Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f96569d-1e29-4c82-8714-f7e019d9de0e.roa
File:                     1f96569d-1e29-4c82-8714-f7e019d9de0e.roa (raw, json)
Hash identifier:          TY6cpWH6BYz1z5SYNkCoJ8yzkhWKbZ48hlRWR42L+FI=
Subject key identifier:   51:3E:7C:5F:52:BA:43:2F:B8:51:73:DA:60:86:87:EB:CD:FB:14:82
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2EF3661FC27A44B57874DDBB68BC9A491FC9BC41
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f96569d-1e29-4c82-8714-f7e019d9de0e.roa
Signing time:             Sat 25 Jul 2026 00:10:08 +0000
ROA not before:           Sat 25 Jul 2026 00:10:08 +0000
ROA not after:            Fri 23 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        134.73.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f3:66:1f:c2:7a:44:b5:78:74:dd:bb:68:bc:9a:49:1f:c9:bc:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 25 00:10:08 2026 GMT
            Not After : Oct 23 23:59:59 2026 GMT
        Subject: serialNumber=5226f2406304fb89bcc343e0a453ba75187fb9db77083e7241adae889f9ff854, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:99:0b:36:97:e7:46:aa:95:c3:ff:ac:a6:77:
                    f1:3c:71:02:2e:0f:40:ec:8b:02:cc:f0:35:61:c8:
                    d9:41:1a:b8:40:5f:7b:c4:49:9c:c8:7a:07:46:4f:
                    f5:3c:1d:e0:7c:e7:9b:77:77:f9:b9:ce:1f:7b:8a:
                    7d:a7:44:99:39:8b:f2:87:3f:f6:9e:6d:33:50:e2:
                    58:92:21:84:9a:42:47:52:b0:c0:71:88:90:9f:78:
                    33:a4:a7:c5:6c:98:47:66:46:6c:36:c8:25:f2:cd:
                    a8:da:2d:cd:5c:ad:ee:4d:8f:ce:35:c5:ca:b5:b0:
                    b2:ed:b7:6b:36:49:fc:2f:1f:83:92:17:60:56:06:
                    65:29:8c:03:30:aa:a5:75:02:8d:20:ad:e1:b7:44:
                    01:d6:d7:17:2e:23:97:9f:22:c3:49:a3:90:e6:64:
                    45:23:f9:a7:ea:1a:4e:75:f6:f4:e2:11:f2:0b:23:
                    7e:6e:b0:54:15:99:6d:ee:1f:99:c0:98:25:36:14:
                    47:3f:41:7f:ba:bd:75:34:20:6d:81:c7:c1:99:99:
                    f0:75:c1:80:9c:b6:d8:89:71:73:09:1a:bd:e7:46:
                    7f:bd:cb:7d:fe:66:0c:7d:a3:26:1c:81:ec:1b:72:
                    3d:f9:4b:4b:97:11:67:df:6f:3e:2b:8d:fa:2c:51:
                    6c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3E:7C:5F:52:BA:43:2F:B8:51:73:DA:60:86:87:EB:CD:FB:14:82
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f96569d-1e29-4c82-8714-f7e019d9de0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.73.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         11:9f:e6:ef:56:8a:bb:5d:88:f0:18:4f:a4:0f:f3:d8:6e:80:
         19:64:7c:9a:f7:e1:a3:ee:3c:60:6a:b9:5f:38:fc:95:ee:ff:
         2e:ec:ed:63:fe:f8:6d:44:f0:b5:32:3e:97:ff:1b:aa:b7:36:
         92:85:88:09:ff:63:d5:97:5e:2f:9c:c4:dc:3c:59:7d:1c:2f:
         c7:09:bd:9f:49:27:85:81:70:9e:0d:c6:b6:ff:4b:b5:d9:d9:
         63:58:4d:33:85:74:bd:37:40:10:86:af:93:68:b2:70:22:5a:
         2b:b4:13:0f:24:01:e8:70:d2:d7:a8:0c:cd:47:29:88:01:f1:
         1e:37:45:0a:01:ea:cd:af:d2:d7:cf:55:cc:0f:78:12:2d:af:
         f2:50:9f:e4:c8:f7:e3:87:89:22:7f:33:1a:9c:0c:ad:c1:6c:
         b2:aa:46:6d:9c:f4:8d:fa:32:48:5d:db:a9:98:cd:96:7e:c3:
         d8:29:5f:c4:81:39:1b:e5:ce:ba:be:e7:a9:92:4d:cc:ee:c9:
         ce:ba:aa:a6:40:80:82:6f:b7:09:74:27:a3:e3:0c:0d:1f:83:
         67:06:9b:38:8a:63:01:18:89:97:56:ee:12:4b:21:cf:ac:f1:
         c2:ca:22:13:d8:6c:e0:9a:46:3b:23:65:6f:0d:95:26:49:d2:
         e5:8b:3c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:53:30 2026 by rpki-client