Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25b41a4c-7a8b-41e6-8d0c-2dc7cee8afd0.roa
File:                     25b41a4c-7a8b-41e6-8d0c-2dc7cee8afd0.roa (raw, json)
Hash identifier:          Fd3ZG+EgCtBL7/NBRUQDGvECVNhSirnZxf/QxRTYO7E=
Subject key identifier:   3C:02:A1:DD:7A:C2:68:E2:1B:68:50:AE:E4:1C:B0:D0:B3:07:F3:F9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       489CA7FFA35FEFC601B92CA8790B8C3C515C0632
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25b41a4c-7a8b-41e6-8d0c-2dc7cee8afd0.roa
Signing time:             Tue 12 May 2026 00:50:43 +0000
ROA not before:           Tue 12 May 2026 00:50:43 +0000
ROA not after:            Mon 10 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        78.12.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:9c:a7:ff:a3:5f:ef:c6:01:b9:2c:a8:79:0b:8c:3c:51:5c:06:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 12 00:50:43 2026 GMT
            Not After : Aug 10 23:59:59 2026 GMT
        Subject: serialNumber=e9e9bf9340185e4c0e63485a2960b8f250f365769193ad34509410429e0a41b6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:87:63:60:d1:56:5b:a9:79:bd:a5:91:8b:0f:
                    ff:35:3c:e2:29:f1:b2:c0:c3:f3:7c:0a:f3:d1:5f:
                    18:05:6e:30:b0:3e:40:cb:48:c6:28:70:f5:1a:da:
                    a2:db:2d:d5:be:13:68:1c:35:88:5e:2d:29:e5:82:
                    fb:75:56:7a:6e:6a:26:4e:f8:12:a0:3c:c4:99:c4:
                    46:a2:8c:fa:de:83:f4:79:35:9b:eb:d4:84:ef:8b:
                    52:82:24:52:05:7c:ff:31:35:b0:a8:bf:e3:fb:79:
                    59:13:04:e4:22:30:41:a9:98:8c:6d:75:de:f3:b2:
                    54:22:6c:39:c8:1c:70:26:c0:53:a2:ed:08:06:77:
                    6e:93:70:4b:29:8d:01:cc:45:47:66:e8:93:ff:46:
                    ad:6f:d8:d0:e2:ce:04:d4:d0:25:02:93:54:6b:95:
                    93:6e:d5:73:e7:58:c8:be:e8:0b:fc:40:4f:a3:60:
                    8c:89:67:d5:cb:24:bc:3f:d2:e5:28:6a:7b:ba:b9:
                    d8:6a:1a:d0:f4:1d:f7:29:c1:5e:06:36:3b:ac:41:
                    b0:d8:84:a1:35:43:22:b9:94:1b:07:bb:94:10:cd:
                    88:7b:a3:d3:34:d8:5f:cb:4a:ac:5a:72:71:70:19:
                    a5:86:1e:58:cf:87:dd:b3:86:19:48:03:b1:80:64:
                    03:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:02:A1:DD:7A:C2:68:E2:1B:68:50:AE:E4:1C:B0:D0:B3:07:F3:F9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25b41a4c-7a8b-41e6-8d0c-2dc7cee8afd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.12.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         04:8c:6f:d1:d9:1a:a7:ec:10:61:31:bb:9e:a6:fa:54:7f:4e:
         dc:a8:1d:04:cc:22:15:d7:31:6f:a1:8d:03:ea:14:58:f3:37:
         02:e7:86:ed:05:c6:f6:30:1f:cc:c5:27:ab:8c:ca:18:f0:24:
         cf:26:a4:5d:80:28:7f:77:1c:bf:34:6d:a1:15:47:5d:f9:bb:
         7a:3d:24:45:19:07:34:5f:d1:a0:ef:87:b1:78:b9:6f:f8:30:
         0b:e3:b9:9b:5b:13:15:19:4a:49:70:f4:a6:83:40:af:5a:3a:
         04:ab:78:22:9c:f7:1c:55:03:e0:6d:dd:95:f6:4b:e7:fb:7d:
         07:19:40:bf:82:e1:b4:6e:19:49:52:c2:03:a3:d8:81:26:4c:
         bc:82:36:2f:75:25:a6:dc:33:cd:02:8f:65:d3:5d:1d:a2:5a:
         6c:68:a6:61:1c:73:31:94:d8:9f:b6:f3:b1:0f:09:d9:d1:82:
         ff:0f:ae:f6:1b:09:21:76:e9:d2:32:fd:24:a7:0f:6c:af:31:
         5d:a0:26:86:3c:fc:b9:53:19:27:2a:9e:41:fb:fc:9e:ca:d0:
         18:40:1a:1c:98:e9:6a:24:ff:a2:a7:df:3b:94:a8:28:fa:e2:
         d4:c5:49:17:e5:96:75:ba:12:67:c4:eb:34:d7:3d:f0:32:7d:
         dc:2b:14:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:55 2026 by rpki-client