Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d259d0cd-bc53-44e8-84f8-a0a96e06af26.roa
File:                     d259d0cd-bc53-44e8-84f8-a0a96e06af26.roa (raw, json)
Hash identifier:          ViVUtWYlE9RHwzXhDpi208O9ODJkRkWClRZp9yR/9zA=
Subject key identifier:   A2:4F:5E:B5:0F:18:02:79:B0:F5:0E:5F:CC:AD:47:2D:53:33:F5:10
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6FA53AFE24364AFD2277BFB86430ADD30CFE634C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d259d0cd-bc53-44e8-84f8-a0a96e06af26.roa
Signing time:             Thu 14 May 2026 00:00:14 +0000
ROA not before:           Thu 14 May 2026 00:00:14 +0000
ROA not after:            Wed 12 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        209.92.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a5:3a:fe:24:36:4a:fd:22:77:bf:b8:64:30:ad:d3:0c:fe:63:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 14 00:00:14 2026 GMT
            Not After : Aug 12 23:59:59 2026 GMT
        Subject: serialNumber=615185ed31cc7ce02428e7c9ffdf721a9fe3f3e57ddb9b94c82390ddbac91e16, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b3:cd:af:a3:51:09:1f:dd:a7:3a:27:f6:8f:
                    42:8a:05:00:19:34:0d:c4:1e:33:77:31:72:cb:d5:
                    ba:90:c9:e0:b0:ca:af:d0:80:ea:2e:14:50:50:b8:
                    22:e9:9c:5c:64:3a:0c:33:07:3a:f7:c4:8e:c3:24:
                    fb:9d:2e:d6:05:e6:fc:54:6a:4f:0b:6c:01:ad:7b:
                    b5:78:6c:38:5a:45:c9:da:5a:ac:1d:9e:37:32:a1:
                    df:59:8e:21:bb:a1:60:07:82:53:e4:92:da:85:13:
                    50:64:ee:b1:8b:33:95:3a:cd:be:c9:7d:44:7f:2e:
                    3b:6e:ef:2a:49:aa:e7:f7:b1:68:12:3a:0c:da:e4:
                    94:a6:e5:02:b0:51:24:af:79:9a:76:f1:13:08:a7:
                    bc:35:65:00:ad:75:a8:37:dc:39:bf:91:65:5f:99:
                    45:f0:61:ba:85:75:47:6b:ea:c4:71:54:b1:de:ba:
                    38:57:a7:a0:9b:28:e0:64:b0:22:35:da:13:a7:94:
                    45:33:e3:d7:a7:b2:9a:14:16:eb:b7:92:65:d2:bc:
                    1e:b9:cf:fa:e7:98:fa:05:1f:dd:c5:4d:c7:07:e2:
                    d8:c0:cb:68:fe:60:58:2b:91:4b:fc:8c:8e:f4:50:
                    ea:fd:ed:6f:bc:20:07:61:95:c1:79:79:21:a7:8d:
                    a5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4F:5E:B5:0F:18:02:79:B0:F5:0E:5F:CC:AD:47:2D:53:33:F5:10
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d259d0cd-bc53-44e8-84f8-a0a96e06af26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d0:1d:c5:54:66:04:e0:bf:fa:eb:fa:c5:3a:16:a8:95:8c:95:
         e6:0c:eb:9c:51:64:90:35:8d:55:45:28:36:75:92:a0:5b:ca:
         c4:85:33:a5:f5:0d:0b:1e:41:3b:f1:74:4e:3b:51:9c:09:04:
         74:bd:26:94:85:d6:65:f0:52:aa:0d:16:da:ed:6d:81:1f:ae:
         e4:fe:aa:34:20:38:4e:ad:3f:82:03:f2:9b:e3:15:b7:0c:f3:
         28:1b:55:7c:2f:8b:14:10:2b:a4:47:3c:40:24:01:73:f5:53:
         e0:26:8c:ce:16:e3:4e:3b:94:33:73:96:46:7b:8c:a6:91:87:
         7d:d5:a0:2d:8f:5c:b7:8b:f3:5d:1c:45:66:6f:f2:a2:da:7a:
         6f:55:26:54:50:64:28:36:b6:50:50:e4:7e:94:3d:73:9a:b8:
         f1:0d:30:ae:93:ac:7b:ef:a3:5d:b3:60:9a:4d:05:d5:aa:a4:
         83:7f:f5:ee:07:10:48:ee:95:7e:46:3e:95:f7:8b:1f:e7:df:
         54:d6:25:86:e1:1c:7a:74:bb:71:3a:ad:20:62:e1:f4:c5:d0:
         01:7d:e6:dd:bc:17:de:b4:88:4c:80:b0:48:b5:bd:86:6c:f3:
         99:ad:e2:1d:1a:e4:12:60:86:81:df:54:06:e6:c1:e8:97:78:
         ee:73:48:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:02:31 2026 by rpki-client