Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2bca4de1-4bce-437f-8c8b-b4f93a68cd9f.roa
File:                     2bca4de1-4bce-437f-8c8b-b4f93a68cd9f.roa (raw, json)
Hash identifier:          7eQoFA3QLLc+VTboxexIrMztmu9SCfQvPLA3Zqrf4/s=
Subject key identifier:   85:BD:17:80:7B:F7:E6:88:2F:07:4C:A8:84:75:CC:4E:21:11:3B:47
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5468C3F17049850A9B7FE2B7281ACD84F27B1ECF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2bca4de1-4bce-437f-8c8b-b4f93a68cd9f.roa
Signing time:             Wed 20 May 2026 00:30:42 +0000
ROA not before:           Wed 20 May 2026 00:30:42 +0000
ROA not after:            Tue 18 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        204.246.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:68:c3:f1:70:49:85:0a:9b:7f:e2:b7:28:1a:cd:84:f2:7b:1e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May 20 00:30:42 2026 GMT
            Not After : Aug 18 23:59:59 2026 GMT
        Subject: serialNumber=16208676ab848a0776b9e025012cd0f3c6d8e9682fec478f613277512846372d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8e:c9:6e:36:b8:dc:19:34:dc:28:73:6b:3a:
                    24:c7:15:e7:dd:ba:3d:d4:83:dd:1f:ce:cc:01:27:
                    96:a7:4c:2b:1f:67:39:d1:7f:09:93:8a:48:03:af:
                    29:3f:a5:62:b4:e1:53:d2:32:6d:dd:71:01:9e:d2:
                    3f:29:d2:81:6a:14:bd:cf:da:72:02:9f:77:14:bf:
                    28:49:fe:4a:36:ef:af:07:85:23:54:61:2e:97:bd:
                    e6:09:76:ef:40:a9:6d:24:44:02:04:66:62:1f:52:
                    23:16:a9:9a:dc:d5:d3:6a:f2:30:c4:c0:cd:08:82:
                    62:81:98:0f:4c:16:8d:06:f1:14:07:3b:ce:90:21:
                    ac:09:de:58:36:ea:43:19:15:fa:e5:11:33:f4:06:
                    51:4b:c9:07:58:1b:c9:a7:af:5e:1b:c1:5f:09:c8:
                    7d:82:50:d9:fd:c4:ce:bd:23:20:38:4a:55:3e:ab:
                    49:be:ef:ff:df:a5:1b:b5:10:da:5b:f6:bf:3d:96:
                    aa:7a:24:82:62:62:c2:34:09:07:db:bc:50:dd:0f:
                    5e:71:41:cf:19:fb:f8:e3:10:df:ee:56:fe:68:a3:
                    f0:9f:6f:b3:7b:c8:fa:7c:bf:b7:4f:1e:5c:c6:0b:
                    f7:11:af:d2:77:f5:a7:c5:7e:bb:3a:69:1b:cd:08:
                    c7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BD:17:80:7B:F7:E6:88:2F:07:4C:A8:84:75:CC:4E:21:11:3B:47
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2bca4de1-4bce-437f-8c8b-b4f93a68cd9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:0d:d0:81:6c:57:e4:94:b4:c6:0e:b5:fe:8d:af:32:82:75:
         f7:f0:17:21:13:5d:45:f2:30:4d:60:1a:19:fa:26:f2:75:62:
         d7:38:96:60:0e:29:1c:b8:f2:37:f6:db:15:d2:a0:51:24:5e:
         65:40:a5:9f:0f:fd:55:3e:5b:59:1f:7f:d8:93:ee:d4:2b:65:
         60:60:dc:10:0b:08:02:db:a4:fa:f1:62:18:30:3e:34:2d:1f:
         12:c9:29:23:4e:6e:70:8d:0b:13:1f:c8:7b:2e:bf:41:50:f3:
         75:54:e7:78:59:19:31:85:48:64:72:b4:0d:27:29:cb:20:68:
         a9:a3:8a:53:ba:ec:1a:ab:01:00:89:28:6d:49:49:ad:36:9d:
         2c:4d:f6:c6:10:6f:f8:d0:7a:6d:44:5e:8e:11:21:fd:20:99:
         09:c6:cc:c9:d4:9c:69:8f:a3:02:49:c6:b1:02:e2:d3:57:4d:
         51:e2:14:8a:3b:4a:49:15:8c:61:75:7f:53:ad:8d:28:45:62:
         f5:5a:03:57:bc:95:56:a2:52:20:37:01:30:be:f3:90:6f:ea:
         cb:5f:9e:8e:30:28:23:7e:6b:d7:a7:d8:f6:7b:56:69:01:cc:
         da:88:ab:55:57:be:c5:41:15:da:2d:1d:51:f4:0a:3d:27:51:
         3a:4b:ff:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:38:49 2026 by rpki-client