Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81636c94-0d61-45b7-858e-afa997830908.roa
File:                     81636c94-0d61-45b7-858e-afa997830908.roa (raw, json)
Hash identifier:          /Nsp/F54IhgvIF8NNdQbAXod5TiJxJsDko14r1xxYHA=
Subject key identifier:   D5:D8:25:07:61:50:78:AB:5F:91:0F:0D:30:75:1D:04:3A:E0:E4:41
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       36C3D7FB83A2C0AAAA58BEF3086BDB5C12529E65
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81636c94-0d61-45b7-858e-afa997830908.roa
Signing time:             Fri 24 Jul 2026 00:30:14 +0000
ROA not before:           Fri 24 Jul 2026 00:30:14 +0000
ROA not after:            Thu 22 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        110.238.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c3:d7:fb:83:a2:c0:aa:aa:58:be:f3:08:6b:db:5c:12:52:9e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 24 00:30:14 2026 GMT
            Not After : Oct 22 23:59:59 2026 GMT
        Subject: serialNumber=f7f967721c3adf1da091e25f133115b2d7224bacaab8bf44d88ca80a29c32056, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f5:70:3c:6b:ae:cb:e5:fd:1a:23:ac:32:75:
                    80:c9:b1:9c:2b:0b:92:34:50:ef:4c:80:70:1d:e1:
                    31:d4:25:a6:fe:56:ba:62:74:db:79:1f:85:66:bc:
                    2a:dc:49:d5:ab:f5:4c:26:fc:c2:58:54:a7:f0:17:
                    37:60:05:df:84:72:fe:09:8a:be:5a:35:45:2b:7e:
                    6f:27:7a:70:1b:05:08:09:76:1e:36:62:1e:05:00:
                    76:7f:58:c2:1f:e0:2b:63:e9:c3:67:36:d1:a6:4e:
                    df:36:e7:cc:44:43:ff:a5:5c:1b:c3:77:17:e1:fa:
                    6e:65:02:64:e2:69:8d:12:2a:4c:e0:4a:0d:45:83:
                    8b:1d:ce:79:1d:ac:c3:d1:df:f0:cc:4f:c6:18:52:
                    6a:1b:8f:35:19:b9:30:37:9f:58:71:33:f3:b3:dc:
                    75:65:8c:7f:73:65:e6:9b:4a:27:97:c4:c1:9c:dc:
                    cf:8e:89:09:2f:ca:74:31:74:9e:06:70:7a:22:3a:
                    d2:6a:3b:17:9c:02:47:03:96:c4:d2:d7:c1:14:db:
                    8c:2c:be:da:35:95:22:e2:a8:9c:4a:26:3c:9a:be:
                    fc:8f:e8:11:69:8c:02:ac:26:12:f1:57:10:cb:32:
                    ea:9e:fb:6b:eb:ac:8e:e0:eb:d4:b0:1b:6a:07:81:
                    6d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D8:25:07:61:50:78:AB:5F:91:0F:0D:30:75:1D:04:3A:E0:E4:41
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81636c94-0d61-45b7-858e-afa997830908.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.238.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:38:2e:69:52:08:7b:74:8c:89:17:b8:63:e1:b9:90:82:81:
         ae:d5:cb:1c:6b:db:fd:36:33:f9:d9:c2:87:64:78:b1:45:ef:
         f3:f1:06:f4:ab:c3:51:7f:15:3d:7a:3e:e0:c1:4c:fe:b1:a7:
         8f:73:e6:da:dc:06:ed:ae:4d:09:12:e8:8b:c3:87:51:d5:05:
         0d:b3:74:63:26:13:63:51:74:1e:66:3f:ed:b4:cc:4f:ce:9b:
         da:9c:f8:38:1f:71:19:52:59:3d:34:06:69:0a:bf:da:18:3c:
         36:8f:11:9a:15:22:5d:59:35:3e:c1:2c:07:c1:a8:e9:05:9a:
         b0:ca:a9:47:03:cf:0a:6d:3a:97:36:8a:d4:2d:43:aa:70:97:
         2b:9d:0a:d6:00:e6:24:89:ab:ae:cb:d4:31:6e:c7:f0:c1:43:
         f1:6e:29:77:01:aa:f0:5c:16:8f:c0:11:93:4d:72:53:ac:9d:
         2c:f7:51:ef:93:df:48:6c:60:f0:ca:be:f7:c1:89:ca:84:f9:
         4f:f7:74:1a:38:65:a4:58:19:91:a8:66:e9:61:2f:9e:8e:02:
         52:c1:ce:38:ee:27:65:af:8a:6b:95:d0:46:8c:9b:bd:f5:8f:
         11:ca:08:89:e8:7f:da:aa:93:f0:00:12:16:f0:4f:cb:c1:d4:
         94:ed:d1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:37:56 2026 by rpki-client