Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71686793-835a-45ec-ab49-31bec463864e.roa
File:                     71686793-835a-45ec-ab49-31bec463864e.roa (raw, json)
Hash identifier:          4vzJLeiXqlVaf1gGAQvsyFyBXqm7aNGWJ2lv6+wmh/g=
Subject key identifier:   45:26:01:21:D5:52:02:52:6A:09:B8:56:29:87:02:71:66:5D:78:25
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       362399739FCEEF89CA3935263757252ED39C4886
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71686793-835a-45ec-ab49-31bec463864e.roa
Signing time:             Sat 18 Jul 2026 01:00:08 +0000
ROA not before:           Sat 18 Jul 2026 01:00:08 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.199.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:23:99:73:9f:ce:ef:89:ca:39:35:26:37:57:25:2e:d3:9c:48:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 01:00:08 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=7e1e44ce62d45df7e276f92858f45f07b85c83a591228d641ed7d60ea04ea14c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7f:3c:b0:50:21:06:eb:cd:f5:c6:b9:9c:74:
                    f3:ba:5b:49:9b:d2:a2:e5:ea:31:26:2f:19:8b:40:
                    2c:ce:71:aa:65:36:13:ec:4e:90:d8:09:a6:62:59:
                    f0:b3:ee:f9:56:fe:a1:53:b2:fd:d3:72:28:46:03:
                    bf:7c:e3:12:82:ae:11:40:bf:f9:78:18:db:50:87:
                    83:2a:c6:40:b2:19:db:ef:1c:d7:d1:29:ec:00:a5:
                    5a:43:bd:9e:78:0a:e2:0f:9e:44:c0:19:d3:66:4e:
                    dc:ad:d0:b9:ea:05:03:84:d5:8d:25:61:d8:e9:3a:
                    a4:30:96:47:f5:27:e7:26:b9:86:39:04:24:fe:00:
                    3c:af:14:b1:35:4d:0e:83:01:2b:a6:c9:29:5a:c5:
                    7f:ad:7e:4c:a0:9e:cd:ab:45:4c:ff:b2:15:8a:34:
                    76:b3:32:84:dd:71:ba:0c:90:71:9d:d7:b4:bf:4f:
                    17:3d:7b:66:6e:ce:39:27:bc:b2:27:9f:95:5a:68:
                    d5:e1:60:70:cb:de:db:27:17:cf:33:06:c8:9a:f1:
                    89:14:42:82:bf:d2:28:d9:27:3e:6f:16:50:40:4d:
                    7b:33:48:39:26:ea:3a:2c:a6:c1:cb:a4:32:d7:0b:
                    9d:46:cc:81:06:74:3d:45:f9:d2:4a:87:60:ab:67:
                    e1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:26:01:21:D5:52:02:52:6A:09:B8:56:29:87:02:71:66:5D:78:25
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71686793-835a-45ec-ab49-31bec463864e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.199.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         33:0a:1c:d9:fe:31:e8:c0:68:31:76:07:b5:8d:ca:20:7b:87:
         cb:4a:56:c2:0d:52:e8:f3:02:f0:ea:c2:4b:51:d2:fd:ce:a7:
         59:eb:23:a8:89:a8:4d:56:83:cd:03:ca:dc:8c:8c:7c:b6:d0:
         b0:e5:fa:84:27:a2:b5:ee:c1:f5:21:33:79:03:8b:fc:f8:9f:
         18:2c:da:8f:ac:58:3f:b5:fa:1a:f2:68:46:5f:8b:59:d4:4b:
         da:d2:d6:9d:ce:4c:98:60:38:5f:60:f8:6e:e0:9b:d7:19:27:
         71:31:1d:b8:e8:b3:e9:20:65:e7:ad:fe:b1:d9:ef:08:97:13:
         13:82:cb:9b:7e:7e:c6:a8:80:2b:41:1c:33:e2:0b:bb:e4:c1:
         49:b2:cb:77:15:d3:52:d2:25:7d:16:e6:d8:b4:88:f8:14:1e:
         2e:eb:76:7a:7f:c0:35:cd:b0:50:ab:94:c7:f9:6f:3e:51:8c:
         89:53:9f:cc:5f:b1:26:be:5b:7b:8a:e0:18:d3:0b:3d:fd:9d:
         23:2e:78:2d:6a:3a:d6:c2:a6:8c:dd:10:c6:49:b6:8f:20:cb:
         96:58:a8:4d:a0:f6:93:03:2e:6b:78:60:11:89:2c:61:0a:89:
         3d:93:48:73:4c:ca:14:28:ad:64:49:3c:85:35:4a:c1:61:a1:
         2a:89:ca:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:52 2026 by rpki-client