Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a67d5669-e80c-43a7-a126-f5c26a975a87.roa
File:                     a67d5669-e80c-43a7-a126-f5c26a975a87.roa (raw, json)
Hash identifier:          FyovlaHDoQPcDUNcQ8IBiq87DfUmfPIcqsGUJhpRFD8=
Subject key identifier:   7D:12:E1:FD:35:DA:DD:0B:2F:81:A2:B5:7D:48:B6:1E:BA:B5:E3:AB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       38131591E46CC6C5674861E339A7BB5929FB8D7B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a67d5669-e80c-43a7-a126-f5c26a975a87.roa
Signing time:             Fri 15 May 2026 01:11:56 +0000
ROA not before:           Fri 15 May 2026 01:11:56 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        107.22.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:13:15:91:e4:6c:c6:c5:67:48:61:e3:39:a7:bb:59:29:fb:8d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 01:11:56 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=f4feb824b99b0a22549b9985922c6a0e87491e3b815513cf171305a98d32d724, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2d:a1:fb:12:70:0e:57:cf:82:a8:09:f1:e1:
                    18:61:67:8b:60:b4:18:50:f5:2d:21:ce:44:65:3e:
                    49:46:f6:cc:6c:ac:55:75:ba:ca:1b:63:76:5a:5e:
                    62:b5:fb:23:c2:0a:26:4e:fd:c1:35:ea:09:68:08:
                    ff:8b:32:08:92:4a:aa:85:2b:a3:f5:bd:1c:e1:74:
                    f3:06:4c:65:db:d6:76:1f:b2:2c:99:8b:b1:d0:d4:
                    e7:3c:7f:5b:64:dc:36:e9:45:0b:8e:93:43:a3:2d:
                    36:a4:aa:a5:78:08:43:3e:be:be:32:f1:be:83:ee:
                    28:e1:04:17:ce:43:ab:45:5a:7a:3f:c9:89:c0:fa:
                    9a:24:c2:8a:16:9a:66:74:12:88:9c:a4:05:aa:3e:
                    be:f3:b6:a1:41:73:48:91:87:05:e3:3d:66:44:f7:
                    f1:75:ed:de:e9:4a:e1:84:a4:7d:f7:d8:5f:4a:6b:
                    f7:a9:67:c0:bd:69:b3:4c:f7:8a:fa:63:b2:82:52:
                    13:70:bd:fa:ea:26:a5:8c:a2:ec:12:14:f9:28:50:
                    80:62:97:fe:9d:1b:36:67:8b:40:de:3b:9b:14:b2:
                    4c:03:09:f1:21:57:3d:e2:19:f9:d5:9f:97:41:95:
                    13:98:bd:4a:04:68:e4:5f:b2:33:74:6b:26:ef:cb:
                    3d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:12:E1:FD:35:DA:DD:0B:2F:81:A2:B5:7D:48:B6:1E:BA:B5:E3:AB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a67d5669-e80c-43a7-a126-f5c26a975a87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.22.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6d:e7:ba:ba:e5:d0:89:15:02:33:38:e6:a6:1a:c6:27:26:55:
         7c:06:05:33:6f:a7:12:29:6c:23:ad:74:a6:8a:94:0f:c7:6a:
         78:66:06:85:3d:6f:33:d3:c6:f8:2d:50:91:60:45:fb:b1:35:
         3e:ff:28:42:fd:7a:78:d4:c9:9f:5d:0d:51:12:b8:66:37:95:
         15:c2:1f:04:36:e6:33:15:45:eb:c1:ba:da:47:ea:43:8a:8b:
         68:2f:22:6b:41:b7:7d:fa:98:da:3d:75:dd:c1:bb:9c:0b:fe:
         44:79:15:d6:3e:22:14:a5:c8:0b:54:d9:56:d7:0b:00:5e:64:
         a9:d7:6d:84:28:c5:bb:3c:fd:27:fa:f7:ef:36:2b:a6:03:5a:
         64:c4:61:a6:5e:05:6b:50:61:52:ac:67:0d:80:ee:c3:4c:79:
         45:e7:57:2e:a6:c5:7b:44:b2:58:07:f6:d6:30:4f:69:52:b6:
         0e:cf:49:96:d5:b7:73:5c:d0:ac:a6:a6:6b:e8:01:33:74:77:
         58:8a:98:41:4b:fe:2c:df:83:18:32:a9:c9:9a:a1:b5:aa:a9:
         cf:f6:4e:0a:ea:8a:e0:a1:42:18:04:30:45:b8:d3:a9:b1:fb:
         0b:b4:ee:b9:d4:f8:98:d0:36:74:dd:10:fe:89:39:b6:e3:e1:
         1b:cb:59:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:19:47 2026 by rpki-client