Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/115d2414-46b9-44c8-b622-794869ddcee0.roa
File:                     115d2414-46b9-44c8-b622-794869ddcee0.roa (raw, json)
Hash identifier:          rJJf+fD/q4o9Flph1M3j+gexq3dLzzUGuM9JhmbAtt4=
Subject key identifier:   80:2D:FB:28:FA:75:41:9F:ED:89:83:CF:FD:AB:85:72:06:85:47:98
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2098D7D2A7CF81A533E5393EBB12CAC079393310
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/115d2414-46b9-44c8-b622-794869ddcee0.roa
Signing time:             Tue 28 Apr 2026 00:21:03 +0000
ROA not before:           Tue 28 Apr 2026 00:21:03 +0000
ROA not after:            Mon 27 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        162.254.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:98:d7:d2:a7:cf:81:a5:33:e5:39:3e:bb:12:ca:c0:79:39:33:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 28 00:21:03 2026 GMT
            Not After : Jul 27 23:59:59 2026 GMT
        Subject: serialNumber=d5ddbaa741a0148204a1d19b98a3e50eff64ff95e0fe9c49b29be57b54659dd7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:23:1e:cf:8f:fd:d7:52:da:4d:61:eb:64:ab:
                    d9:8c:87:44:18:18:26:a5:b0:ae:c6:6e:eb:33:6c:
                    56:6a:c5:b5:d8:15:a4:35:3f:3b:e0:42:d0:1a:84:
                    38:4f:31:91:b1:71:b1:57:2d:3a:da:eb:ff:7c:38:
                    dc:dc:0d:8c:2e:1c:6b:c7:ba:5b:e3:2d:41:f9:47:
                    5e:d6:f8:0c:df:39:08:96:16:16:74:0b:61:bd:68:
                    f3:ea:5c:cb:e5:9c:d1:cc:bf:9f:3b:d5:fb:dd:87:
                    55:29:93:d9:a1:61:4a:e0:15:69:96:6a:7b:f6:f9:
                    8f:05:fa:03:0b:05:ac:d7:a5:f4:4b:35:2e:6a:f9:
                    5c:64:60:86:0a:ce:c5:ac:23:4f:07:84:b1:26:f6:
                    e2:e8:31:b7:dc:0e:45:56:5c:c7:27:bc:a6:ef:c9:
                    88:d9:9d:3d:2e:be:bc:43:d3:fd:70:36:e1:f1:36:
                    c0:f4:64:6c:d0:8d:c5:63:c1:a3:a9:dc:01:12:37:
                    ee:2f:22:ee:5b:38:0a:9a:a1:fb:1b:19:38:8e:26:
                    e5:09:dc:8a:a4:e4:e7:16:02:99:b8:de:d6:03:dc:
                    b9:2c:4b:7d:5b:a3:39:06:bb:14:d5:4d:e9:2b:a1:
                    c7:8a:e2:8c:1f:b5:6d:2b:b6:c7:0e:9c:ac:6e:0e:
                    e5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2D:FB:28:FA:75:41:9F:ED:89:83:CF:FD:AB:85:72:06:85:47:98
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/115d2414-46b9-44c8-b622-794869ddcee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         57:dc:c5:bb:52:57:04:d7:c4:63:0d:d5:3a:a1:25:12:68:75:
         88:30:63:eb:1d:6f:32:4c:46:ec:9e:8e:de:8b:c4:d6:a9:9c:
         0b:97:61:05:06:b7:f4:c1:6d:ea:9c:f2:19:e7:75:57:66:8d:
         4e:17:fd:93:84:c2:21:f4:d3:31:b6:3e:e4:c1:4e:6f:8a:f7:
         d2:de:44:79:54:f4:79:af:af:79:fa:a1:a2:4d:7c:c6:5d:bb:
         e8:29:f6:04:01:42:19:4e:79:05:d4:3a:93:ef:0d:30:92:aa:
         09:c9:ff:5f:01:ad:da:55:8b:27:d5:de:9a:a8:59:f6:67:64:
         45:b3:7a:fb:67:d1:5a:3e:7d:a5:33:94:39:11:6b:2c:23:32:
         f2:9d:ec:7a:b3:5f:bd:30:46:e1:e3:cd:45:65:ad:57:c2:46:
         c2:fc:f3:4f:42:a6:0c:65:8c:cd:67:9b:54:e3:ac:7f:c6:36:
         2a:86:67:4f:3c:b5:7b:6b:5c:f8:03:7e:c2:7a:fc:36:11:ae:
         7e:e4:41:03:a9:13:a3:c8:89:88:a8:64:a8:eb:9c:04:f3:17:
         20:84:6c:3a:fe:34:56:17:f9:e3:ff:2e:23:eb:bc:6e:44:c8:
         72:67:08:f8:3f:f8:fd:c0:09:83:80:88:6f:f2:a1:0b:a5:50:
         e2:6b:a2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 14:46:39 2026 by rpki-client