Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/215d8cb7-951d-429e-8cf5-ecc8f30c3e2e.roa
File:                     215d8cb7-951d-429e-8cf5-ecc8f30c3e2e.roa (raw, json)
Hash identifier:          5kLkdl7CF+SLC8l95cUu9JiFnaPqVWg4m9pwgWt3zL8=
Subject key identifier:   4C:F7:14:EB:E9:0B:35:68:98:BB:C0:79:90:16:61:AB:29:C8:AA:BB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6357032221FB1CE17F96EA509ECEBF35A82C1637
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/215d8cb7-951d-429e-8cf5-ecc8f30c3e2e.roa
Signing time:             Mon 03 Aug 2026 00:20:11 +0000
ROA not before:           Mon 03 Aug 2026 00:20:11 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.26.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:57:03:22:21:fb:1c:e1:7f:96:ea:50:9e:ce:bf:35:a8:2c:16:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 00:20:11 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=7f1949cc6934e5cbd1e61df5dfd11c8e749b7cb79fc05afac9016942c3ff9d5a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d6:f1:92:22:58:78:c9:ed:96:e0:bb:18:c2:
                    f9:4d:63:c4:ff:e3:7f:0e:80:bc:2a:c1:55:80:ce:
                    23:e3:80:56:f9:cf:96:71:a7:9f:f5:50:d8:9b:a6:
                    45:ec:fb:52:3d:18:4c:73:c9:41:5d:cd:6d:6c:88:
                    a0:0e:9f:04:4c:f5:1a:24:da:5a:8c:bf:d4:46:81:
                    96:20:01:85:75:cc:3c:3e:0c:70:24:d6:d1:d0:a5:
                    b2:b9:02:b0:80:c6:ac:b9:fe:bf:0d:b7:91:01:ac:
                    42:de:08:14:01:12:cc:fd:57:9f:74:01:97:5c:ef:
                    b6:7a:ce:83:9e:16:1d:22:e8:e0:72:2a:10:e9:06:
                    6f:a3:0f:f9:ce:85:e7:e1:95:e4:1e:16:ce:41:42:
                    b2:26:2f:95:eb:00:3e:4f:99:00:de:e9:d6:f6:7f:
                    8e:7b:26:d1:f4:36:bd:b4:b6:66:dc:7e:8d:5d:28:
                    74:40:f3:eb:72:70:1b:d4:b1:ef:48:83:d2:5d:e4:
                    0b:c4:aa:1e:d5:75:b7:47:65:4f:f5:1c:86:a0:5e:
                    7f:17:41:7c:fe:1b:51:3e:ec:ff:da:51:ea:ea:72:
                    dc:28:fc:6b:d9:04:b2:f0:d0:43:6a:b5:65:92:93:
                    da:d4:52:67:5f:b6:10:5a:e0:19:18:32:4d:f3:83:
                    e7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F7:14:EB:E9:0B:35:68:98:BB:C0:79:90:16:61:AB:29:C8:AA:BB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/215d8cb7-951d-429e-8cf5-ecc8f30c3e2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.26.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c0:e4:bc:93:cd:86:78:91:d3:53:7a:ac:6d:a2:41:90:48:b2:
         3c:68:2c:60:5d:5c:25:66:30:9f:db:88:d6:13:4b:b1:29:7b:
         74:59:af:99:1f:99:1c:3a:f3:11:a8:7c:8b:11:62:19:41:b8:
         f7:8a:6c:d8:99:43:fb:60:a7:b0:23:d9:dc:c7:a3:b4:56:03:
         98:19:7e:9e:b3:6a:bb:27:88:68:f0:c5:a4:23:d3:e7:30:d0:
         21:a8:3b:23:7f:22:6b:e8:32:8f:fb:c4:0b:93:78:99:c0:3f:
         65:ad:db:39:c0:3f:99:bf:10:fe:76:1a:05:dc:5e:34:23:1f:
         9f:e5:36:6c:cd:8a:14:73:ce:0c:2d:0e:e8:b4:fa:35:f0:0c:
         bb:f5:b2:a2:99:1c:bf:c3:72:1b:0d:99:44:8a:57:0b:ed:e0:
         4f:f8:de:41:fa:3a:78:8a:05:46:23:2d:fc:19:ef:db:31:d6:
         ca:0b:0a:aa:77:93:9f:00:4c:47:c5:72:eb:49:dc:74:b8:8f:
         e5:19:26:68:c4:ce:ff:59:4f:3f:52:ca:ea:f3:75:04:de:41:
         20:5a:07:64:b3:ea:c3:bb:c9:47:93:2a:32:0c:6f:a3:df:3c:
         f9:0c:8a:a1:6c:f0:7e:6d:4a:80:c6:22:02:db:a6:2a:b3:8a:
         8a:88:17:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:16 2026 by rpki-client