Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b076e11c-5f2a-4cd7-b4e8-793e7c3ab274.roa
File:                     b076e11c-5f2a-4cd7-b4e8-793e7c3ab274.roa (raw, json)
Hash identifier:          u1mWt/GyugBWEUl9vtKtqL5Bv4yb3iSnlOgYIT2rF/M=
Subject key identifier:   54:4E:32:E2:9A:10:FA:E4:5A:D5:54:1D:14:B6:3A:56:17:22:C2:90
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3E37BB79E3D7042193349942F04869660D6FF74A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b076e11c-5f2a-4cd7-b4e8-793e7c3ab274.roa
Signing time:             Fri 17 Jul 2026 00:00:04 +0000
ROA not before:           Fri 17 Jul 2026 00:00:04 +0000
ROA not after:            Thu 15 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        157.152.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:37:bb:79:e3:d7:04:21:93:34:99:42:f0:48:69:66:0d:6f:f7:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 17 00:00:04 2026 GMT
            Not After : Oct 15 23:59:59 2026 GMT
        Subject: serialNumber=da132d965216dbdf8aa6093f4f1251f1c17a1420728a9b90ddd676af6c89752a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8c:26:84:fd:1c:fb:9e:cc:60:5d:6a:33:ba:
                    6f:f7:93:6f:00:6b:bb:c2:01:fc:81:e0:bd:84:0e:
                    c1:0d:f5:8a:e0:51:d9:02:e8:88:da:7b:05:c3:5c:
                    93:59:97:84:a3:56:a0:e4:5c:c6:8d:2c:ae:03:4a:
                    8e:4b:15:94:f8:c1:0a:2f:49:b5:3f:9c:e6:79:24:
                    17:73:9e:1f:dc:40:c0:7d:87:6a:f6:f8:9f:fd:3a:
                    81:f8:d2:4f:18:7a:46:ca:51:25:94:ba:64:98:9a:
                    44:5e:bd:6e:08:23:ed:e1:8b:61:3b:a8:eb:1b:8c:
                    00:52:d2:ba:14:c9:41:c3:4a:49:ec:d1:0d:ad:04:
                    68:ed:e5:7e:63:61:3c:08:db:af:94:c3:45:9d:88:
                    39:76:05:d3:f7:d5:a5:c1:96:79:b6:2a:32:5d:48:
                    ea:ba:37:1c:13:54:b6:93:de:4f:15:b7:65:1e:63:
                    d2:23:ec:3f:44:36:66:f5:44:22:56:5c:eb:e9:b1:
                    47:1a:cc:8b:c4:81:ec:c3:3b:86:84:9e:9c:cf:ff:
                    a8:e0:32:19:0b:08:d3:d8:49:4c:21:29:12:b4:c8:
                    07:ce:c6:96:2a:2d:19:30:fa:ef:75:94:57:ee:af:
                    5a:2a:10:71:e2:74:0a:8f:d7:3c:2b:a9:75:a4:7e:
                    34:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4E:32:E2:9A:10:FA:E4:5A:D5:54:1D:14:B6:3A:56:17:22:C2:90
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b076e11c-5f2a-4cd7-b4e8-793e7c3ab274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.152.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         47:c7:67:84:1c:64:40:35:36:d8:03:1f:f0:03:31:6b:df:07:
         d4:30:02:dd:2d:5b:89:63:76:44:9c:11:42:0a:2b:1a:f8:51:
         ca:db:43:e1:bb:d8:8b:d3:3d:02:81:c6:63:a4:7b:ec:ba:9f:
         6c:80:f7:5e:d8:d1:f3:a2:9e:c9:55:1c:25:13:44:2c:86:dc:
         11:c6:1c:bb:f9:77:86:55:8a:ed:3d:2a:c5:f1:ff:34:bb:a9:
         10:86:cb:6d:8b:3a:31:80:b4:dd:35:c7:b1:90:f0:b0:90:96:
         69:2d:28:b2:cc:c9:c1:e1:7d:45:98:a2:91:37:9f:d3:04:c7:
         a3:d2:1a:e1:11:7b:e5:74:81:a9:38:43:1d:01:df:6d:40:8b:
         3d:21:c3:83:c6:52:b2:42:2f:3b:b6:2f:11:3d:aa:6b:b9:35:
         88:8c:cc:d4:54:5f:4d:9d:66:68:dc:64:57:0c:89:85:a1:c3:
         be:0d:ea:b1:0d:de:26:2a:8a:36:44:25:9c:77:95:b7:78:7f:
         5e:df:d2:d6:d7:fc:7f:ab:8c:46:e5:31:0e:40:ce:4f:93:8c:
         b5:8e:c0:6f:36:9f:4d:a2:cc:cd:74:96:e6:ca:db:cb:3c:ce:
         a6:8c:7a:06:09:e3:1a:c3:dd:d3:87:20:94:be:18:99:d1:42:
         b2:92:2d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:48:02 2026 by rpki-client