Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c39b740-7ea5-4355-88b7-34e0fb388cf7.roa
File:                     5c39b740-7ea5-4355-88b7-34e0fb388cf7.roa (raw, json)
Hash identifier:          E55C8RBhj43C7Bekg1BXtJwe9783eqH/1xi0fS5GPQ0=
Subject key identifier:   B1:17:89:DF:BA:76:B4:C9:FE:96:E9:52:B2:9D:D5:38:C5:DE:8E:7F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       169B76D363168B3268F06E32A1A2C90C111E69C4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c39b740-7ea5-4355-88b7-34e0fb388cf7.roa
Signing time:             Tue 06 Oct 2026 18:22:58 +0000
ROA not before:           Tue 06 Oct 2026 18:22:58 +0000
ROA not after:            Mon 04 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        16.15.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9b:76:d3:63:16:8b:32:68:f0:6e:32:a1:a2:c9:0c:11:1e:69:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 18:22:58 2026 GMT
            Not After : Jan  4 23:59:59 2027 GMT
        Subject: serialNumber=3c21a388d6a0817d087725f1ca3884d254a48956c8f0c64647dbe21d8bcfb994, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:da:d4:67:8d:ff:e5:ca:21:d2:99:2b:e7:e6:
                    37:9c:03:0a:5e:e7:04:86:12:97:24:b2:d2:01:68:
                    49:5b:dd:ab:26:3e:b0:ea:5d:51:4b:37:26:c0:96:
                    bd:72:35:9b:c0:a3:42:d6:63:bd:0d:3f:9f:54:24:
                    7c:f9:8c:cd:10:b6:ea:9b:97:e1:e5:0b:f3:b0:08:
                    1e:cb:3c:16:89:df:de:34:8a:c4:a8:12:be:39:28:
                    5d:96:30:9c:0c:d2:2b:5e:58:db:98:3b:c2:b4:a2:
                    db:cb:bd:43:a8:50:83:b9:31:c2:32:02:89:34:e1:
                    84:9c:d8:b5:97:92:12:a2:be:18:00:6b:37:b3:e6:
                    6c:b4:dc:07:5f:4b:2e:9d:fb:0b:d3:d9:4b:78:86:
                    94:ee:6a:89:0d:0e:fa:00:9e:6b:c3:a2:2b:a1:03:
                    77:10:5d:3e:5a:b8:96:20:1e:bc:c8:59:05:f6:66:
                    03:92:1e:16:48:01:67:56:6a:45:87:72:bc:6a:a6:
                    82:58:11:36:1b:a4:77:36:3d:4b:aa:9a:3c:68:54:
                    63:01:8d:a6:dd:1f:ca:b8:c6:6a:4d:29:a5:99:1e:
                    c8:41:93:9c:10:00:63:9f:f8:55:2f:57:be:a5:62:
                    a0:fb:ad:9e:5e:de:c4:57:f8:f1:d1:22:cc:4b:04:
                    3b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:17:89:DF:BA:76:B4:C9:FE:96:E9:52:B2:9D:D5:38:C5:DE:8E:7F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c39b740-7ea5-4355-88b7-34e0fb388cf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.15.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:65:95:58:e0:53:b4:cc:a8:b1:28:17:08:f7:0f:d5:ea:22:
         84:40:21:0b:2b:a4:d1:c4:31:4d:28:ee:b9:a8:fb:85:96:a0:
         98:9d:2d:5a:f6:de:cd:5e:a6:99:b4:7d:45:b7:24:72:02:d6:
         52:56:ad:88:86:79:e1:9c:23:28:c0:50:96:ea:b1:ee:ec:91:
         28:56:17:91:e4:a8:6c:53:c4:8f:ae:a2:28:b7:17:c3:af:e1:
         c9:65:db:83:da:bd:41:d5:82:9b:df:45:bc:a3:ab:e5:8e:17:
         2b:ce:bc:d8:df:a0:36:5d:31:ee:de:2e:44:1c:3d:4d:0d:33:
         23:61:a6:41:b6:1b:a4:f2:36:8f:f9:67:8d:bc:fa:cc:63:3f:
         27:2e:3a:63:d9:ca:af:58:18:08:92:3c:86:7d:5e:b4:78:7e:
         4c:96:0c:ba:5e:1f:f7:28:58:7a:97:61:3c:2c:70:24:db:43:
         85:a3:ee:b1:f2:6d:63:21:60:8a:2a:a8:e2:7c:75:c1:3b:21:
         9d:8e:d2:06:5f:9f:fc:b0:c7:98:65:f8:f0:8f:11:85:6b:d9:
         78:3b:92:50:7e:7a:93:72:cb:e5:37:d1:fa:94:a3:cf:ea:16:
         82:9f:7c:c7:b8:72:58:67:7a:41:44:12:63:93:ab:26:f7:26:
         ca:a5:8a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 23:47:24 2026 by rpki-client