Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20b644c9-a726-4fb3-afcf-6cfe0a20f7bb.roa
File:                     20b644c9-a726-4fb3-afcf-6cfe0a20f7bb.roa (raw, json)
Hash identifier:          dz5M9TtQO/abjInQu7i152rQiuq786aew1+/xWfKuBM=
Subject key identifier:   EB:1A:62:49:BC:84:6D:A0:22:38:8B:A8:3B:B0:1E:5D:EE:2F:2D:C8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5CB9F5877929775814510C8EE9A128E7B92BD4F6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20b644c9-a726-4fb3-afcf-6cfe0a20f7bb.roa
Signing time:             Thu 02 Apr 2026 14:36:43 +0000
ROA not before:           Thu 02 Apr 2026 14:36:43 +0000
ROA not after:            Wed 01 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        184.34.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b9:f5:87:79:29:77:58:14:51:0c:8e:e9:a1:28:e7:b9:2b:d4:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  2 14:36:43 2026 GMT
            Not After : Jul  1 23:59:59 2026 GMT
        Subject: serialNumber=91fa5e9bf65e36c5e58a99db7e9aeab3d31a1824f1789e865cf345183ba73b5b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:69:9b:23:d0:c1:50:43:8c:cb:2d:64:60:e0:
                    fc:05:81:ed:3a:fc:64:f6:56:47:a5:eb:b6:07:10:
                    98:ba:19:aa:fe:ef:c8:69:88:df:fb:ca:32:5a:e4:
                    b2:6d:27:8a:80:67:72:42:4f:46:5c:46:7b:7c:a8:
                    44:38:c0:30:84:6d:ae:1f:d3:ae:96:78:82:c8:a9:
                    71:f6:0e:27:4d:a8:ec:69:bb:f0:3c:e7:47:99:19:
                    21:2e:c7:74:a6:a8:2b:55:b3:da:07:f6:a7:e9:e3:
                    54:5c:af:ae:c5:b7:0f:09:42:35:42:c3:e9:89:2f:
                    b9:45:64:1f:51:dc:ef:a0:88:fd:a5:e2:7f:73:d6:
                    b1:a4:20:87:a6:ed:09:2f:a5:d5:85:e0:c0:e7:1c:
                    9d:8b:00:47:57:94:9e:b2:f4:6c:26:5b:de:61:b6:
                    74:4f:95:69:f3:6a:a1:a5:39:a5:66:60:31:41:50:
                    0d:93:e3:b3:31:b6:c3:68:04:d6:df:8b:03:a4:e1:
                    c5:4d:b4:5c:fa:33:4c:4b:4e:b9:f8:34:9d:a4:8d:
                    4a:69:d7:73:a6:58:8a:5a:21:82:e2:17:28:05:fc:
                    e3:af:21:7b:2c:88:5b:94:c5:f3:79:d4:42:44:c9:
                    d9:c8:dc:cb:05:8a:0f:5b:17:70:e0:57:b2:e7:d5:
                    b5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1A:62:49:BC:84:6D:A0:22:38:8B:A8:3B:B0:1E:5D:EE:2F:2D:C8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20b644c9-a726-4fb3-afcf-6cfe0a20f7bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.34.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:1a:e4:7d:a5:3a:06:51:bd:75:2e:39:ab:0f:03:30:01:4c:
         74:56:83:e7:90:13:1b:47:b0:b1:59:ab:b0:1f:75:d9:2f:76:
         c4:6a:f7:f5:6b:b2:85:08:46:17:75:99:15:15:b6:93:db:14:
         cf:9f:cd:63:2e:f2:b6:54:e1:d6:97:e9:76:36:c3:f5:05:3c:
         da:e7:bf:7b:31:24:c7:61:2a:1d:79:c5:24:98:30:97:09:6a:
         57:e1:62:26:ba:94:85:23:ae:18:8c:ad:83:e5:30:38:18:d5:
         b6:28:4f:0f:0a:7a:b0:b5:2b:93:4a:9e:44:96:26:60:d1:6e:
         f0:07:6c:4a:99:04:10:81:e8:fa:6b:26:3a:30:55:f1:f3:f4:
         34:8c:31:e6:fe:bc:af:8d:71:dc:f4:d7:39:da:a5:21:f9:47:
         04:03:c0:1a:4f:a3:ba:c9:2a:8f:ef:15:81:13:c3:d2:34:33:
         24:72:3a:33:f7:f4:df:2a:5d:1a:11:17:7e:6b:13:4b:b3:77:
         40:61:66:5b:19:51:fb:b7:37:47:e2:b3:98:ee:b2:7b:cb:c4:
         ee:b7:02:7a:ec:03:d9:9a:f5:72:a7:77:69:b4:c5:a9:99:ab:
         bf:96:b2:d6:81:f2:6e:8c:3f:6d:8b:ad:28:9b:1a:e7:f0:c0:
         9d:65:d8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:35:32 2026 by rpki-client