Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dde98764-ed59-4372-8084-926e73624f31.roa
File:                     dde98764-ed59-4372-8084-926e73624f31.roa (raw, json)
Hash identifier:          IGH8K063aW1TYDy82OJzA/+UBn/ACSC34A8esAI8C3U=
Subject key identifier:   BC:82:4C:76:72:E2:57:43:86:E1:66:0A:BC:83:5A:8E:D4:3E:FC:54
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       41E7BD27ECC85A3CAC2CDFE0935A1D0861D1251D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dde98764-ed59-4372-8084-926e73624f31.roa
Signing time:             Sat 18 Jul 2026 00:00:46 +0000
ROA not before:           Sat 18 Jul 2026 00:00:46 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.106.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e7:bd:27:ec:c8:5a:3c:ac:2c:df:e0:93:5a:1d:08:61:d1:25:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:00:46 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=50aae1251d421e04e18c7e74993d1e0d31d0108b4b0994c084f8dd4aa22fdb50, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ac:35:14:78:28:0e:c1:f9:3f:97:e0:f6:35:
                    de:15:f7:6d:04:5a:01:68:07:04:3d:5e:ff:d8:f8:
                    20:fb:3d:bc:60:2c:a1:13:6b:5e:0a:6a:90:aa:c2:
                    2c:dd:d9:98:95:54:be:bc:20:3d:fc:9b:53:09:35:
                    9d:55:45:ad:69:99:e8:14:09:d9:9f:0e:96:36:4e:
                    e0:2b:2a:c5:59:9b:11:79:68:5e:18:d3:f2:71:8d:
                    ff:f3:65:95:2c:0c:85:83:09:d4:06:bc:71:08:ef:
                    66:97:eb:26:4b:47:bd:17:1c:9c:9a:50:40:c5:53:
                    36:23:e3:35:bf:58:80:4c:b6:98:d1:43:3e:ef:af:
                    44:15:06:24:2a:36:c5:60:88:29:50:f1:0a:9b:08:
                    5b:5a:01:d4:0e:c0:aa:25:b2:98:27:57:de:a7:3b:
                    f4:43:4e:58:82:03:2a:30:a5:6e:fb:05:98:d5:27:
                    3e:0c:7b:c0:68:31:80:da:13:2c:86:97:b8:86:3d:
                    5d:8a:05:e2:1d:04:84:85:19:0e:30:6f:98:06:3c:
                    eb:fe:50:e1:a8:91:3f:cc:0a:58:80:a2:bf:94:0f:
                    c8:22:0c:09:a5:d5:b4:08:83:33:ce:b3:89:af:69:
                    a8:0f:3c:31:5f:0a:72:45:e9:07:f7:cc:3c:79:05:
                    c2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:82:4C:76:72:E2:57:43:86:E1:66:0A:BC:83:5A:8E:D4:3E:FC:54
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dde98764-ed59-4372-8084-926e73624f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.106.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         25:c0:3b:8d:fe:44:1e:2d:76:3f:f4:ad:1a:97:d1:84:28:7e:
         c2:b0:4f:f2:d0:11:4c:8d:c8:e0:b2:36:6e:c5:6c:fe:9e:bf:
         57:f1:05:b7:ff:37:83:cc:5c:ea:b6:3b:fb:bb:f9:cb:14:f4:
         ef:7d:10:b2:b1:8f:df:60:c2:4f:28:20:74:3a:a8:2f:a3:ea:
         26:74:35:f0:d3:40:c5:4b:bc:a8:0c:27:43:42:9b:28:85:79:
         8c:63:27:3e:5a:f3:e1:0c:11:ca:7f:a1:bb:b8:7d:6a:ab:37:
         a8:45:8a:6a:b4:46:7b:5d:f9:ce:2e:53:d4:31:af:44:47:08:
         72:3a:22:09:23:ec:62:0e:fe:fe:b7:d9:b6:db:d2:e1:c1:dd:
         6d:c9:f4:61:fc:27:7f:65:50:51:b8:37:9e:84:b7:77:62:01:
         c3:ac:7b:4e:b4:47:da:8d:7a:a8:4e:67:87:d9:f4:4c:82:12:
         db:32:c9:aa:74:54:22:34:07:cb:b7:04:59:18:39:71:bd:56:
         fb:35:ab:2f:c9:e4:76:62:f7:29:49:0e:c9:28:b2:b0:fc:66:
         6c:86:c6:d9:e0:a8:3a:27:3c:73:62:0d:a4:6a:90:3a:0f:82:
         55:39:82:8a:81:3c:68:4a:be:99:42:26:2d:89:5e:80:5f:b5:
         ea:2f:ac:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:43:04 2026 by rpki-client