Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75f1294d-03e7-415c-8881-5227f1076874.roa
File:                     75f1294d-03e7-415c-8881-5227f1076874.roa (raw, json)
Hash identifier:          /qwDIn48EOdfCkiAKxEjzONtZoVCwBzysx7FZe9tfJI=
Subject key identifier:   A5:0E:F2:DB:A6:D7:0A:6B:E0:9F:75:02:A7:2B:0A:71:89:14:EE:0A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       24F2F8A9F276EF7E66F4FD305957D376F2B9FE7E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75f1294d-03e7-415c-8881-5227f1076874.roa
Signing time:             Fri 24 Jul 2026 00:31:36 +0000
ROA not before:           Fri 24 Jul 2026 00:31:36 +0000
ROA not after:            Thu 22 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        136.18.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f2:f8:a9:f2:76:ef:7e:66:f4:fd:30:59:57:d3:76:f2:b9:fe:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 24 00:31:36 2026 GMT
            Not After : Oct 22 23:59:59 2026 GMT
        Subject: serialNumber=8039318c9cdf4819bcfd6130e92a3fd79b67524a63b11c58754bf8f719234c3a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:47:84:ba:62:5c:fc:a1:ab:c3:ff:25:7f:
                    3e:be:67:0b:26:58:8a:ed:4e:a9:9e:33:61:bb:fd:
                    6e:95:fd:36:9d:4f:44:7a:d1:b4:19:ce:33:7d:e6:
                    b2:83:d4:a1:b6:80:99:52:d6:6c:ce:f8:40:8b:b0:
                    3d:5e:ba:f9:f2:06:15:f5:29:3d:18:a8:6b:6a:26:
                    74:1d:45:9a:79:48:ab:3d:0b:96:83:ed:c0:fc:b1:
                    cf:90:eb:a3:f9:cc:d2:4d:41:f8:ab:75:0f:f3:2b:
                    bc:0e:d8:39:34:40:5b:95:9e:a3:52:c5:c6:ae:3e:
                    1d:12:57:83:7e:2d:7a:6f:58:92:10:a8:5e:04:89:
                    18:11:b0:54:ae:1f:4f:28:be:a9:a9:e2:e6:ac:7b:
                    ea:93:0c:5e:f8:f8:0e:af:b3:88:42:58:bd:95:42:
                    c3:ed:c8:b3:b4:10:87:2e:34:91:03:eb:7d:00:4b:
                    13:9a:2a:71:80:fc:85:8c:6f:ec:fc:e8:c9:b7:63:
                    7b:f4:cc:33:92:9a:26:6e:81:18:95:51:0a:c2:9f:
                    48:b1:c5:fd:0d:90:71:df:79:74:f9:68:84:f3:37:
                    2f:d5:c8:47:b6:ca:85:ac:71:ab:a8:82:1d:79:b7:
                    83:32:3a:94:68:06:36:00:e8:d3:40:73:5e:55:5f:
                    c1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0E:F2:DB:A6:D7:0A:6B:E0:9F:75:02:A7:2B:0A:71:89:14:EE:0A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75f1294d-03e7-415c-8881-5227f1076874.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:84:43:1f:fc:37:36:3f:10:91:e5:08:d6:56:81:a5:f7:6a:
         ab:4e:66:7e:74:d8:ff:15:24:60:fa:ab:0e:ff:fb:03:76:8b:
         3e:30:50:f2:2c:de:fa:d5:b9:92:36:ab:d3:0e:6f:08:a4:f1:
         a6:e1:dd:76:39:b9:cf:ec:5e:d6:d1:11:83:5d:08:51:ff:77:
         dd:b3:c9:a3:ff:df:51:66:ea:7c:ac:0c:3d:6c:8a:fe:46:1d:
         65:99:f8:6e:15:35:ee:2e:d4:ed:a2:47:97:c5:bc:4b:81:de:
         a3:da:00:3a:f6:20:9e:90:84:9f:90:d3:ee:15:53:6b:18:77:
         30:6e:cc:11:54:72:e6:37:99:ef:4a:a5:1c:36:f7:46:f9:8d:
         06:05:4a:5f:25:25:e6:ca:8a:e2:0e:a4:69:4b:f1:cf:8e:0d:
         b9:aa:cd:4b:00:34:2e:20:8f:d8:53:7b:30:7a:b6:60:d6:49:
         a4:38:0e:07:24:c4:15:8e:a4:a8:78:ff:95:97:82:bf:29:16:
         61:e3:13:6c:85:c3:61:77:47:82:b4:39:6b:d2:89:59:91:0e:
         4c:8f:91:c8:24:11:7a:bf:d4:f8:d2:2a:9f:56:fa:63:7f:21:
         11:42:27:4d:f4:e9:64:09:71:b8:37:6c:75:d6:a6:8a:89:b7:
         c2:92:a6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:29 2026 by rpki-client