Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67e38fd2-258c-4ee2-b47d-b15038a29e00.roa
File:                     67e38fd2-258c-4ee2-b47d-b15038a29e00.roa (raw, json)
Hash identifier:          NZRrZIbBCxQLExkNYv4c8GcWTAieLlymD6MsKg06r3Y=
Subject key identifier:   3E:F3:57:98:AA:9D:E2:9E:33:90:10:89:47:65:58:3C:B5:70:4F:66
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       384CDEEBF01504E78AB821FA180D2738B6920257
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67e38fd2-258c-4ee2-b47d-b15038a29e00.roa
Signing time:             Tue 05 May 2026 00:40:09 +0000
ROA not before:           Tue 05 May 2026 00:40:09 +0000
ROA not after:            Mon 03 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        184.72.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4c:de:eb:f0:15:04:e7:8a:b8:21:fa:18:0d:27:38:b6:92:02:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  5 00:40:09 2026 GMT
            Not After : Aug  3 23:59:59 2026 GMT
        Subject: serialNumber=121e237a9e360a47f5b96fdae85d3259c17aa01134887d01eb2e2287aa7acb99, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dc:16:e5:03:71:4b:4f:dd:b4:1a:5b:58:13:
                    df:eb:72:0f:fc:50:f7:35:da:33:49:39:ed:05:3e:
                    77:2a:4e:55:18:59:ae:4c:83:d4:7b:09:2b:d8:ec:
                    2d:30:80:21:37:4e:cd:66:2f:1a:ef:41:a8:a7:0f:
                    c0:34:cb:26:46:a5:cb:bd:af:87:fb:a1:e4:7d:e4:
                    f7:36:0a:e1:3b:1e:4b:1d:c8:ff:8e:1c:af:25:ee:
                    8a:d6:52:5d:eb:ab:7b:96:f5:54:5b:d3:21:62:3e:
                    28:d7:1d:2d:5f:41:73:f5:e0:5b:bb:a0:34:1e:75:
                    f6:dc:ea:ca:ad:30:6b:99:b8:d3:89:77:e1:02:4a:
                    34:8f:30:ac:2f:91:eb:ac:fe:ce:e3:cb:bf:b4:4b:
                    76:4d:fd:15:e1:90:40:b7:b0:10:fe:df:a3:77:53:
                    e8:7d:38:3b:8b:8d:5d:84:64:7c:b6:02:f5:f3:eb:
                    55:9e:dd:e0:fe:59:b5:c7:fe:de:05:51:8a:7f:f9:
                    f0:93:ac:a1:26:a7:96:46:d4:20:7c:d6:ca:77:bd:
                    e6:1d:ba:2b:1f:44:7e:32:89:c9:2e:69:8e:45:5a:
                    25:14:bf:4c:c8:71:78:2c:c5:53:3b:55:c1:5d:70:
                    70:8c:c3:4d:8b:5a:d0:b2:5a:f9:e2:74:18:01:bf:
                    64:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F3:57:98:AA:9D:E2:9E:33:90:10:89:47:65:58:3C:B5:70:4F:66
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67e38fd2-258c-4ee2-b47d-b15038a29e00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0d:f3:f9:38:2d:91:98:d1:f4:10:93:a7:dd:88:2a:8f:fe:24:
         f8:95:57:92:4c:34:a8:bc:62:b0:f8:12:43:16:6f:9f:71:6a:
         65:1a:c6:69:81:98:16:c8:48:1d:ad:c3:d0:ef:a0:97:8f:4c:
         ce:28:ea:54:89:65:e5:bb:3b:c9:e9:10:c9:78:bc:7a:e1:e5:
         94:d5:7e:b1:c0:17:24:05:d5:84:da:27:2c:ac:66:ac:dc:6b:
         e5:14:3c:d8:b7:a2:7c:95:29:4d:80:8b:2b:5b:da:bc:31:b9:
         a8:46:98:d8:69:51:fb:fc:b9:27:31:b4:a3:5d:37:4b:5d:bf:
         28:fc:69:fd:a7:19:cc:0d:14:b7:b7:04:00:7b:5b:5f:c2:7b:
         bc:ab:c3:f7:e3:a2:f5:b8:2c:19:0e:7c:f2:f9:81:63:11:78:
         77:0e:35:21:df:d8:d2:d3:58:14:6e:69:43:3f:8e:e4:f4:70:
         08:68:dd:33:ea:46:7d:99:04:9f:f9:8a:ec:1c:22:8a:40:b3:
         5a:5b:cd:3f:9d:42:64:0f:90:19:f4:fb:fd:a4:2b:7f:3d:b1:
         8e:0e:8a:b3:f5:0f:b5:01:dc:9c:29:1e:88:81:93:1f:93:68:
         c3:c6:b4:aa:04:b9:90:9c:07:09:00:1a:02:03:a2:8a:f0:d0:
         a6:a3:f5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:12:42 2026 by rpki-client