Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce5c78d7-59ef-4c1e-8f82-e7d15de1174e.roa
File:                     ce5c78d7-59ef-4c1e-8f82-e7d15de1174e.roa (raw, json)
Hash identifier:          NYYTJgQRYSqA167JGjqF7uNC6vAjU/hm/BpUWbF2q+U=
Subject key identifier:   75:BC:5F:44:86:A0:27:00:14:AC:64:5F:1B:6C:3D:C4:E8:14:91:2A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2225BEB3990CED4D9787BC960F51580852C4EEAB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce5c78d7-59ef-4c1e-8f82-e7d15de1174e.roa
Signing time:             Sun 02 Aug 2026 00:50:43 +0000
ROA not before:           Sun 02 Aug 2026 00:50:43 +0000
ROA not after:            Sat 31 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        18.68.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:25:be:b3:99:0c:ed:4d:97:87:bc:96:0f:51:58:08:52:c4:ee:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  2 00:50:43 2026 GMT
            Not After : Oct 31 23:59:59 2026 GMT
        Subject: serialNumber=4fd7b0a371e253017ac0a1a822e2bcb31716713d087d038cf6fba9c58fbb556b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:65:4d:4f:a7:db:1e:5c:c3:e2:b8:ce:88:f4:
                    52:28:76:3b:94:6a:1f:11:ed:41:d0:e6:47:69:f0:
                    91:df:27:6c:59:2d:f1:4b:5e:f6:b2:9e:94:71:c5:
                    7c:94:55:1b:24:7f:6d:e4:23:b2:d9:c4:6b:e8:2b:
                    e5:fd:cf:cf:07:ad:ee:b2:32:ac:ce:e7:f0:48:09:
                    79:33:64:09:7e:f7:e1:32:59:6e:29:af:e9:85:22:
                    53:4a:b2:96:f9:c7:49:6e:ac:ba:df:a4:27:ae:80:
                    8c:25:22:3b:c4:3b:99:33:99:0f:1f:ea:b8:07:5f:
                    a9:00:f9:1b:70:75:5a:53:97:5f:f0:21:ad:19:f9:
                    1b:90:e8:d7:67:d8:1b:c7:bb:7f:d1:71:1e:6b:17:
                    c4:ef:c2:b7:b4:e4:9e:9a:c8:c2:b2:8f:66:cf:d6:
                    93:6b:6a:a7:79:c3:48:31:05:1f:7e:60:48:06:af:
                    10:25:7b:f0:6a:7d:3c:4b:6c:a9:30:23:db:3a:c1:
                    54:25:54:54:09:d1:b7:0c:59:40:75:23:6b:5f:4b:
                    30:5c:ba:1f:9a:68:4c:73:4e:4a:c5:4a:fc:c9:c1:
                    46:80:c7:d3:82:0d:a4:2f:f6:e5:7e:c3:82:7c:b8:
                    af:ca:64:ad:11:f5:64:5b:4e:48:f4:b9:5d:dc:c6:
                    06:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BC:5F:44:86:A0:27:00:14:AC:64:5F:1B:6C:3D:C4:E8:14:91:2A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce5c78d7-59ef-4c1e-8f82-e7d15de1174e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.68.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:e3:c5:27:10:cb:f6:97:b7:cd:93:43:c0:da:3a:45:e9:a7:
         a6:2a:70:64:54:68:08:fc:4c:9f:fb:be:30:e8:8f:62:d5:c2:
         25:29:44:bb:7a:5f:74:ff:a9:b3:51:e8:7e:8d:1b:c3:90:b4:
         01:98:79:49:3e:6d:b5:19:10:9e:41:79:f7:15:89:dd:88:89:
         72:37:5a:c5:3b:86:a0:e7:2e:ce:3f:37:d4:7d:28:ad:9f:e4:
         ad:a2:47:62:a0:c6:f3:4d:7b:87:44:58:f8:35:f3:d4:44:4d:
         18:38:79:0c:64:45:1f:93:66:e6:99:d7:4f:0f:92:bf:fb:83:
         c5:b2:39:b6:91:cb:f4:5f:4f:46:e1:07:aa:c8:31:e1:34:a1:
         e4:8b:06:d2:15:82:99:66:b4:26:13:1d:8b:0f:16:a9:c1:96:
         70:70:e1:3f:c0:88:90:b4:0d:ae:31:b5:36:4b:c9:59:75:58:
         e7:cf:2d:55:d6:2e:23:a5:a1:0b:00:c2:ca:6d:df:0a:d8:91:
         7b:70:fe:52:15:5b:b4:8b:bb:e9:38:98:99:d9:70:ea:ca:0c:
         9e:5e:39:e3:aa:a6:cb:a4:61:c6:98:0a:13:64:7a:10:cb:40:
         02:4b:62:04:13:73:e2:36:a6:38:12:91:19:d3:f4:c0:19:62:
         de:f1:71:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 06:59:31 2026 by rpki-client