Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00317610-3a31-478f-9573-22e3fe40ba97.roa
File:                     00317610-3a31-478f-9573-22e3fe40ba97.roa (raw, json)
Hash identifier:          plYrHLSgqHBelX+rkMpPfBLuejO2UqClxZZjF0PRSV8=
Subject key identifier:   CE:83:E3:8A:BA:02:63:55:5E:4D:00:72:1C:E0:5A:2B:70:02:21:AA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       10D416A53267DF652249D74E97B0D849797DA570
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00317610-3a31-478f-9573-22e3fe40ba97.roa
Signing time:             Thu 07 May 2026 00:00:03 +0000
ROA not before:           Thu 07 May 2026 00:00:03 +0000
ROA not after:            Wed 05 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        64.74.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d4:16:a5:32:67:df:65:22:49:d7:4e:97:b0:d8:49:79:7d:a5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  7 00:00:03 2026 GMT
            Not After : Aug  5 23:59:59 2026 GMT
        Subject: serialNumber=986cf0e2f22737a643ad20ff677533e617808829288133cdf8488c6785ac7e2a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:94:d3:ab:40:e5:22:39:c3:ee:63:a6:50:8d:
                    b7:c0:ef:94:ae:9b:5b:be:b4:94:4b:b0:b4:f7:48:
                    03:a6:9e:7b:6f:99:76:95:69:1c:2d:0a:e2:cf:2a:
                    ab:8c:e4:61:9d:4e:38:75:64:1d:88:f5:01:b8:b5:
                    c9:cf:77:35:0f:de:cc:a1:d0:34:3d:b2:88:eb:e2:
                    5d:e7:7d:14:ab:99:3a:dd:8c:e2:38:35:45:70:5d:
                    e6:c4:c5:df:b0:0e:8d:d6:fe:34:29:74:0d:db:75:
                    50:27:47:5e:e8:65:d5:41:56:a6:f2:62:6f:e5:aa:
                    32:a9:4a:fc:5b:c7:b0:8b:46:01:04:55:da:05:fd:
                    36:6b:c0:3a:68:44:a2:a4:f5:24:2e:ef:33:9b:f3:
                    93:13:9c:bd:f8:28:f7:10:ac:8a:4b:bd:a0:68:9f:
                    16:07:56:fa:bf:ad:12:f5:ef:b6:b9:a5:8f:b1:1d:
                    80:9d:51:1e:4a:dc:ef:67:ad:d8:42:47:ae:f3:07:
                    77:10:c6:49:04:39:58:de:ab:ab:48:a5:ec:09:9b:
                    bc:1b:42:61:26:3d:bc:7d:2d:37:3d:c7:b9:44:b5:
                    56:1d:16:c8:8b:8a:01:e6:51:ca:74:0c:25:78:3a:
                    ad:8b:a1:59:c8:55:89:99:7f:74:e7:9b:5b:0b:2c:
                    7d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:83:E3:8A:BA:02:63:55:5E:4D:00:72:1C:E0:5A:2B:70:02:21:AA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00317610-3a31-478f-9573-22e3fe40ba97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.74.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:a6:fe:6a:a0:ce:d1:21:b4:6b:10:2c:e6:37:36:9d:2f:9f:
         20:b4:6d:09:3b:a4:7e:b0:c3:0a:48:0d:bf:f6:35:13:64:0d:
         2a:cd:bf:f5:06:f8:3b:d7:35:ce:80:dd:c3:57:21:68:a4:e7:
         68:c1:20:40:8c:e6:82:bc:be:40:f2:39:69:91:9b:40:2f:03:
         a5:a1:e7:3a:27:8d:45:31:a7:1d:62:97:70:39:81:b4:10:18:
         50:33:4f:fe:70:a5:16:23:5e:97:28:13:54:9d:ad:aa:3b:1e:
         7a:fc:8c:fd:16:6f:17:f0:b1:29:94:20:83:22:84:02:e6:2a:
         83:14:a1:0f:2c:c0:58:d0:e5:9a:5f:6c:2d:81:54:03:c5:eb:
         3f:5d:41:e2:8d:58:33:28:19:82:1a:14:dd:bd:3b:27:2f:ab:
         18:fd:24:22:4c:d4:87:12:6c:8c:54:f5:28:29:b0:2b:32:58:
         d9:9d:40:e3:f1:98:f0:c7:5f:71:8a:e0:dc:49:f5:67:f6:43:
         f1:15:31:3f:4c:5f:7e:18:2c:b4:ad:82:4d:4a:31:e1:dc:0a:
         f3:1e:b6:6e:8b:10:80:f6:5f:fd:2c:d2:08:7f:94:84:19:01:
         0f:74:66:25:2b:9f:60:b9:68:e2:8c:4a:6c:b6:fa:cd:20:51:
         d3:52:97:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:46 2026 by rpki-client