Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ac6e2c3-9928-400e-84b6-e424e58541a8.roa
File:                     0ac6e2c3-9928-400e-84b6-e424e58541a8.roa (raw, json)
Hash identifier:          jc0Pu3A3u8nc4dFkeKCOmQLm1dZKN4A7UxXHBsN9SBU=
Subject key identifier:   BA:DE:26:1C:A5:58:A1:E2:E2:DD:39:7E:9D:6B:EA:E9:27:51:AC:79
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       44B426D4FC42EF0F0E2AEB8BF46DE92E9BD77F30
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ac6e2c3-9928-400e-84b6-e424e58541a8.roa
Signing time:             Sun 19 Jul 2026 00:00:05 +0000
ROA not before:           Sun 19 Jul 2026 00:00:05 +0000
ROA not after:            Sat 17 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        195.4.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b4:26:d4:fc:42:ef:0f:0e:2a:eb:8b:f4:6d:e9:2e:9b:d7:7f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 19 00:00:05 2026 GMT
            Not After : Oct 17 23:59:59 2026 GMT
        Subject: serialNumber=045aa60a01ab6c8d0be028f73bf2cc712db8710ee4657b43baab2f533a733ac8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:89:10:01:9d:5e:17:5b:f3:eb:7f:a6:a1:48:
                    17:d7:4d:ed:12:e9:df:dd:b6:6f:22:b0:8d:aa:a9:
                    f7:53:25:17:04:3e:8e:5b:b3:5f:92:ef:76:30:70:
                    e0:ba:71:ba:fb:27:d4:3d:4b:05:dc:4e:9a:38:e5:
                    50:3a:bb:c9:5a:25:d4:f2:ff:21:3b:de:11:51:b1:
                    a8:dc:c0:ba:19:9d:ca:15:b9:5a:8b:61:e2:14:c5:
                    fa:25:22:a2:9b:6f:ac:0d:6e:55:9d:56:50:3b:f2:
                    a2:1a:17:f9:ca:1c:1a:e6:dd:ca:e2:28:87:89:8a:
                    8a:ec:ff:6a:7b:9f:70:0f:4e:9d:2c:7e:1c:20:aa:
                    63:70:12:e2:b2:ea:68:cd:ea:e9:2c:c1:49:a1:49:
                    5b:99:e5:75:7b:f5:da:a8:5d:49:80:ee:5f:81:22:
                    95:35:a0:ae:40:a1:b8:40:dd:15:3f:a2:ca:45:11:
                    e9:14:9b:70:3d:c5:4d:11:65:03:5c:33:9c:98:46:
                    1f:26:60:02:de:b3:4c:dd:ad:c3:08:ae:38:e7:e1:
                    0c:98:11:e5:40:cb:7a:9c:75:93:d1:bb:df:e1:55:
                    16:a9:d2:c4:97:55:11:e9:89:85:1a:e0:af:d2:c3:
                    80:69:2e:40:13:9b:bd:6c:15:b8:aa:16:9e:61:27:
                    26:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DE:26:1C:A5:58:A1:E2:E2:DD:39:7E:9D:6B:EA:E9:27:51:AC:79
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ac6e2c3-9928-400e-84b6-e424e58541a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.4.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8b:78:b6:d6:99:18:e8:54:ab:eb:1a:18:51:2f:2e:a1:79:9b:
         ea:52:2d:9b:13:cc:b2:a4:52:98:eb:32:89:73:b2:3e:f8:64:
         40:51:28:0a:55:63:79:bf:61:8c:e0:43:ef:7b:37:10:ad:80:
         99:a7:7d:b8:4c:55:da:e0:6a:ab:61:03:10:09:9e:3c:d4:3c:
         19:30:7a:35:de:0a:c4:d1:07:b9:d3:3c:b3:b0:aa:49:fb:48:
         ea:05:cd:b0:bd:41:3b:38:c2:00:4a:9a:03:21:2e:87:70:e2:
         ec:9d:d9:0e:5d:45:e6:6f:12:35:3f:a3:10:c6:b6:5c:5a:92:
         74:8e:c9:57:a9:fb:97:20:fc:71:71:bd:05:a3:78:29:c1:fc:
         17:52:43:3a:f8:2c:1a:d7:e7:a8:99:a4:88:7a:3e:ce:69:6d:
         43:ad:64:79:e3:3d:1a:23:2b:11:66:ca:45:37:71:1c:05:66:
         62:4a:e3:1e:09:8e:41:f8:c9:ac:83:85:fd:24:30:85:b0:26:
         22:48:88:be:0e:10:84:f7:88:cb:83:c1:37:c4:01:ab:06:74:
         37:4c:1e:2d:74:60:45:e9:39:2b:61:5f:36:29:45:77:16:68:
         22:83:00:fd:60:ae:60:85:a4:be:2c:a5:e0:ad:30:c2:2e:ff:
         5b:a1:ad:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:33:02 2026 by rpki-client