Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e7b3944-7311-4337-8436-836528b45a90.roa
File:                     6e7b3944-7311-4337-8436-836528b45a90.roa (raw, json)
Hash identifier:          GDUBbl/70iDdnmxrsCUX3aobpyqF1fzpEYrBQz95m54=
Subject key identifier:   66:27:32:73:30:BC:3C:20:1B:4C:1E:0A:14:35:67:BB:54:65:DA:74
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5EEAD1F1EE5E534A6919387AF4D57FE57137A721
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e7b3944-7311-4337-8436-836528b45a90.roa
Signing time:             Mon 11 May 2026 00:30:12 +0000
ROA not before:           Mon 11 May 2026 00:30:12 +0000
ROA not after:            Sun 09 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        23.91.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ea:d1:f1:ee:5e:53:4a:69:19:38:7a:f4:d5:7f:e5:71:37:a7:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 11 00:30:12 2026 GMT
            Not After : Aug  9 23:59:59 2026 GMT
        Subject: serialNumber=35ec82ca6b5f77482c2c28dbe6308363c7b2371ed25b763c572af4597d0e7c95, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2c:af:dc:b0:55:6f:cd:28:9d:24:45:45:e0:
                    28:64:96:a9:29:cd:59:dc:c6:2e:2c:d6:2a:88:a3:
                    8f:cb:7f:17:95:00:bc:99:d8:66:b0:2d:da:d7:e0:
                    00:ce:d8:79:11:cc:29:06:b6:f4:61:d8:a8:1c:3b:
                    a0:50:5d:43:9b:7f:65:a9:79:0d:02:ae:ab:bf:9d:
                    41:c0:9c:3d:b8:6d:31:1d:11:53:af:da:f8:64:5b:
                    f4:56:7c:50:c7:20:1c:dd:0a:cd:0a:96:4a:f0:80:
                    60:55:51:ab:50:e6:b6:cb:88:40:87:82:12:6c:fb:
                    7a:78:72:2b:cd:ab:42:f0:11:54:19:a6:3b:11:a1:
                    8f:0a:12:f5:99:f8:dc:9a:e5:ef:60:d4:62:f3:95:
                    61:b7:42:e2:a9:18:a7:e2:fe:b4:06:b9:53:ba:7a:
                    67:85:1d:8e:48:67:fd:64:a7:37:b8:b9:1e:3a:09:
                    4b:d9:24:ee:64:d2:d4:f2:11:14:82:05:26:49:54:
                    65:47:f5:be:24:3f:d6:35:3b:48:30:74:09:14:27:
                    4c:30:e0:16:05:cf:a1:36:47:45:27:b7:7b:9a:aa:
                    3d:38:b2:b1:34:3a:22:ea:cd:fa:cf:b8:08:ca:cf:
                    54:d7:c1:45:59:3e:bb:1b:59:43:76:15:f8:07:d6:
                    05:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:27:32:73:30:BC:3C:20:1B:4C:1E:0A:14:35:67:BB:54:65:DA:74
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e7b3944-7311-4337-8436-836528b45a90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:c8:cc:ec:a3:5f:22:ad:fa:1d:e9:c4:fc:4a:51:3c:7b:3f:
         b4:ff:33:2f:91:66:e8:8f:e7:4a:d8:4f:36:d3:e5:34:52:76:
         c1:81:90:67:8a:bf:64:46:92:37:4b:8d:ec:e5:14:ef:3a:47:
         92:07:fe:54:54:bd:7d:e1:ea:9c:59:53:b6:03:b7:c2:86:d0:
         5a:ef:f4:c0:7a:0c:2b:d6:56:86:2f:39:62:07:66:98:49:10:
         90:84:5e:df:ab:3d:66:0f:ff:5d:c6:a0:f8:4c:21:70:cf:35:
         17:1d:29:27:0e:a7:85:42:90:53:bc:2b:f1:a6:50:2a:75:48:
         9b:0e:08:ad:06:6f:4c:41:cb:36:4f:d4:90:99:40:18:67:dc:
         fb:b2:1d:27:8e:fc:f5:98:fc:02:69:47:ca:3b:ab:dc:57:8b:
         e2:ff:87:4d:ab:e7:98:97:db:92:42:13:b5:63:17:6d:f9:58:
         a7:e4:15:98:78:f4:19:eb:d6:13:93:d0:4e:70:76:a7:76:8f:
         b4:a2:83:b0:cc:8f:9b:65:03:79:0c:e1:76:e1:97:2e:11:6f:
         cb:c5:56:5f:d3:13:3b:8c:13:b2:6a:86:89:e5:26:79:35:06:
         4f:50:3d:a2:30:02:ee:4c:ad:b0:ba:b0:e2:f4:44:f0:20:19:
         40:8e:0f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:11 2026 by rpki-client