Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3732605d-e89e-4ee3-b46d-7df664583874.roa
File:                     3732605d-e89e-4ee3-b46d-7df664583874.roa (raw, json)
Hash identifier:          XHmSQ229M+cqNxoLIFyBqtdaBa03z+UURFprrIoqPe4=
Subject key identifier:   D8:02:47:99:1D:6E:FB:6E:6B:5C:3C:9C:49:BA:21:68:4B:80:30:8C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6FC9D9F658517302F35802B46D158797AB2D1FA8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3732605d-e89e-4ee3-b46d-7df664583874.roa
Signing time:             Tue 05 May 2026 00:20:45 +0000
ROA not before:           Tue 05 May 2026 00:20:45 +0000
ROA not after:            Mon 03 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.130.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c9:d9:f6:58:51:73:02:f3:58:02:b4:6d:15:87:97:ab:2d:1f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  5 00:20:45 2026 GMT
            Not After : Aug  3 23:59:59 2026 GMT
        Subject: serialNumber=a60acc5521858199c8c6d2741d284a8bb9c05df499819ae3c6191bb64628fec2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:12:bc:d2:b7:9e:83:b9:59:38:17:d8:4b:b3:
                    20:2d:a2:a6:78:85:55:b5:aa:58:9b:90:06:aa:72:
                    23:ac:fe:74:99:d0:c6:13:38:76:40:51:fd:2a:e3:
                    de:d2:69:59:6a:fe:e7:cf:a3:da:1d:42:c9:c4:47:
                    99:7f:cf:cb:57:59:51:ba:84:ea:f0:67:6b:fd:e6:
                    cf:84:f3:bf:9e:d1:c7:69:ec:b8:c6:ae:b6:8e:fe:
                    af:3e:aa:2e:57:1d:68:1b:38:6b:a6:c1:4d:f2:46:
                    90:8b:c6:e9:97:fe:4b:a1:39:d8:fe:4a:41:0c:b0:
                    c2:d1:b9:34:4f:cc:5e:4e:90:d6:1e:7c:04:f5:a0:
                    ea:12:d2:7d:ce:1f:e7:d1:c3:66:8b:30:f9:70:b6:
                    f9:d0:98:c9:96:38:46:bf:f2:18:0e:97:c2:ed:32:
                    3d:03:07:6c:82:ce:49:e8:06:12:80:55:ef:68:7c:
                    86:16:03:b0:2e:48:92:64:11:9e:5a:cd:ff:39:fd:
                    66:11:66:4f:92:c5:a4:17:15:9f:9b:b2:ed:49:a6:
                    18:13:9e:d3:5c:34:2f:ae:79:1c:39:07:fe:d0:a5:
                    c7:75:bb:29:fe:af:4a:43:2d:56:9e:b5:94:21:36:
                    e1:33:62:f0:4f:39:26:94:85:d5:42:1c:e1:63:87:
                    ac:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:02:47:99:1D:6E:FB:6E:6B:5C:3C:9C:49:BA:21:68:4B:80:30:8C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3732605d-e89e-4ee3-b46d-7df664583874.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.130.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9c:37:c5:8f:9e:75:43:a6:33:3e:e4:e6:25:e9:56:74:78:ba:
         f8:d1:d4:af:38:37:90:e5:a7:2c:6d:b1:20:1c:dc:e4:f8:5c:
         23:f0:49:53:5f:0a:52:92:0a:40:4f:58:d3:53:41:c4:ee:b7:
         38:2d:95:b3:77:ae:4f:58:f8:89:75:ce:e2:34:09:fc:ce:ef:
         58:dd:6d:fd:61:e1:4e:13:6e:15:f5:b3:a8:9b:47:03:38:28:
         48:b5:22:4d:9a:b3:3d:b3:b7:3c:5d:8b:35:5f:d2:bb:c3:97:
         14:2d:4b:bd:99:f0:54:70:08:fe:95:43:4a:f7:48:35:12:8b:
         9d:ad:b4:e0:db:f0:a7:73:1b:f5:67:93:ff:ca:71:7d:70:25:
         99:27:27:87:ba:cf:5b:86:12:55:bb:00:18:53:b0:29:b4:9b:
         45:a3:3d:ce:78:9f:c6:07:c0:7e:0e:5e:9f:20:55:f1:c2:ac:
         0e:b6:42:b5:7a:88:eb:15:b1:a4:b9:00:db:08:71:1f:9b:b3:
         eb:99:02:40:85:8f:da:37:c4:bd:98:89:5e:61:68:2f:c7:e0:
         2d:e3:50:8f:67:12:db:21:af:44:00:34:e9:39:22:6f:51:03:
         44:ae:08:61:52:d1:62:f0:29:f2:09:8d:0f:6e:10:d9:48:a4:
         d5:7e:62:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:30:22 2026 by rpki-client