Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be0b4385-e6e3-4b26-93ea-7be9fbf3734e.roa
File:                     be0b4385-e6e3-4b26-93ea-7be9fbf3734e.roa (raw, json)
Hash identifier:          nC7C8vwpHzBsHpoRvViqbzotd9P+0AGU5U/pQKmBDP8=
Subject key identifier:   63:0F:E9:B0:D7:6C:7A:FE:09:F2:F7:51:3C:96:59:1C:35:BA:ED:22
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       59C194B93F2E51948E6C5742C093373BA98BA714
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be0b4385-e6e3-4b26-93ea-7be9fbf3734e.roa
Signing time:             Thu 16 Jul 2026 00:00:12 +0000
ROA not before:           Thu 16 Jul 2026 00:00:12 +0000
ROA not after:            Wed 14 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        142.4.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c1:94:b9:3f:2e:51:94:8e:6c:57:42:c0:93:37:3b:a9:8b:a7:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 16 00:00:12 2026 GMT
            Not After : Oct 14 23:59:59 2026 GMT
        Subject: serialNumber=2d5df4da0da920d8b83e972bd99bdc6e69ba40340d3571f777865cffb8003ae1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1c:37:4f:17:2c:8e:d8:c2:e7:d9:75:95:08:
                    52:41:8f:6a:17:31:c4:d3:56:b6:00:d5:27:d5:ba:
                    46:ef:2f:3b:9b:0d:19:78:ea:0d:d0:fc:c0:40:0a:
                    20:fd:e6:0b:b1:87:47:82:1a:62:4d:67:64:dd:e1:
                    c9:6f:14:c8:69:01:c1:6b:73:1b:dd:b9:9f:d2:53:
                    93:38:49:6e:2a:30:a1:31:a6:8b:08:3b:e2:d6:c0:
                    f4:18:b7:c7:17:55:81:d0:27:94:e9:4f:d8:6d:95:
                    f7:3a:7c:dd:ab:55:15:82:d9:c5:80:bd:31:36:03:
                    57:7c:2a:dd:7d:05:9b:a2:c8:5e:cb:ef:3e:b5:9f:
                    81:56:11:94:d0:f9:64:32:83:7c:d8:4c:af:59:d6:
                    9c:51:ba:73:ac:0a:00:52:af:b5:31:fc:cb:c8:eb:
                    80:62:c7:8c:93:74:be:49:19:64:cb:db:a6:56:9c:
                    e0:a2:9a:ca:49:23:aa:d7:51:ef:5e:76:fd:6a:3a:
                    11:cd:88:7c:ec:55:09:35:b5:3f:c7:ad:55:b7:8b:
                    0c:a6:0f:98:6b:17:28:53:73:ba:ba:d3:f2:d0:5c:
                    ce:96:2c:a0:be:15:1b:8f:11:ce:25:60:a7:25:62:
                    97:8f:b8:5d:60:e6:18:95:26:eb:57:90:b3:23:de:
                    8b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0F:E9:B0:D7:6C:7A:FE:09:F2:F7:51:3C:96:59:1C:35:BA:ED:22
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be0b4385-e6e3-4b26-93ea-7be9fbf3734e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.4.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:e9:57:ab:ca:c5:40:17:e0:e3:dc:d8:d3:29:9a:ba:0d:f4:
         b8:4e:6f:35:79:02:10:35:b5:ca:5e:d2:e9:b6:82:fa:d4:81:
         3e:b9:75:ac:36:9f:c0:6d:c1:be:12:f0:20:3c:e4:47:76:ce:
         a9:9c:4c:3e:6e:7d:3b:fd:e3:40:af:19:25:3b:48:a2:7a:cc:
         5d:6f:ce:e8:77:76:83:1a:17:95:f4:05:6e:01:55:9f:38:a8:
         3b:39:fe:bc:c6:9a:3b:9f:ee:60:2b:5d:ff:91:b4:ef:86:e7:
         ec:5e:43:53:ee:1a:7c:f5:77:c8:af:0d:30:14:cb:f1:49:7e:
         09:53:fa:4e:61:63:90:b2:da:38:db:f7:4a:fb:68:78:54:96:
         44:75:21:42:39:23:51:91:d4:70:83:d7:b0:db:47:fb:83:37:
         a8:76:7a:34:a1:32:62:f6:5e:54:07:ae:80:63:81:aa:d4:b3:
         7c:b3:92:82:3b:5b:f9:ee:20:e2:52:12:ad:0c:dc:6b:d2:47:
         47:1b:cf:90:f2:3a:55:3b:ce:e1:f8:0f:91:09:dc:c1:66:e7:
         0b:4a:cd:e4:38:19:0b:46:0d:a3:8c:59:7d:5d:cd:ce:99:3f:
         23:8b:6f:4f:e3:a5:2b:99:d9:a2:7b:1b:73:24:8a:f4:bd:35:
         a6:40:60:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:25:49 2026 by rpki-client