Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e009a6c2-05fb-4319-9547-3834f05d09be.roa
File:                     e009a6c2-05fb-4319-9547-3834f05d09be.roa (raw, json)
Hash identifier:          N6Tirgom5AJLs4QFFmuWS261ICvboRtBWqexcOpovo4=
Subject key identifier:   73:68:BC:7E:7B:D1:AA:78:64:8A:66:20:4F:CA:B8:95:A2:6D:7F:CE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4020A5F9E9CAE22EDDFBA653764CD71E62464CCD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e009a6c2-05fb-4319-9547-3834f05d09be.roa
Signing time:             Mon 04 May 2026 01:11:16 +0000
ROA not before:           Mon 04 May 2026 01:11:16 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        93.77.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:20:a5:f9:e9:ca:e2:2e:dd:fb:a6:53:76:4c:d7:1e:62:46:4c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  4 01:11:16 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=e8edcfe9b439f9e6ca1ba97d755bf9a3a0f2a06fdf2f6b568f26d42c009b1ece, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:76:c2:c8:93:72:6c:31:6b:4e:0b:89:22:b3:
                    0f:4d:e8:e5:53:7e:22:ba:71:2c:f9:d3:d1:9f:2a:
                    85:80:9b:96:d6:84:67:3c:2a:54:a5:ea:7f:c9:6f:
                    b6:83:2e:a2:26:43:30:3e:45:59:31:a4:fd:ec:40:
                    c5:53:be:05:fb:f1:b7:25:c1:cd:38:62:4a:76:d1:
                    3c:fe:2f:2f:1e:a6:48:ff:6f:3d:63:ce:b6:73:d6:
                    a2:b4:63:fc:ff:05:26:3c:03:dd:d2:bc:b4:00:b5:
                    ce:23:37:20:59:58:98:4a:d7:6c:2a:cc:53:03:75:
                    1a:7f:ad:4b:19:7b:97:c9:88:89:1f:d5:95:be:f7:
                    36:6d:f0:d5:48:39:2c:f2:09:38:72:c6:29:ea:d4:
                    24:e7:df:2f:96:90:f6:7d:b2:32:dd:86:7a:ab:08:
                    04:c0:ad:85:4a:51:e8:4f:9d:db:56:6c:b3:55:a9:
                    0d:6b:1e:58:55:f6:bd:c9:de:cc:cc:70:2e:de:eb:
                    a1:f5:1b:ff:e6:62:83:bf:2f:7d:34:a0:cb:85:ef:
                    3d:ac:90:76:7b:e1:5e:9d:d5:95:11:3b:4b:bb:40:
                    33:61:8b:03:f9:5b:c7:24:ef:62:f6:6e:64:41:b9:
                    b7:83:58:db:d8:e5:55:3a:27:74:09:d5:89:02:32:
                    33:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:68:BC:7E:7B:D1:AA:78:64:8A:66:20:4F:CA:B8:95:A2:6D:7F:CE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e009a6c2-05fb-4319-9547-3834f05d09be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.77.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:d3:ed:58:b3:32:4f:87:7b:8f:df:87:80:49:d0:53:db:8e:
         60:25:71:f2:ed:5c:14:2e:1e:c5:c8:ee:c4:64:47:c6:0c:e6:
         6b:38:9a:21:a9:f4:11:46:16:21:ed:e4:0b:b1:2c:2e:8a:c9:
         3f:66:35:15:f3:9a:d0:cc:c3:1a:f1:c0:d1:d5:9f:14:bb:35:
         84:09:2e:d1:1e:57:84:7f:33:16:50:b9:8b:77:6e:25:41:3a:
         62:bd:16:5f:d8:13:48:bc:75:23:41:fe:02:ae:28:52:f8:9a:
         3f:6d:35:e7:20:bc:0c:86:7d:b9:2f:5e:79:38:6d:4b:1b:09:
         88:85:7a:a2:00:ff:7e:e3:28:6b:14:3a:a2:38:5c:00:86:6c:
         25:ee:07:13:55:23:dc:1e:8a:98:c8:f6:3d:21:4d:95:de:aa:
         d8:a9:a3:50:10:b5:aa:57:bb:8b:96:c8:79:b0:cc:2d:6b:83:
         41:5e:9f:da:55:fd:bd:6e:2f:dd:e4:08:ee:d8:2c:a4:64:9e:
         ef:0d:ea:ae:9d:0e:95:d4:9c:d5:43:90:a1:b1:3c:ae:d9:54:
         c9:ea:bb:93:5b:6d:6c:2c:e2:57:ee:ac:4d:54:33:52:4a:d8:
         af:21:35:bf:45:c7:68:f2:5b:26:5e:73:79:73:7c:96:29:b5:
         c0:c9:94:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:19:22 2026 by rpki-client