Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96812483-0dc7-4729-91da-307943a62464.roa
File:                     96812483-0dc7-4729-91da-307943a62464.roa (raw, json)
Hash identifier:          3wnFRiXQ7hEfYQXlGWBwYthcuXA4vTEghj5j6TdHQGA=
Subject key identifier:   5A:2F:BD:F0:D0:69:48:CB:3F:5C:54:CA:35:4D:1C:69:2A:B8:39:CF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       39C1CE8AE7E54DD6D491E7F86BB5D36D64EB116E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96812483-0dc7-4729-91da-307943a62464.roa
Signing time:             Tue 12 May 2026 01:21:28 +0000
ROA not before:           Tue 12 May 2026 01:21:28 +0000
ROA not after:            Mon 10 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        71.152.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c1:ce:8a:e7:e5:4d:d6:d4:91:e7:f8:6b:b5:d3:6d:64:eb:11:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 12 01:21:28 2026 GMT
            Not After : Aug 10 23:59:59 2026 GMT
        Subject: serialNumber=1b02663b026ca3a834293070ebdc49cf9729b5540e6abcabbb65c293ce9edf3a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c6:42:87:cb:b3:84:3e:de:1a:4c:73:c8:ce:
                    c5:9f:d8:ad:df:4e:4b:9f:37:54:ee:74:06:1c:8f:
                    f6:4f:1f:0f:cb:46:78:16:d9:0c:42:7c:96:6f:7a:
                    d2:27:a6:95:2f:af:d3:11:af:2f:48:0a:3f:d1:99:
                    bf:d2:55:5d:eb:cd:a3:72:d5:67:de:d7:b8:c4:e6:
                    41:99:4b:86:0a:3c:ef:76:ed:b7:7c:56:78:55:57:
                    56:1e:e2:a6:cf:21:1b:48:73:91:01:55:05:6c:1c:
                    9a:01:93:a3:e2:8a:3a:57:e1:68:1d:93:9f:ca:66:
                    87:ea:2d:72:69:0e:2b:81:e7:f7:d3:c7:66:d2:14:
                    53:a2:59:28:5f:7c:06:7b:35:3d:86:d1:50:3d:a6:
                    45:26:06:c7:26:51:be:38:e1:70:46:57:c7:cf:0f:
                    55:8a:7d:82:01:d6:7d:12:39:f3:15:46:15:60:2d:
                    ea:ad:d3:53:fa:34:7e:7e:ce:c2:67:f2:bd:85:b6:
                    6e:4b:69:9b:2a:e1:ea:9c:6f:5d:69:74:c2:0c:6f:
                    01:24:83:43:62:d7:8a:21:e6:8a:6d:ea:52:e4:1f:
                    5c:dd:dd:20:92:3b:f5:d4:98:38:f2:0e:94:83:a9:
                    63:b5:17:ff:7d:51:61:28:30:75:f5:dc:74:b2:bc:
                    54:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2F:BD:F0:D0:69:48:CB:3F:5C:54:CA:35:4D:1C:69:2A:B8:39:CF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96812483-0dc7-4729-91da-307943a62464.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.152.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:1c:59:98:ae:70:ff:30:10:b2:5c:d1:07:b4:83:37:90:0a:
         6f:97:cb:f3:78:23:7f:3a:28:85:4d:68:d2:52:35:4b:9a:68:
         a5:99:51:64:2d:5f:eb:e2:30:74:20:74:e9:41:db:45:ba:18:
         c3:dc:26:8e:8b:fd:2f:92:ff:24:86:03:e5:93:2c:37:08:cd:
         d0:bc:ae:1e:48:c0:35:ff:e6:56:9a:76:4c:79:52:ce:e3:d5:
         75:f1:8a:0b:b2:a9:36:ff:ed:88:40:d1:31:6a:e1:50:cd:3b:
         f3:56:d7:4c:61:d0:17:b6:bf:04:ce:6d:8e:c5:5d:d7:f6:15:
         41:3d:0c:d6:63:cb:37:28:ce:3a:90:96:c7:22:22:43:f1:ad:
         a6:38:47:bb:63:15:fa:df:1b:79:8d:c8:8f:1b:8d:1e:a5:7a:
         8d:e0:c2:f9:21:b4:e5:51:a7:78:f4:81:ad:11:63:02:ff:7f:
         52:e3:94:20:45:03:dc:77:6b:7d:99:ca:f5:ee:d0:1a:8e:2b:
         e9:2a:3f:c7:9d:bd:74:41:96:f2:b1:a2:c0:53:87:3e:cc:fa:
         80:96:a7:8f:17:8b:13:12:90:f4:96:af:51:18:08:fe:39:78:
         c2:2d:23:16:78:c2:d2:9b:c5:a2:3f:1f:a5:c5:cb:a2:27:d0:
         28:21:55:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:01:19 2026 by rpki-client