Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b51cd2ff-3c8f-4000-a517-bc351681806e.roa
File:                     b51cd2ff-3c8f-4000-a517-bc351681806e.roa (raw, json)
Hash identifier:          q8o39yOE1EZkedUho+G2OSB9imc2mrcOS5pgEGHvr7E=
Subject key identifier:   D1:22:A6:0E:DD:34:62:49:4C:38:51:12:A4:3A:97:61:9A:87:18:60
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6AEC96EA3AD83C18BB5064B2148F6AE29FFA5E18
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b51cd2ff-3c8f-4000-a517-bc351681806e.roa
Signing time:             Sun 17 May 2026 00:31:14 +0000
ROA not before:           Sun 17 May 2026 00:31:14 +0000
ROA not after:            Sat 15 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        75.101.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ec:96:ea:3a:d8:3c:18:bb:50:64:b2:14:8f:6a:e2:9f:fa:5e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 17 00:31:14 2026 GMT
            Not After : Aug 15 23:59:59 2026 GMT
        Subject: serialNumber=8e0b7835cb2d984bb31257d39d14ef862ff813be4f03fefe7568fa12da531832, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2e:f2:a1:c4:d7:7c:58:70:b6:7c:8c:3a:9e:
                    2b:a1:cc:a5:ec:e4:b5:ce:96:7c:36:23:eb:07:13:
                    ca:71:9c:25:59:e4:6e:66:24:83:d6:97:71:92:a2:
                    39:26:cc:17:66:e3:96:d5:1c:a1:8c:1c:28:66:91:
                    fa:1f:e8:80:4d:e2:8a:70:0b:15:79:ad:87:75:8f:
                    c6:be:5c:45:5b:ef:d2:79:28:7d:32:1f:3f:41:02:
                    f2:4c:e8:07:a6:01:ac:bc:cc:42:27:bd:a1:45:4b:
                    c3:ad:8c:c7:0a:ff:e1:ea:98:3a:3a:30:f9:90:a3:
                    24:cc:59:45:33:82:84:10:22:a9:30:02:77:c7:8a:
                    ab:8e:4f:de:53:cd:2b:22:b0:21:39:98:11:fa:12:
                    ec:1c:e4:2a:68:7c:0c:21:3a:4c:a9:c0:e7:c4:e9:
                    4c:d6:83:15:6e:5d:e5:cd:06:34:43:d1:4b:89:82:
                    79:f0:e1:cc:4a:81:1a:15:8d:9d:fb:32:7a:c2:70:
                    37:da:7b:70:21:4f:cc:77:43:8d:6c:ba:3f:bb:24:
                    79:b7:07:1c:cb:c2:59:ac:b4:f2:91:2f:f3:69:8b:
                    3a:08:eb:37:27:51:8d:82:34:71:c9:0f:5a:78:d1:
                    0c:af:2e:80:22:12:d7:d7:67:dd:5d:ff:db:0e:cc:
                    fc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:22:A6:0E:DD:34:62:49:4C:38:51:12:A4:3A:97:61:9A:87:18:60
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b51cd2ff-3c8f-4000-a517-bc351681806e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.101.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         72:77:39:2b:79:ab:fa:2d:d3:f8:18:6a:1d:2c:94:c5:95:d0:
         6a:fd:c0:d8:af:4e:f4:b3:ff:8f:ba:69:ae:31:ab:e1:d6:9b:
         81:32:07:78:e0:d1:7d:7f:cd:e2:6e:c1:54:01:9d:8e:2f:45:
         11:38:ee:67:35:f2:80:a7:4f:04:9a:d8:9c:47:5c:bc:8b:17:
         28:b2:8d:6d:f6:46:22:d5:2b:94:c7:f6:ed:85:f2:63:2d:f1:
         ba:1f:2d:06:f3:25:ec:29:26:e9:a7:bb:29:d3:95:cb:cc:cb:
         ab:fd:51:c4:3b:b5:6c:ec:09:0e:39:9a:ad:6a:52:ed:54:3f:
         16:ed:8c:e1:c8:4c:d5:ba:ee:64:35:91:e9:25:78:17:e0:dc:
         50:27:96:24:5a:93:b3:25:47:c1:73:bd:e7:a1:9c:05:4d:e5:
         34:6f:62:f6:36:ab:4f:0e:7e:5f:02:13:30:2d:38:e4:74:77:
         63:19:ab:4c:1e:da:6e:f3:ce:54:e9:7e:58:3c:dc:ab:fd:e9:
         43:f0:a8:cf:5b:fe:fb:09:3c:3a:b3:5f:ec:32:66:a6:75:02:
         ef:b7:81:42:46:8e:de:3d:c8:e3:ba:30:87:77:6c:6a:7c:f7:
         ee:8a:c2:7f:ef:c6:55:10:60:c2:20:2c:cf:e2:b5:51:bf:02:
         35:fd:85:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:48:48 2026 by rpki-client