Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2448ef9-fbcc-40a2-9d14-5f8db4a70516.roa
File:                     e2448ef9-fbcc-40a2-9d14-5f8db4a70516.roa (raw, json)
Hash identifier:          tXhWFA9vc0sbJVpRqnpINmHsFoh7GCVtGUYs4JkO7NM=
Subject key identifier:   08:6C:4C:EE:45:25:09:42:E5:6D:B8:2D:8C:9D:93:30:FA:F6:BC:72
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       17BA4F4266BCE28C1E22F96EA86B6663AA031F12
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2448ef9-fbcc-40a2-9d14-5f8db4a70516.roa
Signing time:             Wed 22 Jul 2026 00:00:16 +0000
ROA not before:           Wed 22 Jul 2026 00:00:16 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        23.238.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ba:4f:42:66:bc:e2:8c:1e:22:f9:6e:a8:6b:66:63:aa:03:1f:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 22 00:00:16 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=02d27a433ca8ead16f54a39a398f2b65d5658e295375408d900bc87597f9df32, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ad:87:27:b6:51:73:c5:e1:4d:63:6d:d4:23:
                    37:b6:9d:2b:eb:c1:43:7f:9e:81:f6:bd:ff:20:a5:
                    2c:96:fb:0f:f7:a8:ed:71:b2:bb:43:3f:0f:85:45:
                    ea:80:e2:14:1e:e4:7a:f1:df:83:07:27:4d:c5:39:
                    de:7a:cb:48:8c:e5:79:c0:1b:c0:8b:b0:1b:67:70:
                    fd:38:74:af:31:a3:b4:16:87:7a:34:c0:44:9a:be:
                    d6:1a:32:ea:f3:92:82:f6:c2:72:cb:36:11:a1:13:
                    b3:a9:85:44:02:35:4e:c1:e2:3c:04:11:d9:cc:12:
                    c7:6c:74:e7:e4:b5:f7:6d:37:4b:cd:74:6e:ec:f8:
                    8f:d5:97:f5:ad:32:ab:58:d7:00:d4:d4:9c:39:62:
                    9c:1b:5a:e8:93:01:82:83:65:89:d5:5b:4d:46:03:
                    65:80:46:3a:80:15:0b:93:5f:b7:97:87:1e:91:89:
                    15:2a:af:b7:a1:6b:71:55:4f:89:b5:ae:b9:5b:7d:
                    22:b9:12:9e:83:c9:dd:92:7d:50:f2:df:85:f2:03:
                    ed:62:1a:06:5a:c8:fc:c2:db:d0:03:8f:87:b9:f1:
                    a0:1c:e5:c6:c6:59:43:a8:0b:b9:76:e5:e0:4b:6a:
                    c1:80:9d:ac:e6:8f:9a:e6:7b:65:57:1e:d7:85:35:
                    43:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6C:4C:EE:45:25:09:42:E5:6D:B8:2D:8C:9D:93:30:FA:F6:BC:72
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2448ef9-fbcc-40a2-9d14-5f8db4a70516.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.238.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:3f:17:d7:b5:84:47:b2:81:43:4a:9a:aa:8a:9a:64:13:8a:
         33:4c:66:b6:5d:96:66:10:86:d7:e1:82:dc:16:9c:f2:b1:00:
         f9:c1:a3:04:af:ab:70:4d:f0:d8:99:19:30:1a:3d:5c:54:fb:
         39:ae:9c:b3:e9:19:8e:82:c4:42:ee:98:af:67:e0:f9:ee:5e:
         3f:e6:ad:29:e5:a2:86:02:c4:3e:95:91:f1:bc:1c:93:ca:bd:
         fb:6a:a3:38:ce:89:67:1c:9a:e1:b5:48:9e:45:f9:e7:ee:c8:
         b1:e4:3b:cb:7e:6e:a3:57:ce:81:a9:26:5b:91:d2:3c:23:7c:
         cc:28:b4:4b:cb:b3:b2:a5:b0:ef:76:58:00:c7:ba:89:b7:10:
         41:ef:f1:92:d7:ca:80:25:f6:99:dc:16:a4:4b:32:d9:c7:bf:
         6b:02:10:8d:9e:ff:c9:ca:82:d4:ab:0c:2b:a2:c3:9f:78:36:
         01:8c:d5:46:48:15:00:33:85:62:e6:be:0e:2e:88:a1:63:be:
         cd:79:07:6c:96:d4:46:69:e8:d6:e6:29:29:19:da:a9:e5:38:
         ec:13:7c:f4:27:ee:4e:c4:02:f5:34:33:c2:dd:05:43:14:70:
         dd:2a:e0:97:1e:c8:a4:fa:e3:df:39:ab:15:13:10:ca:16:5b:
         28:cb:28:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:32:06 2026 by rpki-client