Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4110e3a3-0f8c-4c51-83a7-e327c7d32a91.roa
File:                     4110e3a3-0f8c-4c51-83a7-e327c7d32a91.roa (raw, json)
Hash identifier:          scbUNeMSrsTtlZhJfvim2LgfBrUztPZb0m2aNQSuHTg=
Subject key identifier:   40:92:5A:97:E7:98:32:F0:26:6E:FE:47:54:2E:0A:BF:04:9E:39:CD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       264CEEF7791F4278CEB10B4FF730D22FACFFFDFC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4110e3a3-0f8c-4c51-83a7-e327c7d32a91.roa
Signing time:             Mon 20 Jul 2026 00:30:48 +0000
ROA not before:           Mon 20 Jul 2026 00:30:48 +0000
ROA not after:            Sun 18 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        98.69.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4c:ee:f7:79:1f:42:78:ce:b1:0b:4f:f7:30:d2:2f:ac:ff:fd:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 20 00:30:48 2026 GMT
            Not After : Oct 18 23:59:59 2026 GMT
        Subject: serialNumber=6af368e2758d84bfc0b5f9e7e4968e3ca63820c73347b71a3cbe93b1e58b543f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bd:58:2b:42:d6:ff:03:85:09:4f:de:2a:53:
                    f3:17:ff:75:8f:36:a7:a0:89:c0:71:d3:2f:56:96:
                    0f:5e:f7:c7:1a:aa:b1:7f:da:e2:8a:75:5f:0e:a2:
                    f8:4d:15:7d:c9:74:9d:b6:91:c6:75:f9:0f:c7:c8:
                    2b:e3:3a:4a:4f:d0:37:20:a1:01:e2:db:06:63:f8:
                    eb:7a:53:5e:b3:82:f5:ab:d7:77:67:ca:ea:ec:92:
                    fd:7a:8d:99:46:c0:8e:1c:18:43:2c:9d:20:44:b6:
                    b8:99:c1:79:2d:c5:16:60:c4:90:bd:e6:6f:e9:5c:
                    73:92:c9:ab:c1:46:7b:df:af:2a:16:d8:51:b4:d5:
                    4e:35:bd:2b:e3:f6:e8:b0:d4:c7:6c:85:d7:14:ea:
                    10:f8:62:da:1c:69:c4:c2:c2:74:d3:d5:2b:57:27:
                    a8:14:53:b5:c8:87:56:c6:66:b0:04:eb:45:8c:ef:
                    b5:d0:76:11:0a:69:93:7f:b9:cc:37:d5:3d:30:d8:
                    53:16:66:be:91:fc:11:35:c1:d7:c6:91:bb:37:70:
                    50:e7:37:d5:ba:05:72:af:77:dc:a0:a1:b2:2e:a1:
                    77:92:a9:4f:2b:0c:04:92:03:00:3f:cc:47:d4:77:
                    32:a7:48:4a:55:7c:6c:de:28:79:4e:ef:d1:98:06:
                    be:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:92:5A:97:E7:98:32:F0:26:6E:FE:47:54:2E:0A:BF:04:9E:39:CD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4110e3a3-0f8c-4c51-83a7-e327c7d32a91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.69.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9e:f9:54:a9:6d:8c:d2:7b:6a:db:f3:7f:f7:31:b1:50:85:d9:
         8c:0d:62:64:6b:72:42:d1:1c:f9:11:50:40:ff:1d:c5:12:6c:
         16:73:df:92:2e:d9:bb:c3:43:be:e7:bc:46:5c:47:d3:bc:b7:
         fa:8d:0a:73:d4:6b:89:02:6e:19:7f:da:6e:75:44:87:a9:bd:
         42:16:be:ff:c7:e0:18:44:7d:71:7a:1f:81:04:4d:7a:54:01:
         dd:b0:b3:5d:cc:4f:21:0a:58:15:9b:8d:1c:31:21:9a:d9:91:
         1c:ad:98:9a:d3:3f:0d:dd:a2:05:3d:15:dc:92:06:97:57:54:
         bc:be:aa:38:6a:4f:8d:71:6f:c3:57:0c:31:90:58:79:56:99:
         9b:0e:26:44:60:be:9c:b0:78:76:2e:45:9b:d9:06:4d:bf:84:
         0e:38:5a:84:e9:74:2a:08:23:89:c8:c3:9d:f9:07:12:76:2f:
         1b:90:1d:30:30:99:99:c9:48:6e:e5:62:67:b9:cc:7c:a6:28:
         c6:49:1d:47:38:28:22:05:20:e0:e6:c8:b7:fe:79:44:dc:61:
         39:90:eb:2d:48:09:19:1d:83:bb:be:7a:e8:9d:60:a7:cb:ee:
         72:b3:47:26:65:b0:61:17:a2:68:25:42:62:63:7a:a9:6c:df:
         3e:7c:57:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:30:47 2026 by rpki-client