Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b4fab25-7784-4b8c-ae9b-bab51faa4834.roa
File:                     7b4fab25-7784-4b8c-ae9b-bab51faa4834.roa (raw, json)
Hash identifier:          lDo+SO/4cjrI30xOA+DLlROnX5tMx16uf3S3Qc/LMVA=
Subject key identifier:   85:BC:C2:DF:99:B2:71:DB:AD:6D:C5:95:9E:85:5A:75:0F:F9:5F:70
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5DE306F149232EAC47D735DDA4501B2ACFA78B30
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b4fab25-7784-4b8c-ae9b-bab51faa4834.roa
Signing time:             Mon 27 Jul 2026 00:41:21 +0000
ROA not before:           Mon 27 Jul 2026 00:41:21 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        93.77.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e3:06:f1:49:23:2e:ac:47:d7:35:dd:a4:50:1b:2a:cf:a7:8b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 27 00:41:21 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=0cf8b722a1e4011c826e6e9867eb952a6bc152671fcbeaaf3d60803cce11db29, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cb:8e:27:8a:cb:b9:3c:1a:45:de:d3:29:9f:
                    32:e4:a4:fa:00:ea:18:9e:aa:52:36:30:cd:13:e5:
                    9e:e4:b4:22:b4:69:41:33:b7:b7:15:8f:a1:ca:4f:
                    65:4a:8f:02:34:12:84:da:cf:a2:17:02:f4:62:81:
                    c9:95:c1:86:01:fa:34:f5:89:67:6b:28:61:1f:3c:
                    f5:65:f8:61:38:dc:84:11:4c:de:1c:e0:ee:b2:bf:
                    a5:a8:54:1d:40:2e:9c:fb:6e:37:20:42:07:68:fe:
                    da:c9:b8:76:0e:c3:23:47:07:b6:ee:1b:0f:d1:46:
                    06:43:5b:74:8a:e0:b3:4a:81:64:85:42:d8:48:ad:
                    95:ca:04:f3:34:cd:57:94:82:f7:4c:53:fe:52:d6:
                    1d:9c:26:7d:e2:98:51:c7:78:d4:0d:ac:0f:c1:fa:
                    6b:8b:2e:1f:ca:7b:e1:4a:55:1a:1b:e7:ff:89:dc:
                    ed:14:8d:31:76:65:f5:ef:d7:5c:b6:8d:dd:5f:a5:
                    77:08:57:d6:07:3a:95:e5:03:d4:79:92:29:52:91:
                    8e:85:5e:0d:f2:04:89:11:71:55:e9:ac:85:f0:5f:
                    a7:46:03:4d:e5:7d:be:bc:99:db:9c:c1:ff:af:b0:
                    36:fa:96:b3:66:3e:77:dc:26:27:19:98:3d:96:f7:
                    56:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BC:C2:DF:99:B2:71:DB:AD:6D:C5:95:9E:85:5A:75:0F:F9:5F:70
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b4fab25-7784-4b8c-ae9b-bab51faa4834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.77.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6e:b7:63:b9:4f:52:64:1e:96:97:d5:0b:10:3d:be:12:5a:08:
         59:49:09:b6:99:31:15:82:0d:68:7d:f4:a6:d5:9b:49:69:9b:
         d2:40:96:f4:c0:60:f0:ff:85:4f:46:7c:fd:f8:12:08:a1:16:
         97:a5:08:11:1d:8a:4b:03:e5:c8:c3:99:71:db:49:39:fe:2f:
         82:fe:d2:cb:a9:b9:ca:e8:01:55:5c:3c:1b:13:d4:7e:16:bb:
         aa:ce:93:b7:3a:15:10:89:7a:f6:80:8a:1f:08:81:e1:79:16:
         5f:6d:09:37:41:dc:89:e9:d1:14:6f:da:e3:34:4e:79:29:f6:
         0a:bc:39:d0:9c:3f:ad:2a:dd:5b:05:ce:d5:c6:28:66:05:b0:
         0b:5b:e5:07:2d:46:7d:ab:12:24:3c:b1:b2:77:c3:19:83:d9:
         cd:7c:73:2a:74:16:59:e1:b1:34:d9:1b:40:27:3e:27:b4:3d:
         21:69:cc:66:7b:ac:f4:f7:0a:c6:36:3c:1d:5b:0c:74:7a:6b:
         7f:ec:92:b2:83:8c:92:ed:7f:89:25:21:b7:2f:fa:d7:a5:03:
         fd:40:13:29:04:46:b9:00:8c:e4:87:46:d8:8b:66:c0:d3:a7:
         b6:dc:5c:a1:b8:a8:1f:78:ea:00:2f:9a:95:7a:46:56:31:94:
         ac:a7:49:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:02:11 2026 by rpki-client