Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a53817fd-b599-4741-a058-100f3660315d.roa
File:                     a53817fd-b599-4741-a058-100f3660315d.roa (raw, json)
Hash identifier:          3G+CqHvuhfm7UlwD2tGSfGaDqh5FazXtDUCsNr+IRzA=
Subject key identifier:   0C:E2:5F:E0:98:AD:EE:99:C5:1B:FF:C5:65:11:FD:17:FB:F7:F2:94
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1314C835E00031A3ABFB6FC087E5E8B9FA633720
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a53817fd-b599-4741-a058-100f3660315d.roa
Signing time:             Tue 13 Oct 2026 00:30:13 +0000
ROA not before:           Tue 13 Oct 2026 00:30:13 +0000
ROA not after:            Mon 11 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        163.3.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:14:c8:35:e0:00:31:a3:ab:fb:6f:c0:87:e5:e8:b9:fa:63:37:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 13 00:30:13 2026 GMT
            Not After : Jan 11 23:59:59 2027 GMT
        Subject: serialNumber=6456ce5b9b1f0f696f09145767ea099b89cf444bc5af4196e53e62d909837f04, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cd:6f:bb:2b:de:c8:34:4d:90:5b:49:9c:94:
                    a3:0a:35:35:2f:88:64:9c:19:46:28:85:00:a9:b8:
                    09:b6:ed:01:d1:34:91:77:85:e5:83:2a:40:69:ea:
                    14:64:b7:21:a0:e6:7e:1d:cf:b1:dd:e9:4b:1a:7f:
                    30:76:73:a8:86:53:68:9c:57:ad:ef:8c:12:0e:cd:
                    b8:78:88:d0:01:2b:2d:f1:7d:66:84:f8:dd:cb:c9:
                    a6:a6:fe:0b:ef:07:96:71:f7:bf:ed:b2:11:3f:3f:
                    ea:fb:ee:85:ac:d5:31:db:50:34:dc:15:00:39:67:
                    c2:f1:96:7c:8f:4e:e9:24:92:a6:0d:f0:4a:ae:8c:
                    f5:f1:eb:ef:57:4f:f0:3a:d9:61:8d:8f:c3:48:58:
                    4b:c2:3c:f2:6f:23:2e:14:26:ff:08:80:87:43:ba:
                    07:aa:d0:fb:85:80:11:67:2f:0d:d1:35:8c:a4:94:
                    97:35:c3:ae:f6:92:75:20:74:6d:69:1f:f8:ae:3f:
                    a5:ca:77:5d:a1:3f:bf:37:42:98:53:44:9b:bf:e5:
                    33:c9:fb:2b:d0:5c:35:88:4d:8b:aa:3e:06:32:bc:
                    04:79:21:7f:76:51:74:31:91:23:d2:41:72:7c:21:
                    ae:75:62:ea:48:18:9a:90:91:00:dc:1b:ec:a5:a4:
                    ec:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E2:5F:E0:98:AD:EE:99:C5:1B:FF:C5:65:11:FD:17:FB:F7:F2:94
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a53817fd-b599-4741-a058-100f3660315d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.3.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4f:87:57:e4:da:cb:b1:22:ff:16:10:df:ed:8f:ea:4d:1a:36:
         44:ad:21:a4:f1:7f:ab:8d:d5:5c:9a:92:d9:c1:a1:1c:17:64:
         0a:86:3d:72:72:71:74:65:28:f7:82:1c:6a:17:ab:a7:1c:66:
         2c:93:a1:28:98:1e:20:13:0e:91:54:9b:25:47:24:b0:ed:78:
         1b:9d:d7:a4:cb:42:94:0d:3c:fc:42:b5:a7:a2:e8:7a:54:22:
         92:2f:09:f6:da:c6:a0:b1:48:22:91:f8:e7:56:de:49:e3:90:
         d1:2c:1d:f1:8e:0e:c8:92:18:d5:07:6c:a5:93:5f:a9:0b:43:
         48:4c:dd:4d:64:1f:66:6f:3b:28:7d:7e:4b:f6:34:50:a2:0f:
         98:f5:02:34:6f:92:14:b0:78:61:aa:ea:63:0b:68:a5:fd:e8:
         3b:4d:91:f7:c3:01:0e:58:ef:4a:7f:ff:0d:85:36:47:88:d1:
         aa:58:9c:79:0d:06:f2:90:c6:54:27:a3:b4:e8:58:57:cf:3a:
         40:6c:5e:fb:89:44:13:94:5d:14:8e:e6:05:fa:94:41:20:23:
         31:d8:11:fe:ef:38:a1:ab:7e:d1:98:76:ef:eb:4b:28:57:04:
         5f:27:79:63:ed:c4:47:c8:ae:e1:11:4d:3c:b6:7f:61:16:d4:
         11:6e:12:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:07:29 2026 by rpki-client