Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c53a0576-1e08-4fba-a734-2cef153c43cb.roa
File:                     c53a0576-1e08-4fba-a734-2cef153c43cb.roa (raw, json)
Hash identifier:          Hih/ISwXmA5Ihtxd2MH99z3R5EwRS+oXSxyK9SIkhXo=
Subject key identifier:   56:06:CB:7E:18:A9:EF:F2:2C:76:0D:B6:A7:16:8A:93:3B:29:23:80
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6301312CF1506185ED39A85039DA26A2298179A2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c53a0576-1e08-4fba-a734-2cef153c43cb.roa
Signing time:             Wed 29 Apr 2026 00:30:48 +0000
ROA not before:           Wed 29 Apr 2026 00:30:48 +0000
ROA not after:            Tue 28 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        206.133.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:01:31:2c:f1:50:61:85:ed:39:a8:50:39:da:26:a2:29:81:79:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 29 00:30:48 2026 GMT
            Not After : Jul 28 23:59:59 2026 GMT
        Subject: serialNumber=a6b50336efdfb428d72019ffb75248a4f2c85d6122d8899cf1bd8aec1b6e16ca, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2c:6e:1e:04:14:76:d7:8d:86:3c:72:af:4f:
                    23:a6:d2:b8:e7:0f:1d:90:27:5c:07:c7:78:f7:71:
                    21:79:01:1b:b7:8b:5b:12:2b:91:b9:80:5f:15:2d:
                    b2:e9:0e:56:65:72:c7:3b:f1:a8:2a:31:17:99:e2:
                    63:7f:d0:2c:e3:63:2f:1a:05:13:c9:03:8d:20:0a:
                    da:da:d2:a6:5c:c8:0e:71:d6:22:09:26:6b:71:e0:
                    6b:a1:82:d0:4e:37:cb:ae:78:73:8c:37:ea:d7:6f:
                    df:3d:90:5c:10:37:e9:14:66:a8:ac:ef:16:ff:b1:
                    d1:d1:1f:87:b5:e0:06:f7:b6:ea:fb:3b:b8:57:99:
                    2d:a1:58:05:98:4e:40:32:5d:fb:8d:4c:a1:7e:16:
                    c0:ba:90:75:6e:33:73:dc:fb:d1:46:ca:ea:fc:b3:
                    77:e8:9d:ea:50:f7:0f:9b:66:df:48:d1:b2:1b:c4:
                    b4:fc:e8:36:31:0b:8a:bb:ff:02:f1:e6:ed:70:e9:
                    46:d9:b9:e9:8c:35:d2:11:09:f0:ac:3e:45:a0:e4:
                    b0:dc:ac:95:c9:d6:d9:68:90:47:b2:7d:37:d4:db:
                    fe:2b:40:89:57:7b:76:8c:66:a8:28:59:46:3f:3b:
                    e3:2e:4f:c3:a6:cf:1c:60:e6:19:b5:ec:45:ce:7f:
                    89:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:06:CB:7E:18:A9:EF:F2:2C:76:0D:B6:A7:16:8A:93:3B:29:23:80
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c53a0576-1e08-4fba-a734-2cef153c43cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.133.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         65:36:14:78:b9:90:b7:b0:59:98:14:79:c4:64:9f:99:34:fe:
         ad:44:fb:f6:66:1f:40:a1:37:76:d4:3c:a2:bb:6b:8a:8e:ec:
         80:1f:c0:ba:e6:bc:d6:a0:05:13:a0:ec:05:68:ff:07:5e:39:
         37:42:f5:e0:ce:d9:8c:ba:ac:70:5d:09:0d:54:c5:3a:11:e8:
         62:20:ef:c6:0a:81:8e:e7:ff:ee:75:07:f7:53:32:ab:37:09:
         0b:92:9e:c8:c2:42:72:67:83:71:e9:f7:d1:92:7e:c4:18:4c:
         58:ab:47:1e:19:e2:3d:dd:de:37:3c:8f:54:de:29:89:d3:6e:
         2f:67:49:e4:cd:c1:7c:e8:62:3a:4c:c2:9c:ab:43:63:88:18:
         02:d6:d6:c5:60:af:b6:d6:f8:cf:88:94:b5:2d:ab:b6:a3:0d:
         7c:24:80:08:b1:36:04:05:fd:c5:9f:96:a2:14:a8:ff:a3:a0:
         08:36:17:d7:63:33:77:35:73:86:41:3f:85:ca:4f:d3:89:75:
         8b:4d:35:1f:b0:5a:83:c7:d3:cc:19:53:68:fc:a1:05:f7:2e:
         db:d5:4e:75:0f:aa:ae:21:9a:bb:f4:5f:36:67:2c:fd:43:27:
         ec:a5:23:5b:4c:9f:af:84:35:00:6f:1e:23:41:61:4c:15:f1:
         f2:a9:e1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 16:13:23 2026 by rpki-client