Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ae2690c-9ed5-494e-a25f-13a3abd7b6cf.roa
File:                     0ae2690c-9ed5-494e-a25f-13a3abd7b6cf.roa (raw, json)
Hash identifier:          xG42fSnR25cBU5XuRNFMU14Qa5akDsGSVHwZUI4447o=
Subject key identifier:   5D:E6:EB:16:58:91:38:10:F9:AA:AE:C0:FF:4E:27:39:07:1B:3C:37
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       040AFEE42F8EF04F29C94FDB749B9E36D0675AF3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ae2690c-9ed5-494e-a25f-13a3abd7b6cf.roa
Signing time:             Thu 23 Jul 2026 00:50:47 +0000
ROA not before:           Thu 23 Jul 2026 00:50:47 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        93.77.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0a:fe:e4:2f:8e:f0:4f:29:c9:4f:db:74:9b:9e:36:d0:67:5a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 23 00:50:47 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=65e25c746cd776c6c9363182e303b90e5c17a09516d479e2032252ef639f8cdf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:0e:25:d3:99:5e:8d:ba:32:41:81:11:3c:
                    4d:7a:c0:7a:5b:53:21:66:83:68:11:ea:16:03:0a:
                    b3:ba:26:c9:1d:fd:40:a6:9c:56:8a:19:26:a9:d4:
                    8d:b5:db:a4:06:7f:c5:79:12:88:2e:ef:f2:59:c2:
                    d6:45:f5:9c:3b:c1:f3:29:e3:bd:3f:f4:34:d2:62:
                    8f:84:99:3e:28:53:84:56:9b:d1:3a:53:18:c2:af:
                    19:08:72:ba:f5:3f:86:20:36:ea:a1:45:d0:12:c9:
                    33:8e:b6:2b:bd:22:45:d2:c7:7c:c0:86:71:bd:a9:
                    0d:73:2b:c1:78:56:d6:2c:7e:9b:7a:27:18:48:6a:
                    6b:1b:4f:c3:9e:4b:a2:56:18:a8:12:31:94:0c:54:
                    a8:49:dc:20:ce:7b:cc:f8:36:4b:7a:d7:8e:ef:29:
                    65:de:7e:a9:7d:5e:e0:c8:6f:2b:a8:46:64:e7:56:
                    c0:45:4c:04:be:00:8c:be:26:59:94:0d:e9:24:9d:
                    e4:a1:f9:fb:13:e3:cc:81:11:a3:da:75:10:6f:eb:
                    cb:cb:d8:c6:6a:14:6d:6b:f6:34:4a:c4:59:52:1b:
                    91:95:82:d0:8a:ab:7d:0a:b2:37:d8:11:5d:51:e6:
                    56:a9:23:7e:2e:ed:d6:e6:0d:53:e5:aa:56:55:1f:
                    9a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E6:EB:16:58:91:38:10:F9:AA:AE:C0:FF:4E:27:39:07:1B:3C:37
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ae2690c-9ed5-494e-a25f-13a3abd7b6cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.77.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:b0:28:d2:aa:b5:d5:81:db:51:49:dd:e6:24:85:89:00:24:
         64:f2:ea:bb:4c:8e:4d:3a:e7:66:bd:71:77:d1:2a:34:a3:1a:
         ce:07:73:c8:f3:ac:76:87:b9:cf:8a:c2:e0:9c:9a:90:84:48:
         76:6a:78:90:4c:b9:8c:d0:7c:ff:5a:13:eb:2a:79:6d:18:0d:
         8f:5e:5f:c5:b5:5d:db:4a:f6:36:75:8c:06:df:6d:2e:24:5a:
         c2:d3:cd:1e:d7:ee:ac:ae:75:f6:db:33:01:cf:6a:3f:24:37:
         9f:34:96:6c:a5:67:b9:24:9b:c3:a6:97:77:c3:e3:88:e7:5e:
         d7:f6:b6:c6:62:e6:11:b9:63:42:67:1d:73:36:81:0b:92:1a:
         95:97:3b:3e:21:c2:34:c9:76:b9:fc:25:b2:32:6b:46:48:22:
         43:f1:bd:07:57:b7:b6:6b:53:d8:53:15:75:92:30:2d:45:94:
         1c:d3:d8:e4:f7:a3:db:de:05:71:83:e3:7e:5e:52:aa:26:e8:
         75:cf:28:d1:30:cc:26:a2:de:74:c7:1e:21:ac:e7:a9:6d:65:
         e1:eb:c0:45:ef:90:66:d9:dd:01:25:b9:b4:d0:f8:cf:37:c7:
         54:4b:ed:09:7b:95:a8:0c:76:74:58:a5:df:fc:88:66:be:d7:
         8f:0a:0d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:10 2026 by rpki-client