Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b19b2de2-7aef-4fdc-ac3c-e484ea2b0d40.roa
File:                     b19b2de2-7aef-4fdc-ac3c-e484ea2b0d40.roa (raw, json)
Hash identifier:          kXLFokKQGgEk8LS/KHndG6XN7kBy0uTTYmx6bKZm5VQ=
Subject key identifier:   26:04:5B:4B:57:25:FD:9D:59:2D:41:34:F6:17:74:57:A2:39:16:13
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       45A3FEC969C70D03B0E356D2F9D3279148B7FD0B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b19b2de2-7aef-4fdc-ac3c-e484ea2b0d40.roa
Signing time:             Sat 16 May 2026 02:11:23 +0000
ROA not before:           Sat 16 May 2026 02:11:23 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     7224
IP address blocks:        1.178.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a3:fe:c9:69:c7:0d:03:b0:e3:56:d2:f9:d3:27:91:48:b7:fd:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 02:11:23 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=041e8053b1e7558fdb0cbb3601f89b4c3cf2c302fbf303374e59da242edfae47, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f1:66:82:42:1f:6d:c1:f5:80:31:5c:a0:5d:
                    82:a4:53:39:58:d2:ec:b5:ce:8a:a0:b1:c8:0b:e1:
                    6c:47:33:57:6a:7d:47:c5:7a:ab:cf:65:a5:23:0b:
                    ee:bd:0d:53:2c:8e:ba:4c:98:20:1e:5b:c1:88:99:
                    98:7f:35:29:19:be:9f:19:ab:23:f3:72:56:a7:de:
                    81:d8:d9:66:09:af:fc:a2:2b:a6:64:a0:ee:c6:79:
                    fb:8b:aa:d9:74:4b:e1:ff:56:93:57:2f:04:16:c2:
                    40:57:38:4a:50:90:bd:29:a6:43:cd:8c:01:ab:48:
                    20:4a:5f:83:e8:fc:a7:4f:9b:ed:f9:65:c3:56:8c:
                    65:ae:b3:e1:0d:1f:67:bd:48:62:2e:c5:37:7c:48:
                    02:e8:1a:a8:a0:a8:57:fd:73:9b:a3:1e:e3:2f:c6:
                    36:54:4a:49:6e:fa:fc:69:9d:b4:f8:56:35:a6:37:
                    04:aa:e4:5b:27:f5:df:8e:1f:73:4a:c2:fa:87:8a:
                    19:96:99:97:75:9c:47:f4:51:ab:09:85:2b:63:83:
                    0d:a0:e2:aa:65:ca:6a:a2:34:d6:a2:f1:2d:9e:dd:
                    e1:52:e1:19:8c:01:62:16:69:1a:fc:32:82:56:02:
                    c3:0d:92:c1:1d:c9:ce:be:dd:b2:74:dc:2b:57:bc:
                    02:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:04:5B:4B:57:25:FD:9D:59:2D:41:34:F6:17:74:57:A2:39:16:13
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b19b2de2-7aef-4fdc-ac3c-e484ea2b0d40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.178.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:1c:bc:34:82:50:58:13:81:e3:1f:19:69:be:d5:79:8f:e2:
         7b:15:9b:0d:70:87:bf:82:50:95:7c:a5:87:5d:4a:07:11:17:
         59:0b:3b:04:d2:c5:e6:12:32:ff:c6:24:19:17:7c:c6:76:25:
         18:e7:78:e3:07:03:c3:f0:19:74:22:eb:81:a6:0c:fd:52:f6:
         1e:52:7b:b2:a9:b3:fa:fa:1f:a2:78:c9:b4:1b:ee:c4:11:1c:
         a8:7f:c3:58:52:8b:b8:4f:fd:7a:ea:73:70:23:7a:d7:3a:21:
         38:21:4d:fd:a2:e6:65:26:21:8b:69:79:a3:88:3b:b9:ab:98:
         b9:9e:77:b2:14:34:ce:49:b9:aa:b2:b3:01:d0:8a:3c:50:5f:
         e6:ea:c2:05:89:a0:5f:88:9f:d2:bf:85:5e:61:c6:5a:5b:13:
         45:77:8f:21:70:76:5d:6c:e8:9c:72:30:44:b9:87:01:36:6a:
         ab:8a:fd:8e:80:6e:33:11:07:68:45:9e:34:7a:5a:df:77:55:
         96:ae:2c:7f:44:33:a1:03:34:d2:73:61:f3:4c:2d:96:ad:16:
         77:4a:41:e8:75:10:a2:2b:71:7f:f3:19:7f:1b:41:51:f2:69:
         ff:8e:d5:fc:57:ec:48:da:77:11:87:ea:6f:4b:db:41:de:e3:
         51:57:77:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:01:30 2026 by rpki-client