Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb8b70dd-fb70-4733-8f4d-3bfcc2f0e2f7.roa
File:                     eb8b70dd-fb70-4733-8f4d-3bfcc2f0e2f7.roa (raw, json)
Hash identifier:          xhIIZKJCROI7yvxZlFvVYZw2g3QXZ+OUWix4NQzxJx4=
Subject key identifier:   67:3C:A1:FE:F7:85:28:28:A0:BF:03:EB:BF:07:79:9C:04:E6:B8:F6
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       684A1B5E3E9A4B12661C1FFA98F277DF43C1D7A3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb8b70dd-fb70-4733-8f4d-3bfcc2f0e2f7.roa
Signing time:             Thu 14 May 2026 01:11:06 +0000
ROA not before:           Thu 14 May 2026 01:11:06 +0000
ROA not after:            Wed 12 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        18.68.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:4a:1b:5e:3e:9a:4b:12:66:1c:1f:fa:98:f2:77:df:43:c1:d7:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 14 01:11:06 2026 GMT
            Not After : Aug 12 23:59:59 2026 GMT
        Subject: serialNumber=7c15ab14e232ead83d60ec70d1e67713aeafb9e475bf4a4e00531296bfd1352a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9c:18:c2:84:03:21:24:b7:94:c0:44:f7:e9:
                    7f:fc:a1:a7:04:74:7d:8b:9b:ca:1f:6a:1e:2c:bc:
                    b3:9a:cc:42:34:1d:25:eb:bd:5c:ce:00:06:98:d0:
                    9a:d2:fd:40:dc:a7:f5:66:a2:76:a3:7a:2d:b0:de:
                    5c:17:d8:8a:18:e3:cc:15:bf:0e:ec:25:14:bb:e2:
                    b8:a6:19:e4:dc:89:cc:36:bd:2d:fa:29:99:c8:6c:
                    fb:dd:cc:e2:3d:16:c1:87:d7:f6:ed:9a:99:ed:53:
                    77:71:40:d7:04:5d:1b:42:da:2b:54:e2:8a:ca:ff:
                    7b:30:b3:8b:ad:ce:10:45:2f:2b:4a:0f:30:5f:00:
                    81:a3:52:9b:f2:ce:d7:a3:62:e3:61:13:a9:97:9b:
                    76:6a:26:0d:88:42:65:e5:19:9d:57:b2:93:b2:37:
                    2d:31:a5:ff:9a:22:d1:ad:f8:c0:06:96:ef:de:59:
                    32:0a:7c:85:63:8a:a7:11:bc:4a:2d:6b:e0:5c:18:
                    f5:90:57:ed:15:f0:ec:3e:a0:bc:e1:bc:4b:91:52:
                    ec:13:e7:f8:7c:ee:27:a1:04:ea:3d:e9:b2:ac:7a:
                    08:86:72:f6:19:50:2a:47:fd:23:ae:6f:83:31:79:
                    6d:9e:2f:e2:a5:5c:e0:72:75:10:2a:49:56:d2:a7:
                    91:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3C:A1:FE:F7:85:28:28:A0:BF:03:EB:BF:07:79:9C:04:E6:B8:F6
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb8b70dd-fb70-4733-8f4d-3bfcc2f0e2f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.68.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:53:a2:b9:bd:82:19:b3:ef:ee:92:9f:db:cb:a3:2d:1c:94:
         63:e9:ba:1e:04:ee:84:be:14:cd:53:14:e6:3b:8f:aa:e7:a8:
         31:ed:8a:4f:c6:02:84:5c:11:13:e7:4d:24:df:ee:75:e7:6e:
         59:df:9b:79:8d:c3:02:19:9c:3a:e5:10:6d:eb:08:62:a2:c1:
         8c:e9:1e:ab:f7:c9:ed:7f:8b:3a:1d:97:b3:ee:9d:a5:9d:5c:
         d1:a8:01:76:a9:11:d9:83:1b:e3:ca:59:30:97:a0:c0:7e:ba:
         24:9f:d5:b7:57:df:6c:8c:37:d7:2d:a1:30:03:da:7c:6c:4a:
         df:98:df:94:ca:9f:be:e4:08:92:13:92:ec:ae:a0:44:13:b8:
         02:ad:38:e4:9a:19:8b:2d:af:9a:c6:fa:da:f8:d6:0e:04:19:
         77:11:7a:39:81:d3:ee:da:fa:2c:46:5b:8e:d1:cb:e8:80:e1:
         90:76:be:50:70:07:14:b2:bd:99:4d:a7:40:ea:22:66:aa:78:
         65:24:38:dc:18:e7:35:f1:f4:47:83:24:ff:c9:44:32:25:e0:
         5c:91:ef:bb:47:06:32:4d:ac:b1:5d:81:0a:47:cd:20:48:32:
         cb:a3:73:d8:04:55:02:9c:28:07:17:00:ff:4c:e8:01:f4:f7:
         d9:14:bf:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:45:48 2026 by rpki-client