Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa
File:                     56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa (raw, json)
Hash identifier:          mizRw7SEPh8dCHhUZhyfVblF0zvAs4XGiS+DkgdHUSU=
Subject key identifier:   BF:92:80:31:56:49:B4:ED:B7:76:8F:80:03:67:3B:FF:9F:31:BF:DA
Certificate issuer:       /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
Certificate serial:       0E63A8231EBE3A70BB784FDC221D79EA31DEF70B
Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa
Signing time:             Sun 02 Aug 2026 00:10:16 +0000
ROA not before:           Sun 02 Aug 2026 00:10:16 +0000
ROA not after:            Sat 31 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        191.166.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 00:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:63:a8:23:1e:be:3a:70:bb:78:4f:dc:22:1d:79:ea:31:de:f7:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
        Validity
            Not Before: Aug  2 00:10:16 2026 GMT
            Not After : Oct 31 23:59:59 2026 GMT
        Subject: serialNumber=e1ddd5df1e3084927fcfbe280b5ae2acb3fda30704a3352a92199afb6ed61005, CN=7b7e81e4-c981-4cca-be35-ec61f732415c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:69:c4:f3:96:5a:10:4b:ac:a6:92:0f:34:9c:
                    e2:18:bf:e2:a2:02:c6:02:b4:9d:d3:92:82:0e:97:
                    f7:5a:d7:2b:d7:e3:84:83:62:24:34:bb:44:f3:37:
                    8b:df:74:5b:a6:e4:85:55:31:ff:51:f5:d9:3d:cf:
                    7d:25:1b:8c:9f:a3:2d:ac:1d:cc:2a:c2:3f:a0:7c:
                    7e:45:42:90:a4:4a:18:2a:da:7c:78:da:eb:9f:a0:
                    34:ef:9c:eb:40:61:56:9b:3f:74:17:26:aa:a2:aa:
                    d1:ba:82:70:b9:49:22:12:89:46:00:a3:be:b5:1d:
                    e2:1a:9a:66:d6:a5:6d:6f:fd:61:24:f7:b1:52:39:
                    75:9c:f5:9e:1f:3b:87:87:dd:34:29:7a:f2:31:ba:
                    4c:46:4f:49:a6:92:7e:d1:a1:24:77:17:f9:c6:c9:
                    26:61:89:56:03:c7:2b:a1:6e:c9:f7:75:df:35:ba:
                    4e:29:3d:51:6d:58:67:18:05:19:6f:45:c7:7d:1f:
                    bf:5c:88:71:73:fc:ba:05:44:b5:27:d7:95:50:76:
                    a5:15:47:d5:38:48:5b:4a:af:08:5e:55:27:6a:0f:
                    11:c9:ac:83:61:94:e7:28:5d:20:73:a3:da:b9:22:
                    23:27:53:64:db:3e:98:7d:c9:66:17:ea:09:0b:92:
                    3c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:92:80:31:56:49:B4:ED:B7:76:8F:80:03:67:3B:FF:9F:31:BF:DA
            X509v3 Authority Key Identifier:
                keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.166.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4d:da:62:f0:ac:b6:87:6d:62:3b:f1:d6:81:91:51:ae:76:89:
         77:70:f2:06:7f:ab:25:28:01:f6:e4:ba:d3:51:a8:7f:32:fe:
         91:94:3e:a1:09:95:d8:ac:e9:c4:03:6c:8a:40:f9:a3:42:84:
         74:e5:cd:ea:d1:33:0e:ab:e3:76:72:cb:57:01:e6:26:b3:4f:
         3c:a6:58:fa:29:a1:b6:fb:a6:70:c5:90:ea:b7:c9:70:00:53:
         21:33:09:d6:c1:ee:11:b9:4e:dd:38:09:08:c4:3c:7e:36:1a:
         80:0b:34:82:06:88:bf:d6:21:94:b9:07:69:42:1e:02:5c:94:
         d2:ff:78:15:43:6d:2b:13:61:7b:b7:59:70:f3:92:2a:23:cb:
         68:92:10:48:05:03:f3:cc:3f:b3:99:f9:a8:e9:99:84:e1:d1:
         a9:76:7e:7e:8d:fb:b6:8b:94:77:61:c3:60:8f:b9:ba:eb:f4:
         60:f2:b2:35:85:74:04:98:a8:39:fa:81:15:95:5a:35:bd:f8:
         79:54:f8:0f:65:ee:44:25:03:b8:29:a6:97:5f:6f:09:8a:b2:
         4b:94:d3:52:55:19:e9:85:f9:d7:6c:1d:3b:fb:b4:7e:01:8f:
         78:07:61:4c:ca:36:c2:02:ea:b2:74:17:fc:24:c1:5c:e1:4e:
         28:3e:53:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 17:50:12 2026 by rpki-client