Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b78991a0-a78d-47a1-bcc8-7d0408ee1899.roa
File:                     b78991a0-a78d-47a1-bcc8-7d0408ee1899.roa (raw, json)
Hash identifier:          tEh6qZRPapHrf5ID/OvU1kLpWon6O861H27+lIxkd9w=
Subject key identifier:   AC:82:19:0D:2B:14:B0:23:89:46:BC:79:5C:61:65:F0:AB:AD:F0:2B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       42B2B644ECDFDE02DBEE5296B2528B3753B8280F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b78991a0-a78d-47a1-bcc8-7d0408ee1899.roa
Signing time:             Thu 07 May 2026 00:00:04 +0000
ROA not before:           Thu 07 May 2026 00:00:04 +0000
ROA not after:            Wed 05 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        64.94.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b2:b6:44:ec:df:de:02:db:ee:52:96:b2:52:8b:37:53:b8:28:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  7 00:00:04 2026 GMT
            Not After : Aug  5 23:59:59 2026 GMT
        Subject: serialNumber=8466e8a28e2b536064576fdc2aed30f2a6e94f0da9380739fc3b545bb86c2406, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:27:61:9d:09:56:9d:1e:d5:4a:b3:35:76:e9:
                    f7:f6:0d:32:56:c1:10:52:1d:55:ac:6f:98:1e:2f:
                    99:0c:6f:70:df:0f:1a:0c:86:43:b2:07:09:68:60:
                    25:c8:2a:db:6f:2a:f2:41:5d:69:9e:5a:f8:cd:c6:
                    86:36:a1:9a:1b:f5:78:e3:a4:b2:f4:d8:f7:7e:73:
                    53:4f:0d:43:ec:c8:38:5a:30:eb:78:23:0f:f3:61:
                    90:22:10:a7:c6:61:91:70:42:23:1a:be:62:8b:de:
                    fb:33:4a:ee:b1:0b:c1:32:7c:df:55:d5:67:19:ba:
                    25:7f:c6:f6:48:e5:4b:df:41:92:0b:0d:8c:85:55:
                    96:85:d2:34:a8:7a:1a:3d:e0:48:a9:08:00:8b:c8:
                    6c:e6:75:03:cd:08:4f:da:24:e2:dd:4a:8e:8c:83:
                    51:aa:1c:04:e0:25:e1:20:20:5a:bf:b6:a6:f1:77:
                    26:12:99:b4:6e:f4:16:06:03:dc:4e:7b:26:cb:65:
                    e7:3a:94:bc:a1:3a:d2:d2:71:52:6e:63:df:7c:e4:
                    6f:1a:47:9e:76:b1:50:21:25:68:88:6e:eb:7e:4b:
                    e5:29:19:f4:28:5a:f4:eb:61:ca:a4:e3:75:9c:c1:
                    eb:40:89:b3:18:57:3a:42:09:3e:99:c4:31:98:d2:
                    9e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:82:19:0D:2B:14:B0:23:89:46:BC:79:5C:61:65:F0:AB:AD:F0:2B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b78991a0-a78d-47a1-bcc8-7d0408ee1899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.94.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2e:6e:83:6b:6a:c9:64:5f:fd:37:1a:d1:3c:77:8f:dd:b5:44:
         c8:0b:05:a5:02:54:50:e5:ec:06:79:7a:22:43:91:81:c8:bb:
         39:43:02:17:3c:e4:1f:8e:be:0c:44:26:9f:4a:7e:25:7d:c0:
         f0:cd:c8:d5:51:b5:3d:91:dd:a9:78:e7:71:0e:9d:77:21:27:
         85:17:12:1c:d5:b5:c3:7c:8a:f8:2b:95:36:8b:bb:9e:3c:2b:
         45:c0:5a:92:44:62:04:8c:01:51:d8:f6:8c:82:2d:35:8f:ad:
         60:63:1d:7e:36:dc:1c:d7:4d:9a:7b:72:18:68:17:9a:68:c5:
         05:04:ac:ad:ec:4e:59:5a:45:52:9f:2c:8d:8a:9e:fe:ad:93:
         6b:07:f8:5d:e2:3f:02:0b:e8:65:36:d7:8e:15:89:f1:aa:03:
         f7:9b:29:6a:c8:0a:06:f9:fd:b5:c7:54:8d:4a:ab:98:f4:b1:
         23:70:5b:3e:93:8e:eb:fd:05:f2:d9:f3:21:cd:0e:8d:db:d2:
         47:3d:39:78:48:c2:c7:58:91:56:86:80:69:39:f9:42:dc:50:
         f7:c0:eb:68:0a:f1:4c:0d:13:4e:4f:02:07:84:74:32:b9:0a:
         7f:42:d7:7f:cb:01:f5:b4:66:a1:b4:7c:7b:ad:f2:b9:c1:94:
         61:b0:cc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:23:51 2026 by rpki-client