Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/266f9da4-2a6b-412c-85e7-e26b9b88cf56.roa
File:                     266f9da4-2a6b-412c-85e7-e26b9b88cf56.roa (raw, json)
Hash identifier:          7crj8f2stEBkF0fmUykS7dGcKvtx9C5vHf7Uvr6EihA=
Subject key identifier:   7A:DE:3B:06:21:6E:AC:72:41:52:FE:48:61:ED:E4:62:8B:0E:5E:D3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       48E85F54FC5471749CA1721CA4B80E492205F6E0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/266f9da4-2a6b-412c-85e7-e26b9b88cf56.roa
Signing time:             Mon 27 Jul 2026 00:31:25 +0000
ROA not before:           Mon 27 Jul 2026 00:31:25 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        75.98.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e8:5f:54:fc:54:71:74:9c:a1:72:1c:a4:b8:0e:49:22:05:f6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 27 00:31:25 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=3e116347b4cd30017c10f8e1424a21c1020b5e80422c6511c3a80d85b6a3fff1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c6:14:d3:eb:5c:31:22:74:42:50:43:aa:b3:
                    33:ce:00:58:b9:84:58:c6:33:40:ef:a8:a5:7b:2f:
                    a8:5a:35:23:7f:9b:7e:5b:d1:57:ba:90:70:73:c5:
                    fd:5f:c3:69:b5:14:6d:c9:91:cc:d0:c3:7b:1c:3f:
                    11:a3:1c:eb:a6:bb:ae:ea:53:17:c9:28:b4:85:ed:
                    3c:ad:77:21:77:ec:24:f0:dd:21:8e:3d:63:38:92:
                    d9:b8:77:26:ab:fc:c7:10:53:79:75:8e:7e:55:a5:
                    af:cb:56:6f:30:b8:e2:85:51:62:68:68:be:b9:b7:
                    b4:02:c4:64:cf:37:be:b3:02:37:fa:72:46:fd:d4:
                    40:8f:1e:e0:5a:a2:ca:05:44:72:30:d1:89:6f:16:
                    3a:df:0d:ac:a0:4c:1d:e8:a5:71:48:8b:40:ca:2b:
                    ec:e9:67:b4:5e:89:ef:1b:32:35:df:60:5f:99:34:
                    66:85:67:2d:4b:d2:b5:06:7a:f1:b8:cf:0f:0f:de:
                    25:38:0b:4d:df:17:ae:53:a1:06:d1:76:d9:0b:45:
                    bf:b0:11:46:b0:2b:4a:bf:37:50:1a:8d:bf:fa:21:
                    ea:38:ef:19:d9:4e:f6:75:d7:ef:a5:04:a2:d3:56:
                    6e:97:86:d0:35:fd:fc:40:ff:78:46:8e:1b:95:57:
                    55:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DE:3B:06:21:6E:AC:72:41:52:FE:48:61:ED:E4:62:8B:0E:5E:D3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/266f9da4-2a6b-412c-85e7-e26b9b88cf56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.98.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:b4:b9:89:0a:ed:de:ac:1c:18:e1:ac:d1:cf:4d:16:2b:8a:
         2d:a2:28:69:85:2e:ba:91:1d:1f:f1:25:83:a3:e8:1e:5a:00:
         4f:06:6c:43:c0:bc:b6:f9:6b:90:93:92:62:53:5d:55:63:6b:
         c9:9f:b4:2a:71:44:ef:ab:9a:f1:24:bf:7f:13:e7:15:1c:80:
         fe:66:47:e3:70:5c:24:21:6f:a3:d4:0c:c1:31:4c:7f:fb:c0:
         cd:50:4a:4e:b3:69:6f:39:90:49:7a:e9:0d:9e:80:de:50:a1:
         5f:cc:df:b5:40:01:52:9a:44:2c:59:81:39:04:2b:31:7e:71:
         e3:1b:80:21:d7:79:49:10:29:2f:8b:37:e3:e2:cb:94:03:54:
         2a:2d:f5:a5:da:10:d7:70:dd:33:71:5e:94:e7:cd:27:01:b1:
         5c:1b:bf:e5:7f:30:11:0e:22:17:36:5d:82:57:a5:87:45:9f:
         7e:43:10:15:24:e1:03:63:59:6d:8f:0b:ca:77:7a:99:44:7f:
         d1:07:31:06:8e:26:cb:62:33:af:a5:30:78:2c:05:05:54:f4:
         5a:1c:53:5c:ef:0f:4b:45:ac:7e:0f:ed:e5:b7:50:79:66:9e:
         6d:f9:78:49:47:86:58:c3:a1:ef:31:46:78:60:b5:df:bb:73:
         21:8e:f6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:50:21 2026 by rpki-client