Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b2f3095-813c-4aa6-ad8f-5cfe7b34fd26.roa
File:                     6b2f3095-813c-4aa6-ad8f-5cfe7b34fd26.roa (raw, json)
Hash identifier:          NCZtcYjAGrIddsMsIJe24U9tFwgya0R/DUq9TfGp/eU=
Subject key identifier:   72:7A:F8:2B:55:62:F7:DD:50:24:C1:C4:69:FF:CF:56:67:B2:28:8A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       15F10F194FF4C815F5A074CC6B5612FC52C9F990
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b2f3095-813c-4aa6-ad8f-5cfe7b34fd26.roa
Signing time:             Mon 27 Jul 2026 00:31:59 +0000
ROA not before:           Mon 27 Jul 2026 00:31:59 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        78.12.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f1:0f:19:4f:f4:c8:15:f5:a0:74:cc:6b:56:12:fc:52:c9:f9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 27 00:31:59 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=e4430af130afd63508aa3ebc1a07ff008234aaaea0c54e70cc9fe48f74186652, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:0f:c1:7f:28:ee:95:7c:15:c9:a7:e3:1f:
                    04:6d:53:4f:13:bb:3b:d1:ae:2a:cb:6d:dc:65:b7:
                    9f:3f:23:5a:50:00:91:d0:35:0d:d9:51:de:4c:24:
                    1a:92:6b:c6:47:66:9a:07:73:72:3d:44:71:15:63:
                    72:b0:d8:86:bd:d4:f4:71:7d:3b:4e:02:33:be:41:
                    ab:f6:fa:e8:26:00:0a:77:62:dd:84:67:92:ab:f8:
                    79:d0:24:57:f5:d2:18:e3:66:6d:c8:d7:3f:c0:09:
                    06:3c:3f:7f:4e:ce:b2:e9:0b:bd:f5:da:b0:61:f2:
                    75:dd:3c:aa:6a:a7:66:60:12:e9:41:2c:32:00:73:
                    69:f0:75:b4:96:db:d2:c4:ea:99:09:b0:19:84:e1:
                    85:e4:33:4e:19:a8:82:28:3a:44:4d:f3:b1:d9:1a:
                    d3:8e:62:05:02:26:8d:ea:3e:39:48:bf:2a:66:4c:
                    5c:6b:67:07:8b:ea:c1:75:04:7a:ba:9a:78:d5:64:
                    b3:54:c7:b8:ac:29:e1:8c:e7:20:61:14:3c:98:55:
                    52:f8:e8:5a:11:5e:54:ca:cf:39:59:6c:ae:cf:2e:
                    16:81:36:57:e8:a3:e1:6b:30:58:aa:fd:2e:c7:e4:
                    81:00:8c:6e:6a:6b:36:6e:28:f8:b4:49:ff:a4:38:
                    44:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7A:F8:2B:55:62:F7:DD:50:24:C1:C4:69:FF:CF:56:67:B2:28:8A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b2f3095-813c-4aa6-ad8f-5cfe7b34fd26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.12.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:7f:e8:65:92:70:ac:87:01:f1:99:4a:55:aa:a5:87:e3:b0:
         0c:bc:dd:6f:43:31:4f:be:5b:6a:7d:31:6f:a5:f6:32:75:21:
         34:25:c6:0d:23:9b:10:7c:f8:fd:e8:a1:a6:3f:08:6d:ee:81:
         f0:b1:6c:3d:f3:fb:a0:a7:b3:2a:57:48:fc:e6:f7:78:a9:10:
         6b:f1:6a:c8:98:41:ad:4f:c8:df:3b:05:9b:48:bc:4f:4f:dc:
         17:d9:a8:ac:49:5b:6e:93:9d:1b:99:46:7e:e5:95:fc:06:37:
         67:c5:1f:57:07:18:7c:8a:14:6a:53:f8:e1:8f:cd:58:22:48:
         3b:1c:75:43:3e:88:b1:cc:84:7d:d6:4d:6c:65:2d:04:f1:28:
         3f:8d:32:b2:da:d1:0f:31:fa:34:87:60:fd:c9:64:58:ee:47:
         07:36:bf:17:76:6f:1b:90:5a:75:2c:31:83:da:cb:59:21:c3:
         15:e5:40:58:cd:dd:7c:6c:29:4c:30:c5:6c:1b:2d:00:ee:77:
         02:5d:64:c2:b0:34:ef:06:54:bd:83:53:6c:9f:97:c0:a4:60:
         35:67:cd:78:9a:62:0b:e6:f7:96:41:cd:05:71:0e:dd:f7:de:
         ff:33:93:39:4d:20:30:38:79:60:f9:21:f4:dc:d9:a3:25:7e:
         cb:87:85:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:24:08 2026 by rpki-client