Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee6644d9-3367-43f8-ae7b-f2e48733177c.roa
File:                     ee6644d9-3367-43f8-ae7b-f2e48733177c.roa (raw, json)
Hash identifier:          DRd42sOeVWki4AANmt4dTxVyN8MIAYAWwoXdVpK+Bck=
Subject key identifier:   50:31:4D:E8:48:6B:46:9D:1D:08:99:FB:AC:9E:29:76:3F:C9:B3:F9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0812507D7F89B9D1D9D5405E5BC2B245CFCAF413
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee6644d9-3367-43f8-ae7b-f2e48733177c.roa
Signing time:             Thu 23 Jul 2026 01:01:16 +0000
ROA not before:           Thu 23 Jul 2026 01:01:16 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        44.220.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:12:50:7d:7f:89:b9:d1:d9:d5:40:5e:5b:c2:b2:45:cf:ca:f4:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 23 01:01:16 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=0feb37aab69376d73e14bb807bbd4277ab0068926564f5e53996d089b7e0d63d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f3:3d:af:da:19:2f:97:0f:82:dc:b3:0d:94:
                    01:56:e5:60:e5:08:62:2c:31:96:d9:06:6f:9f:5b:
                    d9:ef:c1:9d:91:ea:36:d9:b4:74:eb:41:8c:bc:1b:
                    e8:64:3d:e7:01:29:43:61:ed:3d:f1:e6:f3:e5:05:
                    7c:a5:a3:a0:76:8a:d9:31:83:27:ae:c8:c7:4d:40:
                    21:48:4d:f1:ed:4f:d7:da:43:2a:51:5d:52:36:fd:
                    81:01:48:5e:31:67:8a:ac:05:f2:1d:ec:15:ae:7c:
                    6a:61:b4:0e:e7:af:7a:8c:27:dd:f3:12:bf:6a:56:
                    75:59:4b:ed:59:1a:35:45:2c:1a:81:cc:3e:3d:91:
                    37:94:95:b3:a5:f5:cf:51:1f:88:85:bc:83:e1:4b:
                    c3:8f:47:42:c4:a7:69:87:2f:4d:dd:c4:c7:06:59:
                    10:39:74:86:e7:a8:c9:91:3e:74:47:86:c3:cc:66:
                    db:a2:40:97:87:a0:51:05:fe:52:ab:f2:64:f3:10:
                    9d:2b:0d:27:d2:b8:31:c1:34:19:6f:86:a8:4e:8b:
                    30:d0:b3:94:0b:39:65:cb:0b:2a:ac:66:d8:fb:c7:
                    a7:93:97:27:13:68:06:e8:7a:f7:63:88:f4:1d:de:
                    d2:ea:79:6c:7e:d9:ee:6d:38:89:97:94:5c:91:ca:
                    49:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:31:4D:E8:48:6B:46:9D:1D:08:99:FB:AC:9E:29:76:3F:C9:B3:F9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee6644d9-3367-43f8-ae7b-f2e48733177c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  44.220.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d8:9c:98:a0:d9:9d:f3:14:c4:1a:8d:46:7c:4c:8e:15:13:03:
         c3:e2:bd:3f:aa:46:db:b9:da:d3:8a:74:71:3b:1a:8c:7f:d2:
         15:3f:7f:09:74:0a:8c:3b:b2:3d:16:d1:7b:51:3f:38:89:da:
         b8:43:ca:7b:bc:83:aa:88:73:b7:06:1d:53:19:38:76:ec:36:
         07:e2:25:7a:46:8a:71:da:a7:c1:b9:16:8b:a6:af:bc:33:dd:
         04:18:ea:38:2c:b4:ca:62:cd:b7:ec:70:7e:93:9b:9e:18:fb:
         fb:cc:ee:b0:dd:a9:1e:df:a2:9b:5b:36:a5:80:86:e2:d6:59:
         94:dd:f3:a3:cc:0e:6a:dd:bf:b7:dc:6c:46:c4:2f:46:23:ca:
         c7:a8:50:aa:e1:e9:8b:b2:d4:0b:75:58:ed:b0:a3:4d:f1:76:
         43:f5:30:1f:a3:bb:2f:0e:22:f7:e6:fd:68:1b:6b:bf:f6:e3:
         e9:6f:fa:c5:b6:af:13:f3:be:75:f7:10:f9:27:2c:be:22:43:
         2d:e9:fb:96:f9:df:9a:a6:ae:3e:c6:a7:1c:40:1f:92:b5:01:
         c2:dd:a9:f0:7f:2f:aa:3e:03:c3:b9:3d:7c:20:16:1e:c5:07:
         3b:29:fc:16:a9:39:ba:eb:ca:ff:9d:d3:7b:a9:6d:44:63:96:
         ef:41:ab:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:36:36 2026 by rpki-client