Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef7c7fbd-7e17-4e28-91a6-c01f8f23e2f7.roa
File:                     ef7c7fbd-7e17-4e28-91a6-c01f8f23e2f7.roa (raw, json)
Hash identifier:          hNFuqYhAMkn34tLCaHZlQPB/2H/t/tYcs3fq0xWR4RM=
Subject key identifier:   0C:08:43:69:F4:AA:E1:8F:0F:3B:B2:2A:C7:7F:A3:BA:40:6B:E1:DB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       42DA67D8EAE5A9A7E2A7EE86FA2E8F5C3618B214
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef7c7fbd-7e17-4e28-91a6-c01f8f23e2f7.roa
Signing time:             Mon 27 Apr 2026 00:00:31 +0000
ROA not before:           Mon 27 Apr 2026 00:00:31 +0000
ROA not after:            Sun 26 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        98.75.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:da:67:d8:ea:e5:a9:a7:e2:a7:ee:86:fa:2e:8f:5c:36:18:b2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 27 00:00:31 2026 GMT
            Not After : Jul 26 23:59:59 2026 GMT
        Subject: serialNumber=cf5ace8d07cc1232488b16f11b94728b53cf9ff5a4b031a799d945d15fc06369, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dd:d7:96:fc:eb:f2:2f:d1:27:3e:13:ba:73:
                    cd:53:dd:19:d3:81:70:62:80:a6:56:e7:6f:79:9d:
                    80:14:f6:28:84:de:fb:32:14:c6:dd:b8:d1:b1:af:
                    e1:58:46:df:f6:36:b6:2a:7a:c2:76:b6:9c:7a:18:
                    e8:e7:25:2b:85:df:9d:2e:2b:43:aa:11:76:1a:ad:
                    4a:3c:9f:a8:a8:45:a2:73:40:b2:c9:28:90:c2:b5:
                    d7:bb:5a:19:67:f5:7f:3e:e2:f4:3e:9b:ff:5e:2d:
                    e0:00:5b:7f:94:d3:87:38:5e:90:b5:b3:97:f3:d2:
                    23:b9:88:84:68:5b:2b:f7:a3:d8:fc:75:ee:b0:4e:
                    4b:2e:b5:62:7e:09:4b:da:68:fb:2e:c9:b7:d4:ba:
                    80:55:06:00:c0:c2:03:63:4c:d2:f9:8d:7f:27:2d:
                    15:05:44:ec:c3:84:d0:cf:06:80:fd:29:0b:d1:86:
                    44:ff:33:d1:a4:e6:ee:7d:d9:97:8c:81:6d:62:49:
                    57:96:46:dc:37:ab:f8:e4:93:a9:8e:43:4b:83:cc:
                    39:d8:9e:0e:c3:a9:e5:a4:24:2d:ee:f6:25:f4:09:
                    a4:0e:2b:0d:98:ce:93:39:11:15:08:d9:6e:ae:8c:
                    4c:e6:1d:72:23:ba:99:9a:7a:45:97:73:f1:b9:5a:
                    04:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:08:43:69:F4:AA:E1:8F:0F:3B:B2:2A:C7:7F:A3:BA:40:6B:E1:DB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef7c7fbd-7e17-4e28-91a6-c01f8f23e2f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1b:88:30:00:fb:83:04:97:7c:c0:cb:ea:02:0b:fd:20:7c:c9:
         39:a5:21:34:4d:69:56:1b:cb:72:e3:39:43:bd:b0:20:ee:e5:
         a9:e0:24:0b:d0:ec:58:f6:37:bb:cc:2f:45:e9:65:7c:e5:bb:
         cc:18:f5:46:0c:d3:9d:14:5d:04:a4:f9:65:8e:60:04:22:52:
         fc:8d:1f:94:ae:13:2f:34:be:14:e7:3f:26:7f:82:64:04:99:
         74:ec:62:51:09:6e:61:08:19:7c:c2:31:e2:01:81:13:19:73:
         22:58:f1:49:f3:7b:d0:40:e2:41:bb:3a:1a:48:63:f8:a8:c5:
         b1:6e:a5:16:92:0b:a9:76:bd:aa:d1:8d:b4:b1:6d:40:de:c8:
         e5:f8:1a:de:ee:89:40:3f:35:42:c0:e1:92:e5:eb:2e:3b:8a:
         7a:2c:15:39:dd:2e:7d:7a:2b:f9:2f:58:2e:02:a5:40:19:a6:
         0a:76:44:14:ec:73:88:e9:bd:00:9d:17:23:2b:c6:ed:60:31:
         3c:e2:bd:1d:22:89:29:0f:f8:92:9b:d5:82:45:b0:a7:4c:b1:
         86:47:46:7f:2e:c1:48:4c:a7:74:7f:34:ae:89:5c:be:92:c0:
         0a:dd:60:04:9d:60:14:32:4a:6d:1b:5e:c3:c3:2a:0d:53:9c:
         fb:0b:ef:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 14:48:53 2026 by rpki-client