Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a71d003-b0f6-4d35-9ee9-c7519ddb9eed.roa
File:                     5a71d003-b0f6-4d35-9ee9-c7519ddb9eed.roa (raw, json)
Hash identifier:          dls0HqiK63jMzqa7k41+tqGhlw30DFASWOH5PPcnVbQ=
Subject key identifier:   32:88:7B:69:F0:57:04:2E:D1:4C:60:7D:9E:82:B0:F9:79:C7:51:33
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       190E037CAB4B0ADC214DEBADB2D9C1E719E178C0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a71d003-b0f6-4d35-9ee9-c7519ddb9eed.roa
Signing time:             Fri 19 Jun 2026 00:00:08 +0000
ROA not before:           Fri 19 Jun 2026 00:00:08 +0000
ROA not after:            Thu 17 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.18.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:0e:03:7c:ab:4b:0a:dc:21:4d:eb:ad:b2:d9:c1:e7:19:e1:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 19 00:00:08 2026 GMT
            Not After : Sep 17 23:59:59 2026 GMT
        Subject: serialNumber=0d9b3a520251d8713246e01ad4fa9dc3f990d3927379c10f9cfb49bc5f49a905, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:08:97:3f:d7:a9:76:b8:7d:33:b5:40:fd:d9:
                    06:3f:e2:6d:da:5a:b4:db:44:00:df:c4:2d:35:94:
                    ce:88:32:5e:a5:14:08:4d:ad:0f:f2:e5:9c:fa:d1:
                    93:45:7b:32:44:6a:a5:36:ee:ab:0e:f0:c2:ce:be:
                    7c:98:7f:cd:59:ec:f6:c0:16:ad:00:e3:98:d7:bd:
                    bd:c7:64:21:76:d5:99:27:01:f9:e9:26:04:7b:a8:
                    a2:d7:df:a1:d0:65:f7:86:e6:84:cb:ad:e0:68:14:
                    72:8c:b9:3d:12:64:a3:da:60:04:01:77:8c:f0:ea:
                    5e:c9:e5:2b:8f:f7:60:a1:b2:0f:65:1e:f0:5c:12:
                    d2:c1:c4:3f:f2:e0:a0:79:c5:a0:a2:2d:3d:3f:eb:
                    31:4d:89:cd:7d:3f:39:41:28:fe:66:34:d5:ef:dc:
                    10:b1:c5:e3:81:60:21:3e:70:1e:30:7a:b4:0d:8a:
                    ec:b2:63:59:ea:34:9f:0f:5b:03:41:2f:10:ce:90:
                    45:66:6f:43:47:59:c5:55:2e:71:c9:85:60:89:54:
                    1d:d4:6e:56:48:e0:05:f7:55:c5:19:5d:b2:f3:bd:
                    b1:70:26:b5:90:bd:36:93:e4:f1:09:d5:4e:65:8b:
                    f7:fe:32:23:4d:f9:67:2c:e3:86:ed:5a:32:28:51:
                    4b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:88:7B:69:F0:57:04:2E:D1:4C:60:7D:9E:82:B0:F9:79:C7:51:33
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a71d003-b0f6-4d35-9ee9-c7519ddb9eed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.18.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a7:bb:83:6c:2b:fa:cb:3e:40:7f:b9:6b:ba:52:4d:e8:11:71:
         fd:e6:64:a0:44:ad:b3:e0:a2:53:8e:cf:0a:17:c9:3b:f8:a7:
         f5:8d:4e:52:b1:83:16:9e:f0:96:bf:ef:9e:3c:14:8c:75:9e:
         4f:a1:c4:e6:53:aa:54:cb:1a:0c:3e:eb:1f:b3:a7:93:0b:4f:
         e6:dc:bf:2b:05:c7:38:94:43:f0:0a:f0:51:87:82:6d:c0:b3:
         3c:c4:b5:0e:b0:8c:6f:8f:f0:9b:1f:08:0a:55:97:06:18:27:
         e1:62:39:c1:5d:ba:e1:ae:dd:af:8f:9f:ed:6c:59:3b:c8:05:
         3b:e1:1a:bf:eb:04:dc:97:68:d8:04:58:17:30:6b:e5:79:de:
         44:5e:33:16:25:f2:b9:b4:d9:ee:b4:51:ed:d5:b0:ef:51:5a:
         7e:7a:c9:72:82:bb:65:bb:99:18:e5:d5:2f:3d:80:de:91:7e:
         de:d7:41:86:cc:5a:72:60:a5:4b:1d:44:b7:0f:fb:a7:b6:b9:
         3d:9c:d1:0b:99:0c:ef:71:46:87:a5:12:8e:4e:c1:d9:9d:22:
         52:64:39:04:b0:d3:b3:1d:0a:7b:5a:dc:be:28:39:21:d8:b5:
         ec:ca:bd:ac:43:53:b5:2f:08:a4:b6:c2:54:47:b0:98:1e:75:
         bc:b2:00:3d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGQ4DfKtLCtwhTeutstnB5xnheMAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNjE5MDAwMDA4WhcNMjYwOTE3MjM1OTU5
WjB6MUkwRwYDVQQFE0AwZDliM2E1MjAyNTFkODcxMzI0NmUwMWFkNGZhOWRjM2Y5
OTBkMzkyNzM3OWMxMGY5Y2ZiNDliYzVmNDlhOTA1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCnCJc/16l2uH0ztUD92QY/4m3aWrTbRADfxC01lM6IMl6l
FAhNrQ/y5Zz60ZNFezJEaqU27qsO8MLOvnyYf81Z7PbAFq0A45jXvb3HZCF21Zkn
AfnpJgR7qKLX36HQZfeG5oTLreBoFHKMuT0SZKPaYAQBd4zw6l7J5SuP92Chsg9l
HvBcEtLBxD/y4KB5xaCiLT0/6zFNic19PzlBKP5mNNXv3BCxxeOBYCE+cB4werQN
iuyyY1nqNJ8PWwNBLxDOkEVmb0NHWcVVLnHJhWCJVB3UblZI4AX3VcUZXbLzvbFw
JrWQvTaT5PEJ1U5li/f+MiNN+Wcs44btWjIoUUutAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUMoh7afBXBC7RTGB9noKw+XnHUTMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVhNzFkMDAzLWIwZjYtNGQzNS05ZWU5LWM3NTE5ZGRiOWVlZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAcQEoAwDQYJKoZIhvcNAQELBQADggEBAKe7g2wr+ss+QH+5a7pSTegRcf3m
ZKBErbPgolOOzwoXyTv4p/WNTlKxgxae8Ja/7548FIx1nk+hxOZTqlTLGgw+6x+z
p5MLT+bcvysFxziUQ/AK8FGHgm3AszzEtQ6wjG+P8JsfCApVlwYYJ+FiOcFduuGu
3a+Pn+1sWTvIBTvhGr/rBNyXaNgEWBcwa+V53kReMxYl8rm02e60Ue3VsO9RWn56
yXKCu2W7mRjl1S89gN6Rft7XQYbMWnJgpUsdRLcP+6e2uT2c0QuZDO9xRoelEo5O
wdmdIlJkOQSw07MdCnta3L4oOSHYtezKvaxDU7UvCKS2wlRHsJgedbyyAD0=
-----END CERTIFICATE-----
Generated at Fri Jun 19 03:57:48 2026 by rpki-client