Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0677c68-3681-4e3c-b63a-e2dfdd5e0779.roa
File:                     e0677c68-3681-4e3c-b63a-e2dfdd5e0779.roa (raw, json)
Hash identifier:          eQKCRk1W6ezaeGQs8LcvZvV+2ZGZROjOabdZatl1xNE=
Subject key identifier:   79:46:48:7F:37:5A:06:2D:92:07:E6:59:DE:FF:56:39:71:09:B9:C8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E947CB9358BFAFA912D8D510EC8D52C6C4F98F6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0677c68-3681-4e3c-b63a-e2dfdd5e0779.roa
Signing time:             Fri 09 Oct 2026 01:11:12 +0000
ROA not before:           Fri 09 Oct 2026 01:11:12 +0000
ROA not after:            Thu 07 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        64.252.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:94:7c:b9:35:8b:fa:fa:91:2d:8d:51:0e:c8:d5:2c:6c:4f:98:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  9 01:11:12 2026 GMT
            Not After : Jan  7 23:59:59 2027 GMT
        Subject: serialNumber=d128786fd2581d7a0034d90ac0af2b2258a32ccae1d234f55db5dddd5ce25b18, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8e:47:d8:35:ff:2d:41:42:5b:ba:5f:9d:71:
                    36:7d:3a:8a:c9:b7:c5:11:40:f3:71:34:44:12:9b:
                    36:98:ee:ef:92:0a:31:ad:15:e5:69:2a:2c:3a:c1:
                    5a:c9:fe:d8:eb:32:ed:99:f8:b6:ef:2d:32:85:b1:
                    02:90:02:0c:9a:b5:ab:3a:1c:a6:bd:af:d5:59:5a:
                    0e:8a:d8:31:c3:04:9e:bd:52:e9:56:65:07:b3:79:
                    37:eb:61:7f:ad:bb:de:f2:bb:87:56:1d:fd:4e:f0:
                    f1:ce:64:be:e5:96:ec:b6:42:13:d7:2d:66:8f:cd:
                    fd:e3:ee:8b:f8:fa:6a:55:76:31:e3:24:10:9d:8f:
                    71:04:d7:79:d9:11:ce:b4:b0:99:32:33:54:db:5a:
                    2b:6d:24:27:75:9b:2a:a3:fe:ab:52:38:42:5d:2a:
                    50:d2:f7:bf:ff:9a:89:3b:57:12:6e:d3:a4:8e:45:
                    24:9f:9b:71:b9:ad:b6:29:c7:53:30:78:bb:b7:cc:
                    1c:58:ca:e2:5c:23:7d:37:c0:24:10:62:f4:20:61:
                    9b:cd:49:24:3c:92:3d:2c:4e:0d:47:df:c1:4c:7a:
                    5f:8d:61:11:95:45:98:33:8c:1f:b9:03:c9:3d:42:
                    65:72:b6:3c:cc:58:42:3f:b2:14:83:c5:75:b9:17:
                    99:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:46:48:7F:37:5A:06:2D:92:07:E6:59:DE:FF:56:39:71:09:B9:C8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0677c68-3681-4e3c-b63a-e2dfdd5e0779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:c8:15:35:ac:6d:ef:54:2e:a5:94:36:84:1a:07:38:87:7b:
         47:d7:6b:85:fe:1a:4f:ac:0f:a9:77:58:74:77:cd:23:0a:68:
         ee:e3:ed:29:ee:18:cc:5f:2b:d9:c7:97:1d:5f:e5:89:eb:b4:
         e8:65:56:36:2f:a2:e6:8f:bb:ed:d0:8e:09:81:6f:46:ec:da:
         15:87:aa:92:8f:26:4f:d4:2b:b5:2e:2d:65:5c:8f:70:98:3a:
         2e:65:d9:6b:66:d1:ad:1f:07:9d:ea:92:0f:a1:4a:39:89:4e:
         e3:ab:f2:38:9e:d9:49:4e:99:f1:89:46:b5:95:f7:bc:10:01:
         c8:46:19:7e:b6:a4:ea:d8:da:d9:c2:ca:ea:2c:41:66:ee:81:
         78:4d:26:00:74:d9:9e:6f:3c:46:8a:d1:45:14:e6:dd:ef:24:
         5b:8b:0a:a9:ec:c4:a8:b3:34:34:23:3c:84:c3:f8:0a:07:1e:
         09:cc:55:01:a7:5f:da:ba:a4:5c:8d:03:81:3e:18:87:d1:e4:
         db:ca:aa:ac:b4:24:f6:00:cf:92:49:5a:a0:f3:86:fc:66:25:
         ff:04:15:39:50:3e:0a:63:f7:9a:0c:99:cb:e9:63:be:04:fc:
         0d:3c:b6:30:42:9b:4d:b4:2f:dd:da:65:aa:97:4b:a6:e1:5c:
         6c:69:e8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:00:41 2026 by rpki-client