Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d8956ca-c7c5-4819-a13e-59940ce8965b.roa
File:                     7d8956ca-c7c5-4819-a13e-59940ce8965b.roa (raw, json)
Hash identifier:          hWD01sPrAi/f4CiuOq8rAQ8zwm62iuyxCG+8nqRh2cU=
Subject key identifier:   BC:10:9C:95:F5:0C:D2:0D:BD:70:20:D7:52:56:E7:53:5D:A6:BF:34
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       178485FD9E2118C718C48FF3224A1CEC79621BEC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d8956ca-c7c5-4819-a13e-59940ce8965b.roa
Signing time:             Sat 18 Jul 2026 00:30:18 +0000
ROA not before:           Sat 18 Jul 2026 00:30:18 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.55.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:84:85:fd:9e:21:18:c7:18:c4:8f:f3:22:4a:1c:ec:79:62:1b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:30:18 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=79bdb9741867ae5e6e347c24333835d63f2023a643ffcf43a46804aad0bdddb2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:30:d7:10:14:12:da:a7:e6:df:f7:52:52:cb:
                    00:81:35:cb:bc:f9:ae:4b:13:31:81:92:ae:e3:46:
                    2b:77:65:af:4d:a7:40:9b:e4:a8:04:63:c1:9c:79:
                    da:f6:43:93:10:40:79:97:d8:ea:09:42:5b:51:05:
                    36:43:31:e2:cd:75:90:c8:20:96:e0:b2:87:9b:06:
                    c7:1a:a3:94:d5:c1:1b:32:dc:d1:fe:29:6e:88:29:
                    b1:3c:13:04:7c:d4:d4:d7:8f:dd:ce:dd:a5:35:7e:
                    6b:6c:a3:55:39:3a:3c:b3:68:04:2c:7d:73:2d:0c:
                    29:ee:22:f3:eb:e4:d8:79:3b:c9:03:b7:f2:59:3c:
                    e2:16:c1:1c:6b:14:ae:54:bf:8f:f5:6b:8a:36:70:
                    df:5b:b2:0b:24:e1:a9:df:97:1f:26:e4:2f:9e:9f:
                    0d:9f:80:88:27:36:ee:da:a5:24:02:74:a0:f3:16:
                    f5:1b:23:ec:b4:b2:94:1c:ce:76:57:20:a6:a0:5d:
                    c0:af:83:04:dd:a2:1b:74:a5:c9:66:a4:09:f5:80:
                    e0:b8:a1:41:f3:8a:70:2b:02:25:48:29:f0:4f:0c:
                    0d:91:7e:97:fb:fe:f4:39:67:f6:a5:ee:17:aa:5c:
                    df:c5:86:c3:7c:55:a0:4a:86:4d:23:e9:da:f7:97:
                    83:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:10:9C:95:F5:0C:D2:0D:BD:70:20:D7:52:56:E7:53:5D:A6:BF:34
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d8956ca-c7c5-4819-a13e-59940ce8965b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.55.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a1:17:10:41:0a:a6:af:16:ae:48:24:a9:98:b4:84:2c:9e:85:
         4e:82:1d:92:f1:e2:df:4a:51:97:33:56:a4:d8:a6:74:c2:c1:
         52:d9:30:ad:13:01:a5:ae:7c:aa:b8:40:c9:eb:ef:7a:18:bb:
         8c:83:41:91:e0:07:46:7c:6c:4f:89:0d:dc:3a:31:bf:c6:a0:
         2b:77:ef:9a:bf:e9:82:ae:41:02:23:b9:27:9c:87:18:f9:be:
         88:7c:78:e9:41:d7:0e:36:5e:4d:78:c8:ca:6d:25:9f:48:ae:
         b8:3f:db:9e:bb:2e:c3:3d:5d:e3:76:72:d6:20:12:c5:0e:5c:
         cc:40:ac:53:e7:3a:28:ec:e6:b3:c4:3f:3c:01:dc:a1:f8:03:
         95:16:6a:1c:1f:26:09:bc:5c:29:bd:00:fe:91:44:15:07:13:
         30:ad:cc:f9:5f:6c:15:27:59:09:a3:02:69:ca:17:5f:69:4d:
         fe:e5:5d:ad:88:89:86:85:af:b1:49:59:f0:d2:16:82:98:65:
         89:36:db:5f:2b:79:07:ba:40:1c:9b:f0:98:60:d5:fd:02:e9:
         95:94:63:75:9b:f5:98:2e:08:26:e2:be:f7:76:af:44:fb:1c:
         d0:91:76:21:b9:80:09:ec:b0:bf:81:e5:0f:6d:25:63:7d:a8:
         7a:6f:85:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:08 2026 by rpki-client