Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ab646bf-254f-4ff8-8bb5-dbcf7e275441.roa
File:                     4ab646bf-254f-4ff8-8bb5-dbcf7e275441.roa (raw, json)
Hash identifier:          dM6PSl5xxnhjtIabMdruKsKWBSv6HOJ9xWh5R9DNOZ8=
Subject key identifier:   E1:29:4D:FF:6E:EE:4F:B4:FD:AB:73:31:36:75:C6:3D:33:AE:37:86
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5AD65D377D0CB777C5F605AD30DED10D507C96E6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ab646bf-254f-4ff8-8bb5-dbcf7e275441.roa
Signing time:             Thu 07 May 2026 00:00:10 +0000
ROA not before:           Thu 07 May 2026 00:00:10 +0000
ROA not after:            Wed 05 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        64.95.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d6:5d:37:7d:0c:b7:77:c5:f6:05:ad:30:de:d1:0d:50:7c:96:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  7 00:00:10 2026 GMT
            Not After : Aug  5 23:59:59 2026 GMT
        Subject: serialNumber=e5c7063ff1be6e347321731589b9a871fd75e3111b3130b617089302eaa91c34, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:62:ac:3d:f4:9b:77:9c:2e:a0:5e:91:85:a8:
                    21:d3:69:aa:8a:00:92:05:65:19:15:f2:5a:9f:9f:
                    ad:59:9f:76:3c:97:0d:7b:d3:df:40:22:f7:b0:78:
                    a4:f0:71:f6:4c:61:74:ac:04:71:76:fb:99:4c:c7:
                    03:fc:e2:de:3d:3e:d3:66:4c:49:31:50:8a:eb:2d:
                    ef:12:cb:cb:aa:72:74:75:9a:de:5a:62:6c:c9:4b:
                    64:f8:e6:39:bd:63:65:8d:2f:9e:a3:8f:87:04:24:
                    60:41:73:ba:a5:8d:8c:17:53:22:c4:b1:ad:5e:c5:
                    18:df:fe:8e:a9:4a:c5:91:ee:a1:d8:e9:6a:02:2b:
                    7c:d6:12:04:7f:0c:c4:60:33:a4:cd:83:2a:73:1b:
                    3b:43:32:b8:7d:2d:fd:32:17:f6:7b:98:a0:cf:0f:
                    49:53:7f:04:68:0f:fa:b9:04:ca:16:eb:c3:4e:4e:
                    24:66:6d:55:57:e6:cd:5f:d9:85:23:ec:dc:6a:f1:
                    65:0f:5a:77:1c:83:a1:37:2e:8d:0b:1a:55:63:c0:
                    85:78:2f:ab:f8:8e:a1:5f:50:0d:48:1c:d2:48:00:
                    a2:98:86:7b:68:9f:28:3c:66:12:3d:1a:44:e5:a0:
                    3d:18:95:68:c4:4c:ec:cd:4a:aa:bf:d7:37:07:50:
                    7b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:29:4D:FF:6E:EE:4F:B4:FD:AB:73:31:36:75:C6:3D:33:AE:37:86
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ab646bf-254f-4ff8-8bb5-dbcf7e275441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.95.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:fc:d8:b2:f7:3a:0c:d1:90:98:5b:c0:e2:ea:58:21:73:79:
         9b:90:2a:69:02:30:fb:62:d2:b3:39:06:0d:33:55:82:35:d2:
         86:5e:2a:5c:75:17:b5:01:e8:ed:83:31:a0:5b:93:f1:68:56:
         13:15:a6:e6:36:fe:f0:43:97:9a:42:39:e7:ac:e1:99:8e:37:
         36:6b:06:9e:c1:33:09:ff:a2:c9:1b:fb:3d:38:20:85:58:c5:
         a0:8a:bb:1a:2a:86:fb:d5:8d:76:fc:cf:66:ff:d0:53:4d:42:
         3b:d5:2d:32:61:a0:73:93:81:3e:bd:02:30:1e:eb:27:33:2e:
         cd:3c:b1:ff:ad:4d:e9:1f:a9:2a:23:a1:9c:9d:89:df:c6:8c:
         43:39:d6:ce:bf:0b:99:5e:e9:4a:e9:bc:89:a4:74:47:2f:65:
         34:ae:65:50:f7:89:8c:ca:0a:68:db:eb:8e:fd:c8:bd:b1:bb:
         5e:e0:65:08:1f:f1:13:84:fa:eb:75:99:37:d1:8b:92:a9:ae:
         a5:7c:b9:c4:5c:68:9c:ef:fe:2a:7b:b6:33:ab:4b:f1:dd:96:
         2b:49:74:36:d9:e2:8d:20:af:21:0e:8f:5c:98:64:5c:77:1d:
         cc:ea:a5:da:3e:88:3a:b8:83:0a:d6:19:d5:18:2d:e3:3c:6e:
         94:7c:63:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:19:31 2026 by rpki-client