Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54aa9d16-57a2-4838-8f4f-c466aee71565.roa
File:                     54aa9d16-57a2-4838-8f4f-c466aee71565.roa (raw, json)
Hash identifier:          lCYReEUJJ2hbngEpZSt+q/nM8aAAsV1ebiBEJytUbuI=
Subject key identifier:   79:5C:87:A1:49:E8:8F:22:7C:B8:7C:DD:B2:08:6A:86:9C:F7:0B:B7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       63A30752880E54D66B4E6806C628334AB3890DA6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54aa9d16-57a2-4838-8f4f-c466aee71565.roa
Signing time:             Thu 15 Oct 2026 00:41:19 +0000
ROA not before:           Thu 15 Oct 2026 00:41:19 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        54.116.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a3:07:52:88:0e:54:d6:6b:4e:68:06:c6:28:33:4a:b3:89:0d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 00:41:19 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=7b1749a62eeb4e900ffd0b82d3fbad628efe7150616a66170b5e07c5591a2905, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:26:23:79:e7:4f:71:62:ac:fd:df:71:b8:1a:
                    5e:b4:c6:d9:fa:a2:d4:93:11:05:39:19:f6:3e:b5:
                    0e:32:50:dc:73:2f:7d:e2:03:82:2e:0a:61:de:b1:
                    54:e7:00:86:a8:e9:4d:38:3d:e1:c5:05:90:4a:ec:
                    ee:51:7d:d7:a5:29:c8:8f:52:2a:14:3b:3f:6e:a6:
                    b8:27:f8:79:65:67:59:0e:79:05:ab:98:2a:4a:b6:
                    31:08:58:79:7d:aa:04:d8:3c:6f:47:c2:ca:83:32:
                    06:c4:2f:6e:60:f7:85:58:e2:b1:9f:b7:8d:8f:2c:
                    fc:93:0a:54:69:1d:e5:1b:52:5a:a1:e4:ae:00:27:
                    45:6d:69:b0:db:cc:a0:d7:a3:81:82:21:c5:61:7d:
                    28:36:a3:47:ce:a5:6e:45:c7:b6:85:c1:7e:35:2a:
                    60:ab:c5:42:9e:53:13:82:71:c8:f5:27:31:1e:16:
                    5d:88:f4:d5:56:09:b7:94:ad:99:a9:02:84:27:f6:
                    67:08:1c:84:b1:02:e9:bd:59:dd:8d:f2:16:b9:cf:
                    89:3e:7e:ed:7e:32:de:a7:b7:8d:d0:09:3c:d5:60:
                    da:e7:ef:df:da:27:cc:34:23:7a:a1:81:e7:63:75:
                    21:f2:17:49:2c:96:00:fe:d8:9d:2d:23:cb:2f:0b:
                    5b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5C:87:A1:49:E8:8F:22:7C:B8:7C:DD:B2:08:6A:86:9C:F7:0B:B7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54aa9d16-57a2-4838-8f4f-c466aee71565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.116.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:64:77:b2:20:e2:15:5c:4a:b7:1a:1b:0e:a8:4f:d8:68:8b:
         f5:53:c9:de:b6:12:88:8b:fa:02:31:da:e1:46:9d:b5:eb:49:
         13:17:a7:6b:1e:a5:bd:50:f8:67:17:3e:f7:6d:8e:03:4e:93:
         bd:d9:40:3f:d2:14:97:f5:fe:f8:bf:63:22:7c:28:7d:aa:26:
         ce:77:74:4a:17:85:b2:31:f6:81:46:ea:f3:dd:1f:7c:6b:e8:
         c6:41:f2:94:6b:06:90:0c:84:a7:64:08:e1:2a:1f:49:3d:3c:
         c5:c1:50:02:19:91:c0:4e:fa:96:9b:13:8f:00:82:20:5d:7f:
         53:e0:ff:bf:90:0d:4f:4b:0e:96:27:4f:e2:37:1c:fc:07:c0:
         e1:41:30:f0:72:df:eb:31:a9:83:f4:f4:4e:de:f7:56:71:27:
         64:f4:43:bc:6b:c1:23:09:4f:8c:52:5c:f4:9d:52:99:52:95:
         1f:66:51:47:ed:a3:0e:8e:15:e4:7f:37:04:ca:f6:e9:9a:e7:
         dd:03:97:d8:71:1e:e1:66:2a:62:63:74:21:b8:c5:f0:31:13:
         04:d9:73:82:40:6d:6b:49:15:6c:d5:34:c6:87:57:b2:42:2e:
         38:26:fd:a6:87:d2:ce:b0:03:42:f8:39:5b:eb:57:29:4e:72:
         b0:ba:89:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 18:49:49 2026 by rpki-client