Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c03bc6f-04a0-4eb8-ac31-85b84c3f29d9.roa
File:                     6c03bc6f-04a0-4eb8-ac31-85b84c3f29d9.roa (raw, json)
Hash identifier:          XsD2CUjIRkudTAR6KzSuOfDtikUoJeJpp8DC/LVWYq0=
Subject key identifier:   8D:1D:F3:77:80:4A:CF:AC:30:D5:DF:28:0D:AB:05:F9:11:6A:29:FE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E940B7629414CC242EDD0156F343DB5FC19C2E0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c03bc6f-04a0-4eb8-ac31-85b84c3f29d9.roa
Signing time:             Thu 16 Jul 2026 00:20:05 +0000
ROA not before:           Thu 16 Jul 2026 00:20:05 +0000
ROA not after:            Wed 14 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        136.18.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:94:0b:76:29:41:4c:c2:42:ed:d0:15:6f:34:3d:b5:fc:19:c2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 16 00:20:05 2026 GMT
            Not After : Oct 14 23:59:59 2026 GMT
        Subject: serialNumber=7c2913b348332bc72ec4d587460d978e2c8a8a12020d149ff1d920014714777f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:81:f6:a8:74:25:a5:fd:a6:4b:59:55:f6:6a:
                    e4:72:b1:6e:0f:01:50:70:c3:d9:19:52:b3:41:3b:
                    89:01:9b:2d:78:1d:3e:9c:ab:9b:a6:d1:5b:b1:40:
                    52:cd:c4:12:1b:58:57:fe:fe:49:9b:c2:fc:b3:68:
                    1f:cf:4e:0d:43:6e:4b:4b:5f:5e:69:dc:54:f3:ed:
                    9c:41:61:2e:74:06:c4:f5:61:0f:73:3e:db:af:1b:
                    9c:1a:97:09:e9:b2:bb:3a:00:bf:de:33:43:41:de:
                    6a:26:89:6f:c0:67:22:04:39:0f:0f:e6:61:74:ba:
                    ff:47:29:08:97:f8:5f:56:86:46:09:d5:07:a5:91:
                    35:cd:76:13:dd:4d:f4:b1:32:14:9c:c1:b3:9f:78:
                    4f:64:1c:10:6c:2f:36:f4:2b:63:d9:00:2b:6f:ca:
                    d4:92:a9:19:4e:bb:45:c8:81:05:4b:2d:6f:2f:f1:
                    f4:f8:d1:7d:f2:76:46:f0:95:aa:d0:85:30:38:cd:
                    b8:1a:85:37:2c:84:3d:92:e8:0e:de:29:ee:47:f1:
                    ed:04:8b:81:46:bf:b5:48:ca:bd:82:5b:4c:20:14:
                    59:51:76:55:98:2c:ae:14:2b:77:ed:87:9b:7e:b9:
                    8b:d3:9a:53:66:5c:95:84:a0:5c:38:68:bf:3c:89:
                    aa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1D:F3:77:80:4A:CF:AC:30:D5:DF:28:0D:AB:05:F9:11:6A:29:FE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c03bc6f-04a0-4eb8-ac31-85b84c3f29d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:f8:bb:bf:60:03:7a:94:ae:33:13:b5:62:6e:4f:7f:49:39:
         0b:59:94:b7:18:f5:47:75:0f:c8:17:de:f6:82:e1:df:37:95:
         7b:1c:33:a3:bb:60:ab:a4:40:3c:aa:fc:00:53:8a:20:f0:89:
         37:d9:c7:97:1e:74:22:57:99:4b:52:05:ef:86:d0:74:df:f1:
         27:cb:c0:14:f6:a1:bf:23:8e:e0:0f:de:b9:15:00:54:4c:49:
         0f:16:ab:32:22:b3:69:f0:45:b4:10:ff:58:8a:37:b9:1a:ab:
         f8:d0:e7:ee:6f:46:a3:43:5d:a2:67:42:9d:1c:16:15:6f:20:
         0b:7d:17:2e:84:52:93:fa:cd:a1:f7:3e:5b:e5:ce:be:5f:f5:
         7d:2e:28:c4:f3:a8:5a:b8:44:9f:53:dd:d3:63:a4:ab:5c:1f:
         3e:1f:fe:7c:9a:fc:aa:89:d7:ec:a7:93:65:7d:a6:4e:00:fc:
         98:09:8b:5d:5a:32:76:ba:8c:22:ca:6a:e0:71:00:f3:82:3f:
         2d:70:4c:dd:10:56:53:e5:a6:cb:2f:f4:59:3d:cb:7b:6c:f2:
         49:e0:0a:19:72:30:1b:cc:2a:0a:cc:aa:c3:57:e2:e5:ba:a9:
         3d:6d:21:fb:f7:ed:59:ec:a5:19:00:53:56:8f:54:38:3f:16:
         09:c2:1d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:31:52 2026 by rpki-client