Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a743602a-d845-4844-9c21-e83cce7c9b6a.roa
File:                     a743602a-d845-4844-9c21-e83cce7c9b6a.roa (raw, json)
Hash identifier:          TAaC1DMF/zVZ50Jti3Hc4Ajvf6Di6AM/5+Xs3SpVQXA=
Subject key identifier:   0D:7A:EC:69:A0:EC:E7:D7:6D:23:08:BE:56:0C:5A:DB:B3:88:E2:73
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F7873C3C96ABE1679A0123F8DB66DBCA5DDCBF4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a743602a-d845-4844-9c21-e83cce7c9b6a.roa
Signing time:             Fri 01 May 2026 01:01:21 +0000
ROA not before:           Fri 01 May 2026 01:01:21 +0000
ROA not after:            Thu 30 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:78:73:c3:c9:6a:be:16:79:a0:12:3f:8d:b6:6d:bc:a5:dd:cb:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  1 01:01:21 2026 GMT
            Not After : Jul 30 23:59:59 2026 GMT
        Subject: serialNumber=3c934a617f60a7e1bb5ab94b179a2d6c78c50d2984d266d8972a730af7d5b0e0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:30:88:f4:c9:04:61:fe:ee:f3:bb:be:8a:5d:
                    3d:26:8a:80:c7:34:8c:26:23:a7:63:4e:97:ba:10:
                    9d:39:f0:46:cb:69:4f:3c:1f:8e:cf:e9:0f:49:f5:
                    75:0b:67:2f:68:cc:39:af:9b:e6:1e:6e:12:b2:6a:
                    4b:70:b5:aa:2b:6d:0f:02:c4:25:af:68:44:4b:c8:
                    eb:4c:5a:14:fc:f5:2d:90:c1:e2:98:dc:cf:b3:25:
                    74:a9:e1:b7:ad:42:ac:c6:48:6f:2c:b4:df:2d:e1:
                    94:3e:48:f4:6e:89:9d:25:d5:a6:4e:6a:3e:6a:c0:
                    46:9d:18:0b:c2:7f:04:aa:3c:7e:66:0b:f3:71:cc:
                    a1:20:4d:b8:b1:e7:18:43:9a:83:ba:bb:4b:d7:44:
                    dd:d0:11:5d:7f:1c:fe:ce:c1:d3:2e:24:1b:ba:f1:
                    6d:8c:aa:6e:99:70:93:5f:85:92:c9:11:1b:55:9b:
                    a6:b3:7b:dd:8a:70:c3:75:74:de:af:2d:66:f7:6a:
                    c7:f8:23:77:cb:ff:bf:05:66:64:57:47:cd:ac:96:
                    1c:ae:3e:d3:78:07:5b:bc:98:0b:33:2a:5c:e9:43:
                    14:2f:88:83:bd:aa:6b:22:b3:de:f0:0e:00:42:24:
                    73:91:20:e0:f3:eb:4f:94:a4:31:9d:ff:78:c8:94:
                    45:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7A:EC:69:A0:EC:E7:D7:6D:23:08:BE:56:0C:5A:DB:B3:88:E2:73
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a743602a-d845-4844-9c21-e83cce7c9b6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:5f:a0:d1:f2:bd:83:83:96:3f:6e:31:dc:8a:75:f9:1a:00:
         14:3c:38:e7:cb:20:88:98:fe:f6:9d:02:60:08:7a:83:6b:77:
         44:38:23:e4:10:bd:35:1c:e4:70:b1:66:68:0e:de:06:25:14:
         da:bb:16:13:c0:d2:d6:ca:04:36:19:54:ae:c0:1d:dc:5a:90:
         ab:38:62:25:85:34:39:75:89:60:64:90:5f:3e:86:6c:03:f8:
         00:88:f5:31:96:97:f1:fb:b0:e2:81:4c:b5:6f:d7:e5:0f:b2:
         50:c6:44:e3:06:35:dc:1d:59:27:bc:18:dd:82:b6:1b:e4:ba:
         65:3f:af:a8:d3:b2:48:63:f6:86:2b:84:76:ef:5f:d5:61:aa:
         c2:44:e7:c8:7a:64:c5:77:25:51:0b:dd:73:00:ab:4f:c9:9c:
         88:89:f5:05:c6:36:49:20:a8:29:f8:7d:bb:14:09:86:47:c7:
         17:07:d2:c4:16:b8:b2:4a:e7:38:45:9a:3f:97:66:0a:5c:ec:
         97:04:e6:f7:e8:15:ef:81:da:fa:ea:76:22:ea:f6:61:7a:f4:
         0d:bb:bd:d4:98:67:08:18:30:4b:2b:39:d0:bf:38:47:4c:6a:
         f3:1c:8e:af:0d:8f:9a:f4:85:e6:8d:95:f4:40:50:9c:fd:8c:
         3f:32:72:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:40:03 2026 by rpki-client