Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/375a6ca2-770f-45e1-a8af-10c7303818a0.roa
File:                     375a6ca2-770f-45e1-a8af-10c7303818a0.roa (raw, json)
Hash identifier:          xugRW6dH7uJo83vdexJwU07/tbqNAKEUD1OOr/j/2QI=
Subject key identifier:   6D:EC:A1:1B:65:96:B2:B2:79:60:1A:06:A3:CB:5D:22:2B:5F:EE:2B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3E881F1CB2C61FF7221FE543CBC3824653093959
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/375a6ca2-770f-45e1-a8af-10c7303818a0.roa
Signing time:             Mon 20 Jul 2026 00:10:30 +0000
ROA not before:           Mon 20 Jul 2026 00:10:30 +0000
ROA not after:            Sun 18 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        163.119.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:88:1f:1c:b2:c6:1f:f7:22:1f:e5:43:cb:c3:82:46:53:09:39:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 20 00:10:30 2026 GMT
            Not After : Oct 18 23:59:59 2026 GMT
        Subject: serialNumber=db8bb8a7b2b6ed5b2805d30cde1cee01d669342871e9eb998c807c7fcb05ddec, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:50:26:83:4e:b6:83:83:8d:1a:0f:d6:ff:01:
                    1a:34:79:f8:ae:45:d5:18:46:a1:d8:ae:91:42:0a:
                    ea:44:7e:eb:7d:8a:7d:5a:01:32:d5:dc:1e:ea:9c:
                    17:17:4e:7d:30:11:7d:50:71:a9:9d:54:40:26:fb:
                    bd:68:82:9e:74:46:9e:da:43:c4:06:67:73:7f:73:
                    e5:c8:79:54:2d:4b:03:75:60:43:a6:63:56:3f:e3:
                    50:15:2f:d9:21:61:39:dd:37:5e:c6:47:03:82:af:
                    eb:7f:e8:36:c5:ec:d5:b1:8e:3e:ed:7b:e8:aa:ac:
                    99:bf:05:ee:31:27:45:30:17:e7:bb:14:ac:12:94:
                    e5:10:d8:ce:f0:3a:8d:22:c1:62:e4:86:9f:8a:e3:
                    9f:59:b0:02:83:8d:ef:28:37:85:28:a4:a5:a0:f9:
                    d6:f0:8e:d7:99:58:5c:61:57:2b:57:30:94:a3:37:
                    80:c5:dd:5e:be:41:07:6f:a1:81:42:50:67:6c:be:
                    3b:5d:f0:b8:fd:b8:a9:e8:a8:17:07:28:40:f1:14:
                    33:17:93:1a:f3:5e:83:d6:b1:89:e8:e6:e6:9e:1c:
                    33:e9:1b:57:c2:f3:b1:a2:ee:3c:65:ff:8e:dc:93:
                    3b:ff:55:f4:87:d2:79:4d:4c:e0:34:8d:7b:e7:41:
                    0b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EC:A1:1B:65:96:B2:B2:79:60:1A:06:A3:CB:5D:22:2B:5F:EE:2B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/375a6ca2-770f-45e1-a8af-10c7303818a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.119.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         60:fd:8c:de:c4:c9:ea:e4:9e:c4:03:fc:a7:e7:4c:d0:3c:28:
         5b:dd:fb:76:f7:a5:77:c9:14:4b:d0:0e:36:9d:20:d3:7d:df:
         75:2b:09:9d:66:05:e1:ff:8b:16:d2:f3:fb:1a:ef:c5:f2:f4:
         7e:fa:da:62:4a:61:1e:5c:bf:6c:c7:65:89:05:1f:1d:b4:6e:
         bc:88:72:8b:c5:03:07:33:49:d8:98:16:b8:c6:5b:d8:5c:ce:
         2e:2a:7e:24:83:60:6f:78:1e:b3:4f:fb:9f:d9:b9:4e:be:c1:
         68:97:8e:fc:6d:54:13:99:eb:f6:52:55:34:c9:ba:fa:47:f8:
         c4:9a:8f:cd:54:e6:25:71:2d:8b:b8:fc:2c:44:be:54:18:6c:
         6d:4c:3a:28:b0:12:a6:0f:71:c4:1a:84:a6:44:5e:48:1a:af:
         6e:94:d6:b1:2a:b0:24:36:92:08:af:59:1e:01:31:4f:5d:70:
         66:3d:e4:35:09:55:88:80:0d:33:6a:76:b3:ec:7b:0d:6e:a7:
         8a:3e:ac:ab:2a:e6:eb:29:5b:df:7f:03:0b:df:48:16:93:14:
         71:bf:2d:e8:1f:d3:dd:f7:eb:35:8a:b4:25:ab:dc:97:6b:75:
         86:63:15:fe:4b:40:2e:5f:07:d7:72:6b:2b:5a:ad:17:68:6a:
         79:da:9c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:44:39 2026 by rpki-client