Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec8d6ec3-af5f-4769-b968-c5d2a0e2a7aa.roa
File:                     ec8d6ec3-af5f-4769-b968-c5d2a0e2a7aa.roa (raw, json)
Hash identifier:          O5U+OXC4OgXnI6ZfTsZKbTOs4Jdz+tCAiB9hlFxsezI=
Subject key identifier:   29:4E:F1:7C:8C:EB:46:EB:25:79:9B:13:FE:17:03:6A:C7:E2:1F:89
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0CADBF90600BCAA5742F26533C7848931C467A34
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec8d6ec3-af5f-4769-b968-c5d2a0e2a7aa.roa
Signing time:             Fri 15 May 2026 02:01:25 +0000
ROA not before:           Fri 15 May 2026 02:01:25 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        107.20.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ad:bf:90:60:0b:ca:a5:74:2f:26:53:3c:78:48:93:1c:46:7a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 02:01:25 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=6015af67909f8724f6f1e7368c46c404730b3b99686ef114fa7f1fc06508861a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:01:c5:27:c8:b0:19:47:69:83:dd:a1:75:88:
                    64:96:fe:49:5e:fd:0b:89:73:47:be:ee:5e:31:78:
                    56:54:a0:72:97:d4:30:89:83:ad:d7:ad:68:66:d1:
                    54:95:25:d9:0a:e9:bf:a2:a6:ec:5e:26:f8:4a:5b:
                    23:94:60:c4:99:6e:14:9d:31:0d:14:bc:d8:f1:03:
                    ed:58:98:79:93:53:4f:e8:9e:98:8e:2a:ba:1e:cf:
                    3f:dd:9c:3c:cf:ce:a9:fe:7b:c0:94:dd:ec:71:5a:
                    c9:22:67:51:9f:22:ce:10:49:b0:bf:41:a1:2a:88:
                    2a:7e:d5:ff:50:85:2d:a6:97:52:67:ed:88:5f:bc:
                    de:48:0a:e1:67:e0:57:e4:1b:0e:f0:0e:f9:b0:38:
                    45:03:ca:3a:e1:58:49:20:cf:2b:1b:31:f6:8f:71:
                    9e:90:23:74:b6:c8:50:b2:62:f3:d4:d8:fc:2c:46:
                    f0:90:46:f3:5d:3e:08:0e:cb:de:26:d3:96:f3:5c:
                    e0:ba:a6:26:af:79:dd:c3:fb:97:78:a5:41:a8:2c:
                    7f:79:f2:d4:d9:e3:29:d5:34:2d:d9:33:dd:3f:70:
                    cd:5c:6c:34:ec:18:97:da:07:34:ca:ac:86:03:71:
                    6e:99:04:71:69:c0:7e:96:44:b0:5d:ec:2e:5a:df:
                    f7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4E:F1:7C:8C:EB:46:EB:25:79:9B:13:FE:17:03:6A:C7:E2:1F:89
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec8d6ec3-af5f-4769-b968-c5d2a0e2a7aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.20.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:37:42:1a:71:17:63:cd:7e:c9:51:7f:af:21:ad:4f:7c:d0:
         7b:56:5a:b5:f3:45:59:00:94:50:b0:b0:c8:bb:a5:27:9c:4d:
         d9:8d:4c:ca:24:84:c6:6a:9a:87:8c:31:01:15:d4:8f:da:b2:
         88:63:de:a9:83:10:ec:ac:06:41:21:c6:e4:b9:b9:4e:8e:61:
         eb:c6:35:47:a7:0d:67:0f:27:8b:48:0c:c9:a8:e0:65:a3:dc:
         af:00:d4:fe:65:78:42:d8:fd:7b:18:d3:e5:c6:6a:00:9a:fe:
         34:21:01:14:0d:5b:f2:f8:13:5b:a4:e4:f1:79:39:30:05:3c:
         6d:d2:d6:53:30:43:0a:06:a2:c0:43:3b:ef:55:f0:f8:b5:b3:
         23:84:5c:02:97:60:52:88:98:c8:39:38:b8:6e:5e:1a:de:66:
         f3:37:cb:f7:bd:9d:13:b7:1b:e2:61:8a:c0:ce:70:5f:4a:85:
         6e:9f:64:f3:5e:9a:c1:45:98:e2:3b:0c:1e:06:57:c8:de:5d:
         35:a2:59:49:2d:32:f6:4a:82:b2:20:21:6d:bc:a9:94:3b:ce:
         d2:35:2b:de:e1:bf:2e:fc:20:1c:f7:b1:b0:7c:7d:cf:3a:7e:
         ca:38:7b:15:ac:f8:8c:61:d7:8d:76:30:e6:4c:50:d7:a9:7a:
         5e:a8:ab:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:04:34 2026 by rpki-client