Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8fdb74b8-2015-48b3-8c05-a942e474bfa0.roa
File:                     8fdb74b8-2015-48b3-8c05-a942e474bfa0.roa (raw, json)
Hash identifier:          aqOeFJ3S86/HxdYWmG83AO/Y7kXzleEUje34oHqfnRA=
Subject key identifier:   2B:C3:07:9B:55:71:6D:32:76:C6:A6:11:6D:6F:E9:53:59:32:89:B8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5F7C23093D7C59B0FFA2F59B144B65DF7FF4BC7F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8fdb74b8-2015-48b3-8c05-a942e474bfa0.roa
Signing time:             Mon 12 Oct 2026 00:21:07 +0000
ROA not before:           Mon 12 Oct 2026 00:21:07 +0000
ROA not after:            Sun 10 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        56.130.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7c:23:09:3d:7c:59:b0:ff:a2:f5:9b:14:4b:65:df:7f:f4:bc:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 12 00:21:07 2026 GMT
            Not After : Jan 10 23:59:59 2027 GMT
        Subject: serialNumber=84620fc01c7241efb0032c2bcdc44c1e2c6c349d26e9d2e2cae23affdc685de7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:da:cb:b0:61:2b:56:73:e0:ff:6c:4c:08:ed:
                    fc:31:b8:82:93:29:46:2b:c9:69:3a:6c:f9:0d:fa:
                    b7:94:2e:4c:f6:10:b9:39:0d:d3:de:67:d9:74:17:
                    d8:c0:fb:a1:78:43:2b:1a:f6:96:1e:dc:9f:17:67:
                    46:05:36:c0:1d:51:3b:39:4f:fb:85:43:f3:3a:66:
                    0a:5d:2a:2e:c4:bb:0a:e3:8d:8a:03:37:b8:33:c9:
                    8a:fd:08:6e:5c:02:2f:fc:d6:e2:8e:02:2c:dc:f3:
                    f4:3d:33:43:f7:02:76:a8:8c:aa:e6:b3:11:fb:e6:
                    19:42:25:8b:04:80:85:08:67:87:3c:4a:4f:32:dd:
                    c3:ab:2a:9c:81:59:93:41:13:66:f2:89:5f:fc:6a:
                    6e:b7:1f:10:e8:0d:be:46:75:4b:f0:2d:ec:59:08:
                    06:de:4d:b9:92:e8:1d:f7:ab:cc:38:42:15:ef:75:
                    8d:62:3f:5f:53:89:a5:bb:c0:60:1e:4a:1a:d7:79:
                    fa:4d:11:60:12:9a:ca:18:fe:da:e0:0d:a7:fd:78:
                    b7:21:9a:21:3a:89:9c:36:d3:fa:60:2d:41:3d:c9:
                    8b:10:f9:b4:de:c5:8f:0f:de:08:a2:79:c1:f2:72:
                    e0:e0:a9:1d:cd:3d:e9:f1:1b:53:d7:f4:44:a8:77:
                    bb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C3:07:9B:55:71:6D:32:76:C6:A6:11:6D:6F:E9:53:59:32:89:B8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8fdb74b8-2015-48b3-8c05-a942e474bfa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.130.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a7:e2:d7:b6:56:a0:26:e5:e8:3f:fb:66:8e:f6:a1:53:ef:2b:
         9e:ae:ad:16:5d:30:9d:74:f8:6d:3c:68:6b:e7:61:5e:99:0e:
         9f:c7:f2:48:90:4e:f2:89:26:38:4f:f6:d4:fa:5b:b4:76:82:
         67:f4:95:ae:7d:d9:90:6c:e0:e5:e0:51:3f:17:5a:d6:1a:aa:
         35:17:c7:75:7f:66:21:4a:c9:73:61:68:0b:88:3c:7c:fc:3b:
         c9:db:fd:0e:19:ae:67:ad:3a:b2:b5:74:05:5f:11:59:3c:76:
         94:8d:31:1d:aa:3b:8e:fb:7a:49:cf:2d:fe:a3:0a:2c:af:13:
         b8:08:6b:86:9c:74:c7:f0:6e:88:e8:18:0e:cb:1b:5c:b9:95:
         4a:4d:0c:75:82:89:b8:34:82:9c:c2:fe:18:f4:0c:65:cd:2e:
         68:60:f1:e9:b0:87:39:cc:f7:8b:1c:1f:1e:2d:69:f6:30:ce:
         51:2e:5b:ea:60:4d:fe:d7:97:84:62:34:80:59:85:e7:b7:0c:
         17:02:4a:76:0f:e5:81:75:f2:2b:a8:c3:43:77:90:53:55:8e:
         53:7e:83:73:5c:07:bf:cb:26:f4:3e:da:ba:c2:30:37:2b:d2:
         c8:4a:54:52:16:8a:3b:e4:8f:05:d9:20:e5:a0:91:ef:9b:e4:
         ac:a0:00:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 22:34:23 2026 by rpki-client