Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f748045-d4b6-49e0-8960-3f89906b3806.roa
File:                     0f748045-d4b6-49e0-8960-3f89906b3806.roa (raw, json)
Hash identifier:          /08qnI+LmbU8W9+jFHY7c5ltFb8v+iKbSKf8pyVGg3Y=
Subject key identifier:   F8:65:6E:C3:95:63:21:D8:4F:F2:00:6F:8D:89:0C:F2:05:AE:CB:F5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4FF63F68A026D17D89F5DA2D9B3CDB6FCCCD313B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f748045-d4b6-49e0-8960-3f89906b3806.roa
Signing time:             Tue 05 May 2026 00:31:18 +0000
ROA not before:           Tue 05 May 2026 00:31:18 +0000
ROA not after:            Mon 03 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        172.106.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f6:3f:68:a0:26:d1:7d:89:f5:da:2d:9b:3c:db:6f:cc:cd:31:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  5 00:31:18 2026 GMT
            Not After : Aug  3 23:59:59 2026 GMT
        Subject: serialNumber=9fcbfddde288e64e708f5444bbec53491170fdd3b301710243b36be5e62cf34a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d0:8e:6c:d1:ed:7c:21:da:08:c1:4a:cf:6b:
                    f2:58:a2:02:c8:c6:7a:4a:36:90:92:73:0d:c7:6e:
                    4a:e6:ea:83:90:1d:72:b1:73:98:d5:29:ce:1b:85:
                    2c:dc:70:47:76:13:e0:1a:ec:90:66:b3:ea:2b:28:
                    85:06:2d:01:db:7c:a2:ca:bf:7e:85:80:8c:7b:79:
                    14:80:1d:99:a1:43:e9:b4:c7:7c:6b:3f:7e:a6:09:
                    ee:26:a7:e4:9f:6b:ce:96:c7:42:dd:e5:01:d4:9e:
                    bc:d3:20:32:98:a7:cd:1f:27:cf:d4:b3:68:77:ff:
                    4f:ae:ce:74:94:8b:0a:83:5c:41:62:17:6e:23:b4:
                    0b:37:af:47:6e:15:53:e3:62:4a:29:2a:53:c8:ee:
                    90:ef:b5:49:8d:5e:10:f9:71:e4:33:32:0d:20:25:
                    ab:2d:ce:77:0b:68:d1:c1:f7:c3:3c:8e:68:59:59:
                    5d:a2:4b:00:48:98:52:9c:41:8b:c2:bf:7e:42:41:
                    40:b3:37:76:be:4d:c0:8d:83:cf:46:70:f2:36:10:
                    84:ed:79:07:e4:af:26:ce:ed:f5:c2:9c:bf:43:0a:
                    eb:e5:92:63:db:a7:74:9c:ab:51:ea:ea:83:ed:78:
                    b9:bd:6b:c1:33:1e:e9:61:59:bf:70:fd:1e:22:1b:
                    94:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:65:6E:C3:95:63:21:D8:4F:F2:00:6F:8D:89:0C:F2:05:AE:CB:F5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f748045-d4b6-49e0-8960-3f89906b3806.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.106.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         6c:3f:32:62:ac:0c:71:46:9b:e3:1a:b0:b2:da:1b:ed:67:76:
         00:ca:9c:63:9f:f4:9d:b6:dc:3b:a4:a0:a4:82:1a:b1:49:f0:
         fc:d9:bc:c6:f6:b9:f8:62:37:7d:cd:71:06:8e:df:de:7b:a3:
         6d:f5:41:72:ff:1b:a5:af:20:30:1c:da:bd:65:b3:e0:68:12:
         f7:53:42:f5:71:c8:8b:39:d5:ac:a5:6a:14:0d:aa:c5:f0:3e:
         72:09:a7:85:c3:e5:c7:da:08:ef:82:b8:f8:3b:bc:9d:7c:5e:
         cf:e6:96:33:01:83:77:ee:cd:48:1c:04:13:ae:08:98:46:b1:
         e6:b3:0c:4a:70:ab:50:f0:57:e2:08:5a:30:b7:99:65:9b:1d:
         38:a9:58:6b:47:a1:98:a7:31:36:6d:2c:d9:34:95:08:e7:db:
         ca:68:15:28:27:f2:7a:6e:4a:73:b2:f6:8a:1e:ed:b2:eb:f6:
         fe:1e:b3:44:f6:d0:e4:6d:39:23:61:0b:11:7a:a8:60:97:16:
         73:e9:be:8c:96:fc:11:ae:22:24:09:c8:ca:0e:48:a7:69:5a:
         e5:91:83:75:94:d5:08:07:6f:d7:5f:a4:73:7a:b7:04:85:35:
         6e:3c:30:1e:74:f6:d4:b6:f2:4f:ca:f8:e7:be:a1:5e:ff:2c:
         9b:ad:47:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:19 2026 by rpki-client