Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/394ea377-6e76-4b2f-a5b4-6770182b6a6f.roa
File:                     394ea377-6e76-4b2f-a5b4-6770182b6a6f.roa (raw, json)
Hash identifier:          y354vmm8l4Yx4cSQE4zgG3woHxFpmFzGdHNHPbFVAQc=
Subject key identifier:   D2:A6:90:08:23:57:20:21:A0:CC:84:3D:A3:1F:67:A3:4B:EA:33:D3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       69D88B729A33A20F139B01CA9A7EA1C936210FC1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/394ea377-6e76-4b2f-a5b4-6770182b6a6f.roa
Signing time:             Fri 15 May 2026 01:10:54 +0000
ROA not before:           Fri 15 May 2026 01:10:54 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        161.193.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d8:8b:72:9a:33:a2:0f:13:9b:01:ca:9a:7e:a1:c9:36:21:0f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 01:10:54 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=0e94ccfb90be97bd3aabe3d4a318f4cc2b3f2f7da43d10aa3acde0c1bd873344, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bc:2e:5c:ff:69:28:70:50:3a:ec:ff:02:d0:
                    db:16:d5:71:23:a7:7c:85:88:c5:cc:39:0e:38:d6:
                    10:c8:c2:47:58:a7:4a:cd:86:f1:ea:3f:7a:af:58:
                    1d:9b:b0:86:64:ad:6e:8f:7d:97:2f:a3:b6:3a:51:
                    3f:21:21:85:5b:8c:01:47:5f:dc:e2:35:e7:d9:dc:
                    e8:1a:1e:9c:8f:c6:53:86:0c:7b:84:81:35:de:66:
                    7e:a2:3f:16:5b:0a:3d:d7:9f:67:bb:4e:8d:5c:a5:
                    6d:a0:f8:8a:c7:41:aa:55:1e:90:02:b9:fb:a6:d8:
                    0d:8f:21:4c:33:65:9f:78:e2:15:e6:72:70:61:90:
                    ee:d3:31:7b:ac:27:84:21:35:e8:f6:23:44:ec:4c:
                    1c:96:46:1d:ae:e7:80:a5:31:4b:16:17:48:e1:c1:
                    59:3d:08:57:19:81:ff:d5:fd:a0:6b:d2:c0:51:03:
                    f0:a5:69:56:5e:6a:38:40:67:0a:16:40:11:99:0e:
                    51:25:42:f8:d0:cf:74:8d:b8:d4:8e:27:f9:db:93:
                    96:29:b5:31:a0:35:a5:74:e2:1c:c9:de:01:39:52:
                    c9:b7:a6:4f:9e:88:24:12:5b:0f:e3:98:ec:fd:15:
                    fb:2f:7b:6a:30:de:c9:e4:58:ac:78:71:07:6a:1b:
                    9f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A6:90:08:23:57:20:21:A0:CC:84:3D:A3:1F:67:A3:4B:EA:33:D3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/394ea377-6e76-4b2f-a5b4-6770182b6a6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.193.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         39:bd:ec:a5:62:8e:09:43:d1:d0:e4:44:c5:84:bc:3a:26:90:
         a7:2d:f6:a5:4c:00:54:80:cf:49:2b:d3:51:c6:3d:e0:f1:dc:
         2f:17:c0:94:0a:db:ca:d3:2e:24:da:6b:d8:57:ce:f1:a3:aa:
         67:d0:db:5c:16:a0:e1:34:28:d9:b7:cb:32:11:cb:8f:4a:da:
         10:59:49:dc:b2:73:44:14:c4:ec:68:f2:ac:eb:ed:b4:76:ad:
         55:5e:30:a4:ca:fe:95:79:8b:7f:76:21:1c:4e:75:07:ae:be:
         55:03:88:09:24:cc:11:0b:8b:16:05:b2:31:d0:fe:3f:b4:7d:
         20:87:23:dd:12:99:16:54:57:a4:bd:2e:b7:c3:cb:05:d0:e4:
         19:2f:9c:d6:8b:e7:1e:a2:28:1f:c8:2c:72:d2:16:25:a7:42:
         46:dc:df:40:33:8b:7d:90:cc:5d:9d:55:df:4f:59:44:42:3c:
         f6:cd:09:fa:54:07:13:b1:11:c6:f9:6f:a3:7d:a5:06:86:b2:
         3e:9a:aa:6e:eb:53:47:d5:c5:ec:af:10:84:a8:8f:29:d1:5d:
         75:de:8e:8d:58:5f:8f:bb:9b:5b:42:4b:46:ce:39:3f:e4:3a:
         a9:7f:0a:f7:7c:d8:78:ca:d4:6e:3f:82:59:ac:c6:c3:a4:46:
         b6:b2:7b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:19:09 2026 by rpki-client