Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05767c0c-a51a-4724-8188-24d099c58bd8.roa
File:                     05767c0c-a51a-4724-8188-24d099c58bd8.roa (raw, json)
Hash identifier:          eLKKEExXssWJfX6yZ/D7ZQlzu7He+i6SgxuiRZmn5Bw=
Subject key identifier:   AA:83:55:52:90:66:DF:DA:CD:A1:F8:D9:62:07:F2:51:E8:9A:BB:A2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       78A99B20737FA8FA21D4DD80D375245D8C4CC723
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05767c0c-a51a-4724-8188-24d099c58bd8.roa
Signing time:             Mon 05 Oct 2026 00:30:13 +0000
ROA not before:           Mon 05 Oct 2026 00:30:13 +0000
ROA not after:            Sun 03 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        16.190.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a9:9b:20:73:7f:a8:fa:21:d4:dd:80:d3:75:24:5d:8c:4c:c7:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  5 00:30:13 2026 GMT
            Not After : Jan  3 23:59:59 2027 GMT
        Subject: serialNumber=204925fdb865adc20fd318475337cd9a1c98a0b3cc71243fb8e04a40fa60f9a7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8a:a9:fa:b2:dc:4c:f5:22:2e:fb:c9:28:cd:
                    c5:36:0e:88:4e:4f:98:f5:8b:cc:d0:2b:41:8b:21:
                    80:a4:b0:75:01:b2:b7:a9:34:bb:f7:ef:03:1a:d1:
                    bc:19:2c:33:a3:07:38:df:67:dd:b1:6d:84:0a:f8:
                    23:ba:f2:01:8e:41:0e:e2:aa:43:c4:5c:bb:2b:16:
                    9f:8c:d9:26:dc:4d:61:a6:05:40:d5:dc:22:9e:0b:
                    c0:ae:c9:2b:fd:90:7b:4b:63:4a:6f:3e:18:90:61:
                    3d:bc:4e:69:4f:39:88:90:35:43:d5:ea:a0:bb:6f:
                    8c:bd:1e:92:49:bb:d6:eb:46:d8:24:eb:e8:00:64:
                    de:d4:40:46:dd:03:60:bd:48:de:b0:f7:cd:db:4d:
                    30:1c:5e:10:29:79:b5:6b:7e:50:cb:10:e7:82:fb:
                    5a:90:c6:46:f3:e8:0e:60:ce:97:ba:d1:43:25:ae:
                    1e:9a:15:63:c0:75:0f:8e:8f:88:20:de:a5:19:bd:
                    4d:27:6c:de:ef:39:df:2c:62:cc:83:8e:4d:8a:59:
                    74:2a:c9:c3:96:d8:f0:98:99:f9:c2:ae:04:3a:c1:
                    ab:6f:cb:c5:d1:94:13:1e:db:af:45:4f:50:17:3b:
                    b2:3d:97:53:77:a6:0c:b3:fb:a6:6a:f7:d5:5a:b6:
                    52:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:83:55:52:90:66:DF:DA:CD:A1:F8:D9:62:07:F2:51:E8:9A:BB:A2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05767c0c-a51a-4724-8188-24d099c58bd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.190.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         04:b0:37:f2:4c:61:1b:37:51:bb:9d:30:c1:e4:64:a5:ae:e6:
         c3:a2:cd:c6:91:b6:a2:ab:6e:18:d3:fb:3e:48:5f:14:9a:05:
         90:b0:b6:fe:aa:f1:b4:6f:79:56:93:f0:b4:9e:81:ae:f6:fc:
         b8:dd:10:85:47:07:03:1f:3b:4a:d1:ab:84:1d:10:c1:1c:13:
         a3:ee:66:1c:25:7d:e6:52:52:a3:f4:d7:33:78:93:72:c2:11:
         42:ba:75:54:d5:0a:4f:8d:c8:04:70:fb:b1:aa:5f:1a:8f:43:
         4c:cd:ba:e0:fe:bf:b7:e8:64:70:53:c6:fa:38:dc:29:82:d9:
         e5:ac:2c:3e:2e:be:f6:7f:3c:15:70:b5:2a:b4:31:d3:0b:7e:
         cc:9e:e4:e5:37:07:7f:34:9a:b0:ce:7c:2e:2d:8f:d9:b5:fa:
         30:55:35:c0:58:66:60:1f:51:0c:f7:46:ca:a2:56:d7:42:98:
         1c:fd:24:4b:8f:21:69:ac:4c:8b:4f:5f:bf:bd:3b:b5:40:80:
         e2:7d:f0:37:da:87:c1:67:5a:e2:96:5e:59:06:10:cf:52:6d:
         4e:17:1d:5a:94:05:85:db:03:c8:13:c9:b6:25:a2:01:db:cf:
         19:ab:c2:a1:55:e4:05:6c:9f:80:ed:67:ed:8f:93:c7:0c:be:
         0f:ee:60:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 14:14:56 2026 by rpki-client