Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb7f1187-36a4-49c8-a940-b8a58490830b.roa
File:                     cb7f1187-36a4-49c8-a940-b8a58490830b.roa (raw, json)
Hash identifier:          CkfurRqB2PAthb27a5flgKtXRaAJ26o4q7RvjAVUpSs=
Subject key identifier:   19:87:F6:59:5B:15:EA:F6:71:65:DA:A6:99:64:C0:69:EB:62:52:2C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       14A0789C7A4BF5FD0B55E5245117BB08AB0782F3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb7f1187-36a4-49c8-a940-b8a58490830b.roa
Signing time:             Mon 04 May 2026 01:10:07 +0000
ROA not before:           Mon 04 May 2026 01:10:07 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        13.162.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a0:78:9c:7a:4b:f5:fd:0b:55:e5:24:51:17:bb:08:ab:07:82:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  4 01:10:07 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=78e57122f89cd8dde353cf750b717b064ba808f0430e5d8896228df8a675309f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ad:3a:da:80:81:a6:40:60:31:5a:7b:ae:ea:
                    35:74:a5:50:17:67:6b:50:22:c2:c0:07:fe:48:a6:
                    b0:b8:01:48:f2:4a:5f:51:67:9c:aa:78:f7:bf:61:
                    49:c4:06:7e:e7:1f:b1:fb:21:6b:2c:e9:48:43:96:
                    61:28:12:99:9d:bb:8d:b0:06:69:12:4c:8a:e0:1a:
                    1f:e6:a4:0f:fc:c7:6b:15:f7:44:f3:59:9e:e9:ee:
                    5b:92:67:03:78:60:f7:41:be:3f:37:0e:d9:b7:08:
                    bc:90:4c:23:9c:fa:a2:e4:4e:84:99:90:e2:aa:09:
                    e5:44:03:d9:b0:1d:90:32:83:b3:28:39:3f:0f:82:
                    3d:21:48:16:ef:c8:3f:e7:94:a1:ac:4f:32:ed:9e:
                    eb:12:11:84:5b:47:9d:05:c4:a0:40:6b:57:67:92:
                    59:73:9f:ae:dd:d1:1c:30:0f:f1:34:d1:95:b2:54:
                    47:4f:9b:95:99:29:35:2a:58:92:4e:ea:0b:82:14:
                    31:1e:51:dc:b1:ff:e9:8c:60:e5:d4:12:92:4f:af:
                    c7:d1:b7:1d:f4:0e:2f:30:87:90:65:ed:3b:61:6c:
                    69:2b:e6:bb:7f:e9:71:72:3c:7d:61:d8:fe:fa:56:
                    d8:96:ef:3a:1d:46:b0:9b:8a:08:99:5c:31:58:9d:
                    2c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:87:F6:59:5B:15:EA:F6:71:65:DA:A6:99:64:C0:69:EB:62:52:2C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb7f1187-36a4-49c8-a940-b8a58490830b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.162.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:4d:86:58:15:a4:aa:ba:ee:4a:68:10:a9:06:62:f0:e9:be:
         f9:ee:39:78:ac:dc:c3:10:19:46:0d:69:dd:e8:78:ac:fb:13:
         78:98:25:1e:cc:9d:f2:ad:fb:1a:3d:ae:01:ce:3f:0e:53:f5:
         94:3b:0a:28:9a:f5:ad:36:7f:d3:d8:43:c9:20:07:73:01:95:
         92:7f:6e:fa:2d:19:60:b1:1f:a9:fd:51:6e:5f:c4:25:7f:79:
         09:9f:d1:27:c1:cc:c0:7f:63:ce:b5:ac:a0:37:70:82:d5:9f:
         2d:9e:46:de:c5:0c:55:72:80:43:f3:7b:03:6b:bc:ed:d8:cd:
         80:27:55:31:96:fd:db:2f:fb:2d:f7:da:d0:7e:ce:99:80:b2:
         22:86:b7:d4:48:c9:7b:5f:d3:bd:ff:6e:3d:d2:2f:bc:e5:c5:
         61:e0:c7:d4:47:25:77:c2:e1:48:cf:1c:3a:4b:66:84:15:82:
         ff:af:47:dc:9e:ac:66:71:e6:08:54:bd:40:db:f5:d9:28:16:
         8f:ad:db:d6:f7:a0:5d:e5:75:d6:ca:7b:15:c8:35:60:f9:47:
         96:1f:71:17:ed:f9:92:8c:24:28:e2:cf:5b:57:39:16:ad:83:
         3e:1d:00:76:13:e6:70:21:ab:f7:d0:81:d2:07:3e:c7:ed:69:
         84:e6:b0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:54 2026 by rpki-client