Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4bf070f-56bb-49f0-b05e-fa1524276572.roa
File:                     f4bf070f-56bb-49f0-b05e-fa1524276572.roa (raw, json)
Hash identifier:          0NVSJhXEDLpvp4hSX6YwI3mkwi5z0yaOYtkXO1h2oJE=
Subject key identifier:   77:1E:19:22:E6:19:9D:3A:1F:8E:6E:81:5A:2C:8B:A6:78:8F:8F:FF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       12E860DFDC5B221863407DE2ECCE5EE5C2B3C172
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4bf070f-56bb-49f0-b05e-fa1524276572.roa
Signing time:             Sun 17 May 2026 00:00:39 +0000
ROA not before:           Sun 17 May 2026 00:00:39 +0000
ROA not after:            Sat 15 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        75.2.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e8:60:df:dc:5b:22:18:63:40:7d:e2:ec:ce:5e:e5:c2:b3:c1:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 17 00:00:39 2026 GMT
            Not After : Aug 15 23:59:59 2026 GMT
        Subject: serialNumber=c209e20027414bd45bb3acda968a002e4f3cebd6596244190677497c82cd3239, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d9:fd:9f:32:75:69:fd:ad:89:0d:67:ba:08:
                    42:0b:11:fe:84:d4:e3:ee:91:8f:9c:2c:af:99:0a:
                    53:d4:c4:2a:8e:49:1b:f3:c7:9f:a4:c6:e9:73:c9:
                    31:61:d0:5d:55:36:df:7b:15:6e:21:24:25:11:5c:
                    28:5e:f7:d8:ee:46:41:b9:ec:43:0f:bc:24:3b:c0:
                    8a:3b:1e:e2:38:18:ff:a0:98:43:f6:a7:07:31:3a:
                    05:fe:14:e6:e2:96:2c:9f:80:bc:4e:eb:9a:61:c1:
                    a2:e7:2e:05:bd:9f:84:1e:82:40:ca:f6:53:eb:97:
                    9b:0a:4e:8e:b6:ce:11:b6:41:71:77:58:c1:87:68:
                    96:c6:ff:d3:c5:3f:54:77:62:8b:9e:ea:18:e6:57:
                    0e:19:8d:7b:9c:9b:dd:15:e5:ef:85:2a:ea:5c:38:
                    80:f6:ae:8e:78:d1:bb:67:87:d2:7a:73:ac:64:29:
                    46:f2:b0:03:f4:a7:6d:7f:98:39:fa:2c:26:af:a3:
                    3b:4d:fb:64:e8:b5:60:48:26:eb:be:23:2e:6e:8c:
                    d3:d5:1b:8e:bc:28:52:a2:a5:c3:a1:98:41:86:7e:
                    5e:44:9e:df:51:d7:ea:79:fc:f6:b8:ed:38:2a:d0:
                    41:d2:b2:b8:a0:31:9c:86:9e:df:00:22:fe:62:b0:
                    f8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1E:19:22:E6:19:9D:3A:1F:8E:6E:81:5A:2C:8B:A6:78:8F:8F:FF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4bf070f-56bb-49f0-b05e-fa1524276572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.2.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         34:31:36:a2:c0:88:c6:8e:30:59:15:42:ae:17:95:12:9a:3f:
         ac:70:39:f7:5f:8e:1c:e6:cf:a2:4f:d1:c9:72:7e:d1:0b:0c:
         b8:12:3f:17:a5:67:b9:2f:56:8f:b3:fb:55:9e:bf:54:67:fd:
         68:75:aa:41:5b:44:1f:20:a8:a7:1a:1f:d8:60:47:6e:02:cc:
         4c:dd:16:6d:d4:30:95:cc:4b:32:a0:bb:f2:fd:30:24:cc:3a:
         bd:01:c1:55:37:90:75:25:ab:81:1b:75:0c:76:cb:dc:82:dd:
         d0:d6:6f:b6:ca:c0:eb:fe:55:07:6a:c3:dd:dc:72:c1:b3:b9:
         d3:49:e3:87:d9:ac:e1:33:50:6f:b1:e3:cf:a5:66:01:08:ea:
         7f:c9:75:94:c8:c2:07:4f:dc:2c:6c:5e:98:cd:8d:1f:29:12:
         8a:9e:0a:82:8f:f1:50:14:c2:2e:54:77:82:2b:4d:47:6e:0b:
         15:09:54:23:02:79:91:2e:e3:25:83:74:ff:53:f5:cd:46:7b:
         4e:69:ae:a3:07:cd:bd:50:9c:38:3a:88:69:c3:b7:9b:c3:e1:
         63:ff:8c:f4:b0:c0:fa:63:80:fd:c4:83:98:c6:a0:42:f8:32:
         54:46:31:63:ae:4c:5f:f8:75:f8:a3:c4:e2:0f:e0:ac:dc:fc:
         a6:66:62:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:48:26 2026 by rpki-client