Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b19b2de2-7aef-4fdc-ac3c-e484ea2b0d40.roa
File:                     b19b2de2-7aef-4fdc-ac3c-e484ea2b0d40.roa (raw, json)
Hash identifier:          A8YmDmULoXxMRbp/9C6EXrwKzEKsfF12guJvc0/czRY=
Subject key identifier:   1C:A1:D6:AC:49:9B:37:A8:CE:8B:51:97:3F:54:32:2C:35:E1:79:AC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0111C1EBDC59A0B2E4F7785FCE07A84CECDE544B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b19b2de2-7aef-4fdc-ac3c-e484ea2b0d40.roa
Signing time:             Tue 31 Mar 2026 16:36:55 +0000
ROA not before:           Tue 31 Mar 2026 16:36:55 +0000
ROA not after:            Mon 29 Jun 2026 23:59:59 +0000
asID:                     7224
IP address blocks:        1.178.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:11:c1:eb:dc:59:a0:b2:e4:f7:78:5f:ce:07:a8:4c:ec:de:54:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 31 16:36:55 2026 GMT
            Not After : Jun 29 23:59:59 2026 GMT
        Subject: serialNumber=4510f77e797a0e574316d1c8994b1b9294764ef73da91204cb82221ef5505df1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:be:89:94:4f:c9:38:a2:51:b6:05:ff:8b:c4:
                    3c:92:ce:cf:0d:1b:e3:5e:d1:6a:0e:64:11:01:fe:
                    5b:4e:d6:63:fc:24:72:2d:3c:c3:11:86:b0:df:cd:
                    66:7c:15:38:5d:36:6b:2e:8b:41:e7:4a:f3:38:16:
                    9b:c7:4c:5f:dc:5c:9c:2e:fe:01:4a:2b:21:d9:66:
                    3d:fd:99:f1:b5:a2:41:a5:ca:86:c0:f3:f3:a4:60:
                    cd:65:c3:b2:3a:c1:eb:aa:11:38:a7:97:81:a6:07:
                    61:18:8c:f8:a5:7f:74:ac:ea:c0:e6:2d:e7:55:92:
                    f6:e2:b1:de:6c:51:5f:b3:7a:01:f8:14:3d:52:4a:
                    95:3f:0c:53:34:65:c3:a1:50:32:91:8d:a3:c5:8a:
                    28:eb:23:f0:54:17:61:ee:2a:bd:f0:5c:a6:2d:de:
                    be:4f:2e:e0:8a:97:82:6f:c6:2f:02:68:7c:0e:da:
                    7a:43:d6:17:14:78:63:6c:ad:83:e9:17:f4:00:fd:
                    21:c3:26:ad:d2:b4:c2:53:c6:5c:ba:78:5e:de:d1:
                    5f:72:29:25:54:d4:23:a2:34:db:37:a0:00:40:d5:
                    7d:a3:d4:9f:3c:d7:58:97:d9:84:c0:e4:ae:f7:78:
                    39:4c:16:62:24:30:12:f2:88:c5:fa:a7:96:b0:3b:
                    2a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A1:D6:AC:49:9B:37:A8:CE:8B:51:97:3F:54:32:2C:35:E1:79:AC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b19b2de2-7aef-4fdc-ac3c-e484ea2b0d40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.178.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:a2:96:d3:50:4e:6b:b6:2c:b3:05:a9:13:84:1a:84:ba:3e:
         af:32:4c:50:9f:25:2a:36:71:60:a2:dd:af:c2:fd:6d:71:51:
         54:89:55:b1:00:15:66:1d:09:c7:6e:47:ea:84:74:e8:00:9d:
         9c:86:0d:41:c0:eb:86:c1:59:4e:c4:4d:4d:77:8f:b1:84:02:
         df:56:e8:49:44:88:8c:17:e2:53:cf:7d:5e:5b:59:dd:7f:b9:
         37:6b:ad:9e:90:57:00:5d:f7:fb:76:b9:c9:11:08:2c:f5:77:
         f2:1b:09:e4:42:32:44:d8:2b:5f:6b:64:2f:e8:4d:b0:05:e0:
         e1:fa:8e:60:6b:eb:ed:c4:5d:c8:18:96:df:3b:bf:eb:80:a4:
         5e:f2:0e:0f:74:c1:f7:61:a9:a1:82:d4:66:d1:60:83:3e:27:
         a3:fb:5c:fb:6f:07:60:e9:cc:3b:ce:b5:f3:17:f9:9c:c0:0b:
         ff:b6:44:9d:ac:b5:ad:99:af:89:81:b1:42:54:44:f9:8f:c6:
         78:84:f6:d7:19:78:71:a6:04:c9:ea:9c:08:2d:a2:da:8f:3a:
         75:82:1d:22:54:15:1c:0f:90:4f:1d:24:e4:98:9a:08:b8:d0:
         9f:79:ca:5e:7b:ec:50:7a:26:74:fe:73:48:f6:ed:8d:b0:fb:
         f6:85:e1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:06 2026 by rpki-client