Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b6ee93d8-d7a7-41ad-8de1-90a055bc197c.roa
File:                     b6ee93d8-d7a7-41ad-8de1-90a055bc197c.roa (raw, json)
Hash identifier:          Qxytg0VtdqzBSlgFuFtcIscNo8a6clnb7q7uq8qwV5g=
Subject key identifier:   2C:BC:D7:34:A3:06:40:28:32:3C:F8:8E:BC:0A:FE:39:46:FB:9E:9A
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       6B948405D5615D3431CB94EAD8F2AA7F600E2162
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b6ee93d8-d7a7-41ad-8de1-90a055bc197c.roa
Signing time:             Tue 21 Jul 2026 00:20:08 +0000
ROA not before:           Tue 21 Jul 2026 00:20:08 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        23.251.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:94:84:05:d5:61:5d:34:31:cb:94:ea:d8:f2:aa:7f:60:0e:21:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Jul 21 00:20:08 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=67a590bfc85fd2ea43b637cea264b21574d761dc1b2c8d2da97aec58a4b5a592, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3e:5b:78:c7:50:ab:2a:7b:ae:27:0b:d6:80:
                    13:47:84:61:39:15:44:20:4c:b3:8c:47:74:00:d5:
                    3a:8d:f5:ca:ce:a1:7f:ed:1d:cb:c5:bb:a0:54:37:
                    ec:4b:33:4e:6f:9c:04:a8:4f:df:9a:a8:a0:cf:fb:
                    dc:89:25:da:ec:13:00:1c:f5:07:cc:cf:94:88:06:
                    08:36:6f:6e:10:41:8d:99:08:5b:a2:cf:b2:6d:f1:
                    6c:cb:1e:d7:6f:fc:d7:7f:4a:72:0d:63:c8:3e:a8:
                    9a:05:37:98:89:cb:df:b1:e7:8c:89:56:9a:cf:97:
                    e9:1d:89:e1:20:75:64:95:4b:a7:20:6a:7f:52:de:
                    e1:a8:0d:ab:2d:5d:2e:75:36:12:fd:b3:23:9d:c0:
                    59:63:5d:4d:aa:47:4e:8a:4d:e7:95:88:d1:73:5a:
                    0b:bf:5c:07:af:de:9a:26:7e:4d:0f:e3:8f:68:b1:
                    cd:e8:c4:88:03:02:f8:5f:22:e0:f5:3b:f4:17:f4:
                    2a:d1:ed:65:64:f1:ee:b4:77:6c:e8:fc:bd:d6:02:
                    37:ac:4d:f0:fc:66:35:e7:e8:84:ec:c1:8f:d1:66:
                    e2:77:ab:18:68:47:8f:99:77:22:f1:4b:f6:7c:79:
                    7b:18:b5:4b:38:48:e4:d9:db:0f:e6:fa:cb:da:e4:
                    b6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BC:D7:34:A3:06:40:28:32:3C:F8:8E:BC:0A:FE:39:46:FB:9E:9A
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b6ee93d8-d7a7-41ad-8de1-90a055bc197c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:00:7c:f8:37:01:82:18:e6:14:83:bb:92:33:6f:c5:7b:f7:
         e8:61:1f:4e:82:a7:be:66:1a:85:0b:9b:b3:b7:24:38:6a:ce:
         58:22:dd:9b:27:65:8b:b3:46:24:1e:9f:85:bc:46:8f:4b:38:
         63:96:c8:7a:f0:4a:dc:de:07:56:3a:29:a2:6e:4d:e1:e7:6b:
         a8:da:49:bc:63:df:80:2b:e0:96:23:59:3a:60:03:be:e4:19:
         42:24:85:2f:a3:e1:fc:91:86:5e:11:e1:85:6a:96:bb:03:56:
         b4:b9:70:e4:15:d9:83:db:e5:cd:9f:ad:77:57:59:33:d3:38:
         f7:3b:35:f2:c1:e2:6b:9e:27:7e:b1:e3:50:3f:6c:4f:3a:e8:
         2a:0c:b8:56:a3:ef:a5:95:18:79:75:2d:ae:3e:81:c6:bf:69:
         19:dc:26:20:2c:62:3a:68:56:b1:b6:16:db:a8:7a:cc:a4:ae:
         bc:a7:f9:8f:9d:ee:71:3d:d5:5a:f2:32:8c:05:8c:47:48:d4:
         4d:8c:5e:f4:7a:a8:65:17:a0:e3:dc:a0:0e:5d:f4:6a:31:8c:
         85:dd:60:5f:92:3d:dc:ad:a1:b5:45:bc:68:59:0c:fc:58:65:
         ad:c7:37:7d:e8:95:5b:a8:8e:d6:2c:20:1a:2a:01:f2:e8:95:
         1e:66:9e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:39:49 2026 by rpki-client