Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1c690ab-01a2-4561-af12-0e15ab9bfd60.roa
File:                     f1c690ab-01a2-4561-af12-0e15ab9bfd60.roa (raw, json)
Hash identifier:          krjHMwAoy9eo1/O5nIKb/xzgW8M4PJiC29mflizrJPM=
Subject key identifier:   65:75:8C:5F:E2:FE:1C:33:3A:60:5F:E3:1C:16:44:CF:A8:D0:DC:90
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6546A1C0A6AC1E5C88BBF312324030B164077598
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1c690ab-01a2-4561-af12-0e15ab9bfd60.roa
Signing time:             Sat 18 Jul 2026 00:01:22 +0000
ROA not before:           Sat 18 Jul 2026 00:01:22 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.36.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:46:a1:c0:a6:ac:1e:5c:88:bb:f3:12:32:40:30:b1:64:07:75:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:01:22 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=4b36a9b7c802a9fe2de64c6a0621d251138d4bcfab7bc5a1408a96d77bc88f24, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b0:73:01:0d:c4:8a:7b:3f:66:b4:34:2a:29:
                    9c:2e:92:e7:c9:b4:3b:be:40:31:56:15:98:c1:43:
                    8c:e7:9a:77:8c:ed:89:35:c7:de:e1:68:bf:7f:45:
                    9c:74:e8:fc:a9:30:db:02:78:30:20:30:48:92:0f:
                    9a:70:ec:70:cc:09:5f:5c:45:31:29:ad:5b:53:06:
                    bc:ae:8c:af:cc:32:27:e0:10:0f:5d:37:cd:24:64:
                    b3:78:d5:e4:fe:43:8c:53:97:b4:e7:86:ae:de:7d:
                    0b:15:54:f8:e0:ce:93:0f:a9:98:03:51:3f:f2:59:
                    a9:94:93:da:21:82:b5:63:d2:b8:4e:6e:a9:cf:db:
                    8b:82:8e:ba:08:e7:24:1a:ad:9c:38:a3:9d:dc:5e:
                    cd:ea:13:bf:ad:4a:08:d3:62:68:f6:70:b5:18:a0:
                    56:e7:fa:7f:d3:79:14:b7:51:97:c9:1a:84:8b:16:
                    82:b4:43:8f:d3:3d:bf:75:fa:46:90:86:3c:33:c5:
                    5f:b5:75:bc:a3:c3:98:47:38:94:e6:57:2e:42:9f:
                    f2:3e:e1:38:9e:03:fb:e4:b8:01:99:eb:2f:76:62:
                    da:9f:70:30:ac:95:01:6a:fd:6b:49:82:f4:30:bc:
                    d8:e5:2f:88:48:54:41:5e:4f:c6:5c:0c:c4:0f:cd:
                    06:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:75:8C:5F:E2:FE:1C:33:3A:60:5F:E3:1C:16:44:CF:A8:D0:DC:90
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1c690ab-01a2-4561-af12-0e15ab9bfd60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.36.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         aa:20:8c:54:69:0d:37:ed:21:01:64:fd:d7:55:6b:2d:9c:04:
         e2:6d:97:4f:72:4f:66:23:64:72:fb:8c:94:e3:77:e5:78:4c:
         0e:87:83:44:04:1c:19:8b:1e:5d:e2:34:6b:38:89:f3:bb:c6:
         67:01:94:16:42:8e:bc:92:fd:02:e1:6a:dc:21:22:35:23:03:
         d7:04:2b:48:63:d2:41:eb:28:66:85:5d:db:1f:61:8e:10:79:
         e3:98:a5:e4:bc:3b:05:af:f3:e7:75:22:3e:9b:52:21:82:53:
         32:56:b2:32:4d:64:d5:32:4a:3b:e6:14:aa:1b:58:97:9b:ef:
         c0:a9:3e:e3:97:1f:f8:8d:ea:cc:14:79:d6:34:a2:59:3a:c9:
         b3:cb:f9:53:2e:d2:cd:ca:cb:eb:76:8a:fb:a2:bd:ec:ac:a4:
         fa:a8:f3:f0:ea:60:ae:aa:d0:3f:fa:f2:bf:43:cc:ed:4f:ec:
         bb:b9:12:ad:56:d5:78:86:10:a7:49:01:34:ac:1f:b1:7a:25:
         58:c9:7f:78:1e:7f:d4:25:49:ed:57:62:f3:82:92:41:a8:e0:
         7a:30:6a:bb:c5:f2:91:7a:1d:3f:8e:38:56:15:f8:3a:93:9c:
         00:73:af:6e:d4:f0:0f:a1:f4:62:f6:1e:06:26:52:7d:f4:a3:
         83:ce:6e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:52 2026 by rpki-client