Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74c2211b-19a5-49dd-8b48-1481b2c37b9d.roa
File:                     74c2211b-19a5-49dd-8b48-1481b2c37b9d.roa (raw, json)
Hash identifier:          DPWfMELyFrSGqzllqe63mGaXlXIAEiifeKrfexZJXSM=
Subject key identifier:   BD:5B:8A:8F:D2:AF:E5:DD:34:89:9F:4F:66:C5:B8:1C:BA:4B:46:3C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       79AD7B7567D5937DE6515506626B2E5F3A612939
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74c2211b-19a5-49dd-8b48-1481b2c37b9d.roa
Signing time:             Fri 16 Oct 2026 00:21:52 +0000
ROA not before:           Fri 16 Oct 2026 00:21:52 +0000
ROA not after:            Thu 14 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        216.87.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ad:7b:75:67:d5:93:7d:e6:51:55:06:62:6b:2e:5f:3a:61:29:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 16 00:21:52 2026 GMT
            Not After : Jan 14 23:59:59 2027 GMT
        Subject: serialNumber=8167ce1f163d61906298e8d95878614f42e3d47c492012ca8ab281acc008e037, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b7:81:b1:78:0a:60:4f:3e:eb:ec:39:31:60:
                    bb:87:c2:92:d4:99:d8:ee:a6:8d:67:1a:1a:c1:b2:
                    e8:4b:ca:97:26:e8:3a:48:1f:a9:a0:9f:09:e8:74:
                    e9:10:e0:2b:3b:46:1c:12:17:af:25:dc:45:8a:2c:
                    a0:77:60:87:fc:60:10:f4:08:a0:65:d1:6e:4b:fc:
                    31:12:ab:dd:3b:de:be:3a:4f:ce:f9:fa:1b:bd:ee:
                    39:8a:52:c5:33:30:b0:b1:db:39:1e:0a:da:5c:6c:
                    3a:59:5e:8e:ec:e8:76:38:71:83:05:2d:d5:77:b0:
                    6a:69:20:ec:45:1c:50:b6:3c:b6:e0:1b:9c:c8:46:
                    01:8c:7d:b2:70:ee:91:bc:88:44:5b:19:9d:54:54:
                    c4:be:70:18:a4:b9:5b:f8:28:a2:90:41:48:5a:ad:
                    bb:6a:fd:99:0e:07:49:1d:70:5d:8c:ff:b7:c2:34:
                    2e:0d:ad:4d:0f:00:46:cc:24:80:88:d1:cb:20:e8:
                    91:6b:50:67:eb:51:b1:3e:cc:4f:f1:02:7e:85:54:
                    a2:0d:c5:b0:2d:04:24:a7:d4:a5:3c:c1:0c:ad:02:
                    a3:4a:14:a2:8c:3c:86:91:8b:24:97:92:5f:18:99:
                    04:7f:29:c8:fc:cf:3e:d5:c1:1b:85:c9:ff:b3:ed:
                    a0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5B:8A:8F:D2:AF:E5:DD:34:89:9F:4F:66:C5:B8:1C:BA:4B:46:3C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74c2211b-19a5-49dd-8b48-1481b2c37b9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d9:23:e2:c8:15:d1:ad:18:c3:00:82:38:84:75:64:5d:3a:f1:
         44:b7:52:d3:b6:a3:6e:c0:59:7b:d3:0f:fd:da:12:2a:2d:14:
         79:d3:a9:75:fc:63:26:59:75:db:f1:12:61:32:17:cc:e1:7e:
         b2:40:a8:e1:c5:4f:5d:b8:56:08:72:e7:a7:34:9e:ea:d0:99:
         d7:03:03:aa:8f:c4:0e:7d:63:9f:87:5b:8b:5f:42:62:d8:33:
         d5:0f:a8:bb:02:ed:70:2b:fd:98:96:29:8c:91:5f:56:31:8e:
         1b:f6:fa:b2:34:ea:aa:9f:dd:0a:07:0d:6c:06:e7:16:be:c3:
         c3:d3:2f:c9:84:d6:81:ad:45:73:81:1f:41:ed:54:02:cf:c5:
         d7:90:aa:db:e0:f6:49:80:79:3e:32:c5:32:e5:86:b0:f8:21:
         62:f5:ae:a5:de:a5:d2:c5:33:dc:0a:ef:21:6b:34:21:80:3f:
         69:a6:eb:85:e2:30:96:7b:7b:69:b7:7a:dc:14:bb:d0:8a:01:
         a6:a2:b6:05:68:5a:76:e1:3b:a1:f8:3d:02:d1:6a:ba:1e:80:
         f9:21:7f:27:96:fc:ea:58:fa:ed:40:3f:c9:a4:ed:ac:e4:d6:
         63:ee:a5:fe:f0:3b:f5:6b:a0:fe:79:04:0a:18:88:60:63:19:
         aa:e6:eb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:30:49 2026 by rpki-client