Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efa02ad7-03c9-45df-9c45-80b0cac72268.roa
File:                     efa02ad7-03c9-45df-9c45-80b0cac72268.roa (raw, json)
Hash identifier:          n9s8j/CYGNCZyFPvAQZuZ/VLPt9lD2Ijcphr0vPB4JA=
Subject key identifier:   5E:50:AD:A1:58:D8:86:DD:9E:D0:77:79:8B:AE:DE:96:35:47:9F:D1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4771963D80FF3660D41C2F75C2F0C0F7539613D0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efa02ad7-03c9-45df-9c45-80b0cac72268.roa
Signing time:             Sat 02 May 2026 01:20:47 +0000
ROA not before:           Sat 02 May 2026 01:20:47 +0000
ROA not after:            Fri 31 Jul 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        136.18.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:71:96:3d:80:ff:36:60:d4:1c:2f:75:c2:f0:c0:f7:53:96:13:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  2 01:20:47 2026 GMT
            Not After : Jul 31 23:59:59 2026 GMT
        Subject: serialNumber=d762a7f77e906cd68115a0c72048495f83419cc1b49b78351b906e4ca9fa583d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e3:0a:ca:40:66:35:59:0e:e8:39:55:db:2c:
                    d9:11:44:18:83:58:91:bd:7c:a9:f8:09:e3:cb:03:
                    56:fe:28:09:2f:5e:13:5e:1b:04:4d:0c:e1:1b:ff:
                    3e:3f:70:51:67:f1:77:ab:f3:9e:d3:84:0c:d8:94:
                    64:a4:e4:4d:69:b0:83:fa:70:01:49:69:f5:ba:55:
                    ee:4c:a1:7c:37:ea:c4:ca:6e:f9:bd:2b:1c:22:0c:
                    de:a1:e7:66:f1:ee:29:a6:6e:ba:a2:ff:99:2a:ae:
                    ab:c2:05:fe:e9:9f:6e:8c:c5:ac:84:13:f9:39:1a:
                    1b:aa:4f:01:89:3b:d4:90:59:8c:26:df:a1:0b:09:
                    f6:ca:48:48:f8:cb:92:31:ae:48:7f:0c:45:1d:b4:
                    ad:79:c0:70:37:f8:65:20:8c:27:52:a0:ea:cd:1b:
                    ca:a7:f2:25:8a:1a:f8:70:93:81:69:78:65:62:67:
                    e1:a1:76:a0:8e:05:4a:3b:d9:39:d5:b7:95:69:6f:
                    cd:6c:09:53:e0:5b:8e:d6:09:ab:13:a2:f4:ee:dd:
                    71:08:49:57:23:d6:7d:15:a0:e9:b9:f8:fb:1a:e6:
                    8b:a1:e7:1a:42:a9:df:b0:c0:80:f7:85:01:6b:91:
                    fc:0d:6f:75:43:de:7f:93:4f:f9:26:5c:89:37:7b:
                    49:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:50:AD:A1:58:D8:86:DD:9E:D0:77:79:8B:AE:DE:96:35:47:9F:D1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efa02ad7-03c9-45df-9c45-80b0cac72268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:14:65:fb:f7:19:d5:de:83:b5:32:ba:e7:3a:8b:54:65:53:
         5f:78:1b:66:b3:b3:a6:e8:58:8c:ff:3e:0c:e1:b6:22:fa:61:
         ab:de:1d:0c:ab:a1:c5:88:63:2e:81:ff:01:6a:75:4d:2d:48:
         f1:fb:21:0c:2c:52:a5:79:01:e1:5a:d5:79:79:39:ad:5c:8e:
         17:77:54:ab:4b:31:9a:b5:f7:58:d1:66:dc:21:f5:72:d9:95:
         cc:d0:79:d0:23:e6:6d:9e:9b:43:63:62:8f:3e:0f:0d:81:11:
         10:83:5e:83:2e:34:8a:67:16:37:4f:61:4d:6d:f3:dc:9d:2a:
         4f:ef:ce:73:56:e9:5e:06:7a:f8:94:52:10:2e:b5:6f:44:7c:
         a9:d4:b8:89:92:b1:b0:cc:f7:cd:cd:d4:44:33:84:ee:22:04:
         d5:10:37:83:6c:df:79:ed:ee:c8:6b:7a:0e:a8:1b:84:d8:4e:
         aa:50:92:59:14:df:95:25:3b:61:86:40:d0:33:1c:17:38:19:
         a9:4d:83:76:56:27:78:05:ac:e9:23:92:ab:5e:11:1b:e0:74:
         e9:bc:cb:7f:6b:09:0c:a3:40:97:5f:14:46:60:e9:5d:1c:53:
         ac:8e:b1:dd:8e:3e:83:e5:08:43:8f:37:3e:8f:ea:c3:f9:4d:
         61:48:17:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 21:39:06 2026 by rpki-client