1e:
                    d3:36:6b:09:52:e2:95:46:c7:fd:34:30:8e:d4:ef:
                    ab:9d:f9:46:e9:45:17:c8:fa:6b:5f:b8:e6:60:8f:
                    39:21:ae:b2:e0:b4:46:05:ff:20:11:15:e0:38:89:
                    d7:c0:9e:ee:e9:2d:7b:49:fa:05:ce:87:25:ad:7b:
                    29:fc:37:fb:81:25:e4:94:8e:8a:89:7a:15:f1:27:
                    32:3e:75:df:45:41:ec:ad:53:78:b6:74:bc:3d:7e:
                    9b:37:ba:e8:4e:0a:86:1f:97:79:8c:62:c9:47:58:
                    39:6e:ec:c4:7f:5a:48:97:70:d3:f3:2b:40:05:01:
                    99:60:a7:01:1e:3f:46:00:7b:df:5b:2b:05:a0:65:
                    b7:51:b5:65:e6:fb:23:d4:38:3c:38:d9:9a:08:47:
                    16:9e:99:e2:a3:2e:b6:22:cb:8b:71:e9:41:c9:1a:
                    35:ee:87:fd:0f:98:22:df:69:3f:0e:b2:ae:0b:9f:
                    e4:4f:dd:0e:71:09:2b:bc:b2:7e:cd:d0:21:c6:94:
                    59:85:69:cf:95:da:a5:33:26:c2:d1:34:c7:d1:3f:
                    f7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D9:59:32:45:BD:72:DF:34:27:BE:5C:ED:67:ED:1B:1B:F7:A2:7A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb0f4228-6d0b-4e4f-8c10-a388510d7ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.83.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         15:0b:b0:b6:be:84:74:82:69:ac:6c:26:35:df:ef:32:6d:2e:
         d5:4b:f5:22:c0:ed:77:9b:e0:c2:d8:d2:c1:a1:22:21:93:85:
         a5:ec:11:da:d3:8f:21:5f:c0:8e:f7:5c:ec:90:14:56:83:16:
         bc:89:05:58:0f:85:1c:8e:d2:77:8e:c4:aa:dd:42:df:08:b8:
         b2:3c:eb:89:c3:26:61:d3:ba:33:2b:31:a9:b8:f8:c2:18:11:
         2e:1c:a7:83:13:50:16:d6:cd:67:64:8c:5a:3b:c4:25:3a:77:
         8f:cf:08:5a:70:00:83:9c:e3:f7:e5:e7:ea:92:95:b8:28:38:
         ad:d9:fb:4d:2d:ce:5a:df:7f:12:53:69:c5:bf:b7:7e:17:a0:
         29:28:4c:76:21:ae:62:c3:62:2b:5a:c8:6f:3b:65:c0:95:8d:
         c1:b0:f2:6c:7c:ef:6f:1e:61:b5:fa:e1:6b:77:71:7c:7a:36:
         2e:d2:b5:cb:1f:40:70:53:a1:17:ad:ca:aa:89:44:fd:95:c4:
         01:c4:1d:fb:c3:c3:28:62:eb:ea:49:f9:bb:a1:3c:04:c2:d8:
         03:22:04:a9:67:97:fd:7b:81:36:1b:03:ab:8b:40:66:d5:7f:
         fd:a6:14:8c:54:62:10:0a:21:81:ce:64:b4:16:8c:4a:6c:04:
         8a:9d:8b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:09:40 2026 by rpki-client