Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04e77d06-85b1-4778-87e5-16c2a06b24ce.roa
File:                     04e77d06-85b1-4778-87e5-16c2a06b24ce.roa (raw, json)
Hash identifier:          wlLlU/Oli3rc36zZBwSYL6EZGkysRjUUGjbw2qLeQ8E=
Subject key identifier:   18:73:C0:E6:70:F2:8C:60:44:3E:32:29:5E:83:3D:7F:7F:4A:75:29
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2409A04A84DB9A51C7733BE6E77466FE63B74497
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04e77d06-85b1-4778-87e5-16c2a06b24ce.roa
Signing time:             Sat 18 Jul 2026 00:40:55 +0000
ROA not before:           Sat 18 Jul 2026 00:40:55 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        56.229.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:09:a0:4a:84:db:9a:51:c7:73:3b:e6:e7:74:66:fe:63:b7:44:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:40:55 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=06bfb050bacfe084482ce10de2cfb66954122e84db9acf0cb6414dab288ec8fa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ca:35:fc:34:a4:d0:bd:4c:0b:41:71:9b:a5:
                    ec:98:ad:f5:84:00:af:e4:37:91:11:40:40:ae:1d:
                    ec:6b:3a:49:65:55:ce:9b:3b:5b:b7:c2:18:bf:ef:
                    79:cd:89:fe:cf:94:3b:75:eb:33:32:39:11:ea:fe:
                    7f:15:33:8a:4e:e6:10:89:48:68:13:02:29:29:c6:
                    00:ff:1c:28:4c:91:bd:8f:e8:6c:ad:10:3e:57:29:
                    98:01:50:eb:79:74:d1:b1:ed:68:66:4b:9a:04:7a:
                    16:61:23:c3:ad:b2:b9:55:5a:f2:6a:62:9a:76:f5:
                    38:42:ec:02:0f:d1:a9:21:2f:d9:82:85:1d:f4:cc:
                    24:8e:e7:be:29:64:87:bd:c4:42:d7:cf:d5:c7:cd:
                    ba:f3:ce:ab:59:b3:56:62:63:0b:8f:06:e0:e2:d7:
                    66:1f:de:47:f9:2c:9c:ba:48:8c:34:e2:46:a4:38:
                    b0:53:fe:f9:fc:50:0c:b6:7e:de:b4:0a:da:80:6b:
                    5a:4e:6c:d0:bb:dc:58:5f:ef:de:01:90:14:a1:cf:
                    fb:1e:d4:52:43:59:bd:07:a5:e8:28:6d:c5:9a:7b:
                    27:6d:da:5b:8b:95:b8:d2:51:83:36:a4:fd:03:76:
                    dd:33:1d:38:9f:33:a0:2a:31:5e:16:34:cc:c1:fd:
                    ea:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:73:C0:E6:70:F2:8C:60:44:3E:32:29:5E:83:3D:7F:7F:4A:75:29
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04e77d06-85b1-4778-87e5-16c2a06b24ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.229.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a6:fd:ad:07:bd:4a:7e:62:f0:9d:68:08:e4:7c:d5:14:a3:88:
         44:fc:39:88:da:9c:d0:1b:5c:af:66:f0:06:43:22:b2:c5:58:
         f7:9e:55:40:d1:7a:fe:51:4b:91:c3:d5:63:dc:8b:44:08:c9:
         8a:e4:0e:7e:ad:9c:70:2f:98:b5:75:0f:d1:13:5a:5f:23:09:
         34:f1:97:38:aa:97:53:61:15:af:06:8e:46:80:7d:59:d5:cb:
         cd:d1:36:93:02:c5:0f:8c:da:fb:f8:c5:ec:b7:ca:6e:9c:22:
         41:12:98:d6:08:cb:76:bd:e0:95:6c:a9:ae:1c:51:49:1e:b8:
         46:e3:ef:a1:2a:34:9f:88:29:78:3a:66:50:ad:19:1a:2e:b0:
         36:c8:44:c2:e8:5e:dd:02:33:58:78:bc:23:1c:50:a4:b4:8e:
         a5:87:37:4a:64:48:bb:d2:69:06:14:44:ef:52:28:72:d4:64:
         06:c1:90:9e:61:de:3b:5f:5f:79:61:cf:73:4c:51:8e:0a:5f:
         1d:dc:cb:07:85:07:7a:61:2b:a3:0c:ea:87:20:8d:04:dc:bf:
         ff:00:bf:06:f9:fa:c3:5e:5f:00:90:81:39:e0:32:45:05:a2:
         ad:5c:5f:56:2d:cd:89:82:11:8b:4c:aa:3a:da:e9:fe:71:76:
         13:c7:99:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:32:32 2026 by rpki-client