Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e218b04-dfaf-4fdb-9e82-bad8d7e36def.roa
File:                     5e218b04-dfaf-4fdb-9e82-bad8d7e36def.roa (raw, json)
Hash identifier:          8G8Vd6LE9DOgfXgkON4hNcLZaH/Rfh4g/an8SeM/byw=
Subject key identifier:   3F:C3:A4:D8:50:11:B9:C7:E7:A1:0A:40:D9:41:5F:27:FD:68:BF:C4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4C3EB761972FD6914371C5E1EEF5B8B44B56FDEB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e218b04-dfaf-4fdb-9e82-bad8d7e36def.roa
Signing time:             Mon 05 Oct 2026 00:01:19 +0000
ROA not before:           Mon 05 Oct 2026 00:01:19 +0000
ROA not after:            Sun 03 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        16.206.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:3e:b7:61:97:2f:d6:91:43:71:c5:e1:ee:f5:b8:b4:4b:56:fd:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  5 00:01:19 2026 GMT
            Not After : Jan  3 23:59:59 2027 GMT
        Subject: serialNumber=bcad3bf621ba787aadee35b8e75c4f595fc2d7e72424f114ca8ad192db4e50f5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:15:2e:07:84:6c:50:3a:5d:b9:e6:70:ae:5f:
                    17:a2:94:d8:01:3b:a4:84:60:bb:7f:4e:61:c1:78:
                    83:d4:8c:13:d4:7e:60:7b:02:a8:fe:dd:bb:e5:3b:
                    98:9a:b8:bc:82:cc:f4:c1:ba:c3:e8:1f:4c:66:01:
                    a0:97:b8:b6:a0:fc:be:7b:41:2f:5b:00:e2:90:d2:
                    b7:e6:2f:ff:dc:5f:7b:8f:29:3a:6c:42:67:0b:17:
                    2f:62:cd:68:4a:f8:0a:34:0d:f9:5d:23:fb:d9:0c:
                    91:6b:1d:8e:7b:dd:19:30:37:60:5b:b6:18:28:a0:
                    d5:bd:47:ad:3a:c1:07:a2:41:f7:e9:0c:e6:ac:4e:
                    9c:cb:3c:1c:5b:c8:05:94:ca:35:9c:27:5f:c4:fe:
                    ed:9a:a7:8c:b9:b3:ee:35:b6:6c:87:6b:55:26:a1:
                    15:24:f1:7a:e0:ed:f6:ea:51:15:e3:12:53:8b:e2:
                    11:f9:e1:86:b5:62:9b:03:da:ab:b5:24:6f:a4:ab:
                    40:bb:ae:c3:f5:70:b1:f4:38:c6:80:1b:5a:b3:c4:
                    f2:6a:97:0a:db:83:74:af:c7:cd:41:e1:6d:76:6a:
                    53:de:44:9f:ad:63:33:3a:1e:e6:8f:c5:f7:f4:a4:
                    c3:81:85:aa:dd:4e:05:d6:a0:52:7f:6d:52:8f:fc:
                    c3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C3:A4:D8:50:11:B9:C7:E7:A1:0A:40:D9:41:5F:27:FD:68:BF:C4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e218b04-dfaf-4fdb-9e82-bad8d7e36def.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.206.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         91:50:7f:27:a7:8b:e6:c0:ca:49:92:6b:fa:45:42:40:47:d7:
         2e:3e:a5:78:ba:fb:20:e3:6e:07:88:33:da:8a:e1:4f:95:62:
         c8:16:f6:3f:a9:59:88:9a:f9:80:27:12:f3:48:65:a6:05:6f:
         18:c3:f8:10:93:e9:c4:de:39:80:50:50:37:e3:85:93:cf:43:
         97:37:35:82:4a:f1:8b:a2:8f:fd:a3:4b:93:ab:e1:ec:cd:e0:
         92:b1:a4:1f:05:31:b1:ea:60:5a:89:08:05:32:5c:4e:96:0d:
         0e:2f:4e:fb:e5:28:8d:58:43:71:fb:44:b2:87:da:1f:e5:dd:
         e0:4d:af:23:b2:e5:f3:5d:c1:6e:6f:c6:b2:71:e0:ad:c0:72:
         8f:53:9b:0c:0d:93:a1:74:78:01:1d:5b:53:44:c2:8a:7f:7f:
         26:bf:ac:7a:bd:88:d1:40:f1:44:b5:cf:e1:78:42:41:c8:4e:
         4a:b2:78:87:58:34:e9:e3:2d:0c:19:68:a0:85:25:95:28:12:
         62:06:41:79:78:1e:f9:a9:97:d6:0e:80:38:1a:7a:da:9e:ca:
         aa:4f:05:b7:27:1d:91:9a:ef:41:41:68:b3:3b:39:5e:39:d8:
         3d:90:2b:0e:ff:e8:46:28:45:bc:0f:09:e4:3b:e6:7d:8a:cc:
         f8:62:51:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:53:24 2026 by rpki-client