Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5752b4d6-9da4-44b3-80c5-238c0eccb401.roa
File:                     5752b4d6-9da4-44b3-80c5-238c0eccb401.roa (raw, json)
Hash identifier:          jbkQQA41FAGf0Viq2LL6NlxiZTWegEdXMVrthxjZFlo=
Subject key identifier:   CA:AA:B1:35:66:C2:02:97:7D:82:E4:8E:DD:E0:08:C5:EE:44:7E:72
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6A0F8647FA3327D673987E37D76C3C3EC5DEAAA5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5752b4d6-9da4-44b3-80c5-238c0eccb401.roa
Signing time:             Thu 16 Jul 2026 00:10:10 +0000
ROA not before:           Thu 16 Jul 2026 00:10:10 +0000
ROA not after:            Wed 14 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        142.4.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0f:86:47:fa:33:27:d6:73:98:7e:37:d7:6c:3c:3e:c5:de:aa:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 16 00:10:10 2026 GMT
            Not After : Oct 14 23:59:59 2026 GMT
        Subject: serialNumber=133ad5b1dbd9a50cf1e542463cfca84360023dbcd5b76bb105cab3ac1e686957, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0f:50:52:bd:e6:8d:4a:63:be:fe:21:d0:bd:
                    42:09:0b:c8:72:02:49:8e:80:8b:6f:db:87:7f:e7:
                    aa:46:77:6e:ef:df:42:bc:8a:51:8f:17:d3:74:39:
                    b6:2a:01:61:25:c7:7d:b8:88:98:1d:93:a6:db:b0:
                    ff:6d:41:85:7a:11:de:b7:56:d7:28:a5:2a:1f:e4:
                    13:f6:8a:15:53:46:7e:af:25:4f:66:18:83:0e:ab:
                    5a:66:73:ce:66:78:f1:7b:e2:f0:8e:b3:da:51:8f:
                    b3:35:f2:3b:76:f7:b3:89:47:84:4b:f7:0e:5b:55:
                    2c:62:9f:d0:ae:00:09:da:c6:95:22:31:58:d2:66:
                    66:3e:81:ad:6b:c7:ef:f9:52:d3:ec:9a:13:46:c8:
                    dd:a0:6f:a8:20:a4:e4:89:84:22:74:7a:4e:93:b7:
                    fe:06:25:92:6e:10:1f:68:70:95:70:17:ca:57:3d:
                    3d:26:33:57:fd:53:47:14:0c:18:d3:1a:b6:6f:51:
                    0b:d8:98:5a:4c:74:65:18:9f:e2:84:f2:db:d0:47:
                    f2:41:0e:a1:fd:e2:fb:2a:d1:9c:04:fe:f4:9c:4b:
                    37:d6:a3:dc:8d:06:b1:42:46:bf:64:ef:af:d1:af:
                    f1:f3:ae:5e:09:71:2d:32:64:bd:87:28:40:07:36:
                    42:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AA:B1:35:66:C2:02:97:7D:82:E4:8E:DD:E0:08:C5:EE:44:7E:72
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5752b4d6-9da4-44b3-80c5-238c0eccb401.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.4.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         33:67:8b:17:a8:00:d2:0c:0d:37:c8:5b:ef:bd:c5:5b:cc:ab:
         d0:1f:e5:37:bf:1b:19:73:b9:2d:74:95:a5:49:66:55:28:d7:
         e7:81:5a:fd:ee:98:67:27:5c:91:f9:1a:6a:64:3d:32:7a:99:
         57:57:69:4f:56:e8:76:28:70:19:f0:2e:6b:12:bd:aa:cc:4e:
         3b:d4:1f:13:ef:b8:37:96:b3:24:ce:03:34:a4:05:c0:b4:91:
         5f:1f:61:28:ee:e5:8a:1f:cf:43:fd:e2:40:7d:3e:f5:ae:e2:
         c3:11:e5:58:84:87:53:c4:da:3a:6a:67:2f:b4:c8:d6:8c:94:
         cf:eb:94:53:86:99:bf:82:56:a3:fc:0f:51:88:15:5b:e4:fa:
         37:d9:e7:31:fc:f2:cc:a3:9e:dd:bc:7d:92:6c:5b:61:ec:f9:
         7a:d8:ec:97:30:c9:2b:cd:52:1b:9e:2d:e3:27:84:01:b9:90:
         1a:44:b5:a8:bd:8d:46:85:25:87:90:31:d8:33:c8:5f:44:27:
         44:ed:01:0a:55:b9:51:4c:6c:6e:6d:a9:44:a7:f6:12:0b:52:
         db:e4:37:9c:d0:34:3b:3b:b7:1c:db:76:3f:e4:06:ec:de:c1:
         78:f1:05:c1:c8:e5:b9:64:8d:b8:c9:4f:7f:55:fa:27:16:9f:
         8f:74:3f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:30:39 2026 by rpki-client