Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0950b2df-b871-4023-8e08-6a4f755c3a56.roa
File:                     0950b2df-b871-4023-8e08-6a4f755c3a56.roa (raw, json)
Hash identifier:          NLpUVMxJvp6vQyNKWuU7IH7xp2a5C/otx9eBIF7yDKw=
Subject key identifier:   DA:86:98:0E:97:F5:B0:FE:24:56:21:89:56:F2:C1:3B:73:9D:A1:6A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       19A9CA79E545D58D380F48F990FD4922895FFE0C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0950b2df-b871-4023-8e08-6a4f755c3a56.roa
Signing time:             Thu 23 Jul 2026 00:41:37 +0000
ROA not before:           Thu 23 Jul 2026 00:41:37 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        93.77.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a9:ca:79:e5:45:d5:8d:38:0f:48:f9:90:fd:49:22:89:5f:fe:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 23 00:41:37 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=1ecf1a070dbeaa05c289eb10cd7a5e9f6c7dc44adb05954502da9506c14b567d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:05:55:3f:90:39:3f:5c:47:9f:6d:55:7b:a7:
                    f9:55:0f:f5:88:df:b7:09:6a:e2:90:66:09:93:d3:
                    da:da:88:ac:f9:17:9e:d8:70:1a:59:e9:7c:eb:a7:
                    cf:dd:5d:85:91:3a:89:66:57:a6:f8:5b:be:bc:bb:
                    fe:95:7f:cc:32:6b:31:6d:55:c7:c1:71:ef:c5:46:
                    f5:22:27:e2:b3:6f:cc:7c:46:07:2a:cd:1a:b1:dc:
                    ed:9c:57:7f:f6:31:25:ec:d8:76:d5:65:af:b8:57:
                    1c:8d:cd:d0:7e:cd:c2:81:1b:30:ea:97:97:80:9e:
                    8a:e9:f8:9a:f0:2e:94:11:96:31:ed:e1:e0:28:9d:
                    12:a0:aa:a3:01:5f:95:bd:f1:ea:de:b0:00:96:95:
                    8e:1c:01:fb:e2:ba:7f:cb:fc:17:d8:df:b9:92:43:
                    f7:3e:ca:00:ce:2b:9f:f7:9e:01:dd:84:df:66:16:
                    a6:b5:61:af:0b:6c:cc:19:13:94:07:49:54:b9:b1:
                    c1:b8:ec:36:c1:b4:33:d2:f9:c7:40:07:d4:b8:7e:
                    f0:61:d5:c3:04:93:a4:cd:5e:fb:b1:db:d6:76:61:
                    91:8b:71:0d:d7:2b:d7:42:43:34:c4:5f:db:34:50:
                    dc:fc:cb:30:27:72:3e:d3:8d:46:cb:30:a5:8e:a8:
                    1c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:86:98:0E:97:F5:B0:FE:24:56:21:89:56:F2:C1:3B:73:9D:A1:6A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0950b2df-b871-4023-8e08-6a4f755c3a56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.77.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         aa:4a:fb:34:79:76:90:6c:eb:a8:d5:82:31:0e:db:10:fa:00:
         05:c5:1a:2f:75:19:1c:86:75:57:d2:a0:40:9c:7b:5f:bc:7e:
         4e:1d:0f:ad:bb:0a:08:c0:4c:3a:08:6c:dc:57:5e:66:3e:9e:
         6b:dd:1d:47:36:04:a8:a1:0b:de:f3:4e:e6:8f:0c:df:8b:51:
         19:4c:c4:41:d0:e3:73:dd:a3:d7:ee:b0:30:cd:f0:1c:fd:8d:
         17:09:8c:26:ca:f0:0f:6c:16:df:11:95:88:2d:f8:ea:8f:02:
         8b:b9:f5:75:e6:dd:12:22:2a:75:1b:66:28:48:94:2e:3f:ea:
         29:00:7e:2c:d1:b5:a3:23:c6:22:07:e3:18:bd:11:78:a4:b1:
         6f:fb:70:a3:f5:b0:90:84:b2:08:06:2b:77:ab:33:72:d7:50:
         3b:70:62:ca:4f:34:96:fc:2a:6d:ad:ad:8f:47:3f:a8:9a:bf:
         1e:08:35:e4:c6:db:38:c3:3d:ee:3d:67:f3:75:ca:ad:64:ce:
         bb:b1:09:f9:08:06:d3:ff:f1:58:43:8a:33:ec:48:0e:1e:59:
         6a:00:6a:9c:b5:ba:b2:3e:31:83:10:ed:0a:24:5c:f4:65:17:
         de:6d:97:f8:9c:6d:70:0f:7e:79:85:d4:2f:4b:f3:7b:9d:d7:
         cf:09:7f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:38 2026 by rpki-client