Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/317476ee-2aeb-4990-a944-19600a7d946f.roa
File:                     317476ee-2aeb-4990-a944-19600a7d946f.roa (raw, json)
Hash identifier:          cIC5ugaydQVbENKxXvIElHaV8YTM5HlpCnFPLSOq0I0=
Subject key identifier:   B8:1C:77:97:90:C0:86:8D:D9:4D:B9:7B:8F:EE:1F:85:B0:96:D7:2F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7F5A42354210E52130825F89C3EC465004AA7470
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/317476ee-2aeb-4990-a944-19600a7d946f.roa
Signing time:             Mon 22 Jun 2026 00:21:09 +0000
ROA not before:           Mon 22 Jun 2026 00:21:09 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        65.183.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:5a:42:35:42:10:e5:21:30:82:5f:89:c3:ec:46:50:04:aa:74:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 22 00:21:09 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=f9ef65dc97727782cf81e55db8f69f9c66dbc5611534a8fe656662abb7496dcb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6b:2b:81:be:51:44:17:0f:ac:6b:f2:ea:c8:
                    72:a2:9b:22:64:2b:6d:34:99:f2:c5:6d:97:09:99:
                    5c:76:97:02:9b:bd:0c:4e:46:c8:7f:2c:c2:a2:ec:
                    69:a3:dd:2d:1d:23:a4:e3:9a:9e:0c:8c:b3:f2:88:
                    90:f2:a0:8a:5a:1a:3f:0a:69:99:c7:b7:2c:23:b6:
                    51:5a:87:14:5c:ad:54:d4:e6:3b:e4:84:61:68:05:
                    2c:f3:19:68:b8:2e:53:5a:1b:21:1c:e0:f2:45:7f:
                    00:7a:97:d2:0d:68:a2:eb:f5:27:c9:d9:d3:9e:a8:
                    44:a9:a6:67:2a:01:d4:66:73:a6:90:3c:62:b0:db:
                    98:48:02:7b:98:89:53:32:52:55:fd:58:c0:e2:77:
                    1c:e0:35:7f:69:2a:53:c3:d8:62:09:7b:17:b1:b2:
                    a7:e9:f8:d6:38:38:8e:df:34:19:ad:5b:d7:40:76:
                    99:d2:03:9e:a0:b2:51:5b:43:ae:25:4c:5e:91:aa:
                    c8:30:88:ff:aa:bc:81:3e:e4:1c:0b:aa:0b:9a:78:
                    7d:4e:7d:6f:a4:b1:ba:14:60:4d:03:e4:50:a4:29:
                    35:d6:8a:ef:57:8c:90:70:f2:f3:c4:a8:3d:13:c1:
                    8f:82:a9:4d:a5:a0:96:7f:e5:72:48:ef:7c:1f:b6:
                    1d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1C:77:97:90:C0:86:8D:D9:4D:B9:7B:8F:EE:1F:85:B0:96:D7:2F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/317476ee-2aeb-4990-a944-19600a7d946f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.183.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cc:e5:8e:34:9c:25:36:2b:72:26:83:01:09:ec:c4:b4:71:95:
         8a:51:5c:98:b7:36:5f:79:80:8c:c7:ce:2a:f4:50:f7:9b:4c:
         94:5e:24:97:2b:71:7b:76:9c:e6:34:ee:27:34:78:d1:a6:d0:
         28:05:59:74:c0:24:ac:03:73:1a:c7:09:e2:62:75:59:73:6b:
         bf:91:4d:6f:ca:9d:05:62:d4:2a:1c:5c:7b:52:2c:3a:1b:f1:
         d5:fd:cc:bd:0e:60:f6:56:89:39:09:c9:83:83:ae:23:a1:80:
         69:f7:b8:7a:b3:e1:85:d7:ff:99:91:58:e2:6f:0c:bf:95:82:
         7a:04:60:81:cc:2f:46:1c:89:02:2d:29:99:8c:c6:89:99:9b:
         20:6b:00:33:1c:ab:88:5a:a7:89:6b:b8:6d:8c:ed:ea:37:cf:
         32:cc:07:9d:9e:37:ae:4b:2d:2c:f7:1a:42:62:78:be:fd:94:
         2f:2c:a3:b1:c7:de:99:2f:44:98:dd:98:80:5c:a9:a0:cd:80:
         ef:64:4d:fe:86:a3:d6:8f:a6:ee:63:8f:54:5b:44:de:78:a1:
         42:93:07:9b:26:1e:e8:09:db:60:69:fd:e7:5a:b7:c1:cc:85:
         ad:69:50:fd:45:fe:63:25:ea:db:10:6a:72:d7:08:c0:5d:04:
         8f:9b:78:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:51 2026 by rpki-client