Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6392e4ef-e271-45c8-867d-345229dc1cf6.roa
File:                     6392e4ef-e271-45c8-867d-345229dc1cf6.roa (raw, json)
Hash identifier:          /NvgM9aBRL9GlvOYgf9BXvinUTSQ2gAVZ64o+f2whhI=
Subject key identifier:   5B:23:4E:9D:A7:39:37:9E:A6:54:19:36:EA:86:C0:94:74:90:5C:F0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5E69A2491A41B3E64B490E494245A8BB4BF0484B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6392e4ef-e271-45c8-867d-345229dc1cf6.roa
Signing time:             Tue 19 May 2026 00:30:55 +0000
ROA not before:           Tue 19 May 2026 00:30:55 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        202.5.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:69:a2:49:1a:41:b3:e6:4b:49:0e:49:42:45:a8:bb:4b:f0:48:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 19 00:30:55 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=44f848515a91e6ad43bdb61ddc903a33946fce74a3a4e5fc11fbd518e673553f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b3:f5:95:5b:49:ab:62:c2:aa:8d:66:3f:17:
                    1d:b0:36:b8:49:33:79:61:be:61:51:7e:cd:7e:f5:
                    33:81:86:04:6b:71:bf:36:67:ae:00:3a:26:c2:a5:
                    f7:ae:f3:a2:64:d7:65:8d:30:9b:0c:0a:e0:09:ee:
                    de:7f:ba:c0:2c:a6:68:ae:8c:6a:c5:b9:ab:f1:32:
                    ef:26:78:56:2d:27:af:ae:29:90:34:d8:12:f9:96:
                    9b:84:f7:18:20:06:2d:15:95:60:58:5d:90:32:66:
                    6e:1e:6f:56:28:f7:41:f9:fe:7b:8f:44:a4:35:66:
                    9e:ea:12:d3:1d:3a:c4:46:ef:c8:50:40:34:23:4b:
                    71:07:ef:85:f1:55:8f:7c:00:ab:54:99:ca:66:3a:
                    35:95:0b:02:bb:64:aa:f9:ad:c6:7c:ef:c0:7f:0d:
                    03:c5:c0:6e:a0:da:80:c3:4e:63:f8:e9:3d:f1:3e:
                    6b:6b:59:6f:d2:89:0b:86:f1:4c:f9:a5:3c:aa:ef:
                    25:9c:42:d6:62:39:d3:6a:e2:15:60:9a:e5:65:1c:
                    e2:ec:61:7c:9e:8d:29:8a:a3:74:ca:96:0a:1e:3e:
                    b8:68:16:6f:ca:51:01:70:55:87:c2:6c:e1:b6:80:
                    f4:6e:d5:ac:1b:3d:7d:55:9c:ce:a6:85:99:c7:0a:
                    8e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:23:4E:9D:A7:39:37:9E:A6:54:19:36:EA:86:C0:94:74:90:5C:F0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6392e4ef-e271-45c8-867d-345229dc1cf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.5.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:da:31:54:06:f9:36:19:ff:cc:ac:7a:b2:c7:cd:6a:7b:09:
         c5:24:0e:71:82:0f:b3:75:95:0c:f0:32:f6:2c:12:f5:19:72:
         68:6e:df:02:7c:6a:4f:d3:70:d5:3c:42:0a:7e:73:d5:d5:9f:
         f3:92:73:ae:3b:39:06:43:52:1f:72:61:29:6c:0e:71:20:e8:
         2f:13:fc:b3:b9:f0:0d:56:52:96:8f:40:eb:a4:a9:75:ee:b9:
         75:1f:d3:3c:4a:25:16:08:32:30:ce:0e:f6:bb:4b:b0:10:5c:
         1a:fe:e5:fc:f5:de:e9:a8:ef:27:23:48:c9:86:dd:c4:3d:15:
         c8:a3:cb:9d:47:13:d5:6f:cc:8f:10:dd:96:11:bb:fb:07:e5:
         42:77:b6:c1:cb:58:e8:9f:78:ff:2b:45:49:34:01:b4:c1:90:
         b4:3a:4f:f1:cf:a4:45:b3:5f:9b:33:6e:ac:5d:05:cc:4b:e9:
         43:29:7b:73:71:3a:15:14:22:0e:ce:bd:90:26:14:6a:5a:ac:
         a4:7b:97:6c:31:c6:71:0d:0e:ef:18:7e:65:85:9a:c9:05:c8:
         df:29:38:0b:3b:6b:87:42:8e:24:c2:a6:d5:84:43:11:f1:81:
         b9:fd:0f:ca:0d:13:5e:43:87:97:a6:24:1e:ca:23:1e:ad:a2:
         85:9f:f4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:46:49 2026 by rpki-client