Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a459199-d80a-4790-b99e-d7e340b000a0.roa
File:                     6a459199-d80a-4790-b99e-d7e340b000a0.roa (raw, json)
Hash identifier:          LLrfWJoHQQv5VK1OZUle77KnznVzfAoOyKWupl8UxmI=
Subject key identifier:   D1:E6:0B:0D:EE:0F:D9:A2:6B:C3:DF:B0:F5:09:77:DC:46:A4:54:EE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       07E90DCE67ABA041BADE463C07C22889AF5542D6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a459199-d80a-4790-b99e-d7e340b000a0.roa
Signing time:             Sat 18 Jul 2026 00:50:40 +0000
ROA not before:           Sat 18 Jul 2026 00:50:40 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.184.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:e9:0d:ce:67:ab:a0:41:ba:de:46:3c:07:c2:28:89:af:55:42:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:50:40 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=a93e60b3ba08fcbe7919a63c8f2feca00dbe7dc9d78a4ef4d6e13a7506575fd3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:80:76:03:26:c4:84:d6:7a:16:e8:68:48:51:
                    75:cf:a8:25:03:bc:85:bd:77:f9:87:64:36:26:96:
                    83:66:aa:43:74:af:a7:42:4f:1c:00:c3:c5:f4:d8:
                    34:cf:6b:82:ff:24:13:03:da:db:29:6e:88:81:91:
                    3f:75:9f:aa:00:35:de:97:0f:df:2c:7a:7b:70:50:
                    66:54:08:aa:9c:cd:a7:ee:23:47:50:fd:06:54:5b:
                    ab:a0:8b:c9:85:6c:a0:ee:c1:d7:e3:aa:30:d6:7d:
                    95:f9:a6:75:5a:eb:81:88:21:d6:36:d2:c0:07:dc:
                    5a:06:f6:73:c2:08:20:22:8d:3f:30:f5:44:f2:de:
                    a4:de:87:07:b1:ff:f7:60:43:9e:ff:ee:f5:cf:63:
                    0f:08:fe:18:fe:d3:82:f5:22:c2:f2:94:07:d1:bf:
                    53:34:4e:d1:86:de:b5:bf:99:48:5f:20:b5:52:b9:
                    e4:00:c6:48:ee:e8:86:5f:02:f0:4a:82:0f:79:b8:
                    70:40:1a:a5:6c:8a:af:2f:64:5f:a8:3a:d0:eb:b2:
                    16:08:f8:de:15:0c:af:4d:1f:96:3f:75:dd:8b:53:
                    32:dc:2c:c5:59:cb:83:df:a5:45:86:ec:4f:f8:fb:
                    5c:3e:fe:34:24:c2:15:9c:19:d8:11:7a:30:f9:d4:
                    57:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E6:0B:0D:EE:0F:D9:A2:6B:C3:DF:B0:F5:09:77:DC:46:A4:54:EE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a459199-d80a-4790-b99e-d7e340b000a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.184.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         50:95:69:a9:e8:be:5d:bf:e3:72:89:81:3b:51:fa:4b:97:0d:
         03:2c:b6:16:cb:bf:7d:c7:39:0a:5d:f2:65:0b:7a:bf:16:c2:
         a3:41:74:fc:33:fa:1a:df:93:25:93:4f:2a:d4:d6:a5:4e:a8:
         09:74:87:1a:7c:f5:3c:c3:c3:a3:bb:8b:13:b1:fe:7c:c8:6a:
         3f:1b:84:2d:08:97:18:3a:31:f8:3d:fe:0b:33:cc:1a:99:93:
         00:c7:27:2c:5b:b5:9b:19:99:20:0f:c0:e6:38:e7:a9:f3:c0:
         d1:32:07:d4:c4:bf:6c:9b:54:a7:fb:a9:0a:96:25:11:b9:54:
         9d:d8:33:69:f7:27:69:79:26:7a:97:e4:03:60:50:39:a4:11:
         2b:fe:5c:bf:3b:ef:e1:5d:e4:09:26:e3:d0:01:5a:62:6a:99:
         d2:ad:00:ad:8e:1b:2f:e4:71:5e:1a:9e:0f:05:73:00:45:f2:
         86:6f:88:0b:2d:47:86:eb:dd:22:1e:c6:01:b6:b2:46:7f:b1:
         e9:47:60:71:96:d5:4c:75:0f:cc:69:f2:74:9c:d2:90:d8:42:
         c5:2b:ff:76:12:00:e7:46:02:84:fb:e4:21:96:da:0c:fa:87:
         51:b7:6a:7a:2f:42:c3:11:96:8f:96:4e:99:09:d0:df:f7:96:
         0b:3a:ac:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:22 2026 by rpki-client