Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2942c7e-946f-4f9f-bcfd-f5d70bb7d59c.roa
File:                     d2942c7e-946f-4f9f-bcfd-f5d70bb7d59c.roa (raw, json)
Hash identifier:          kSIjBMM484syDVEGxTKo74vlCjF8AUHwXW0nHCkQVtk=
Subject key identifier:   C1:2F:CE:8D:95:75:5D:73:A3:01:9A:2C:95:E7:56:E4:3B:15:BA:26
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       78422052B864EF9AB2A1079B454CEF0F0DDEBE0D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2942c7e-946f-4f9f-bcfd-f5d70bb7d59c.roa
Signing time:             Tue 28 Jul 2026 19:02:15 +0000
ROA not before:           Tue 28 Jul 2026 19:02:15 +0000
ROA not after:            Mon 26 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.178.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:42:20:52:b8:64:ef:9a:b2:a1:07:9b:45:4c:ef:0f:0d:de:be:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 28 19:02:15 2026 GMT
            Not After : Oct 26 23:59:59 2026 GMT
        Subject: serialNumber=a72485487f969147205668443811d2f6dc15753c90d44339b91b31ec6e1dfeb5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a3:21:38:a1:cc:b4:d6:1f:4f:03:80:81:fe:
                    4b:a4:d9:92:4b:fc:dd:d7:15:33:21:11:51:0a:7a:
                    34:4d:db:dc:9a:f8:c3:d8:47:19:b1:e7:2b:17:94:
                    f4:80:59:7a:84:42:06:76:8e:5d:26:0e:82:6a:5e:
                    87:0b:f3:bb:37:8a:b2:a7:06:d7:df:fd:d4:35:45:
                    59:e1:69:f1:9e:cc:f6:7c:2a:bc:c5:86:4f:ad:8c:
                    81:72:6e:a5:ad:30:d3:49:d4:82:42:7d:b0:4a:34:
                    94:ec:bb:ae:84:42:9b:45:41:12:76:2d:9f:da:42:
                    49:27:42:33:23:bd:56:19:6f:91:23:70:06:d5:e5:
                    0d:d6:d8:00:cc:4c:77:0e:cb:74:28:20:81:1a:c9:
                    bc:1e:f4:4f:5c:a2:e1:9c:ba:30:13:1f:c0:da:c7:
                    7e:00:f4:4e:7f:b5:b0:4f:7a:a4:f2:34:ad:96:6b:
                    6b:74:69:b2:b6:93:a1:f2:d7:af:56:06:cd:23:6c:
                    fa:5f:74:1a:7c:c4:57:a8:b7:9d:4d:cc:28:14:47:
                    a7:46:10:4f:5c:aa:ef:f9:4b:9a:ba:a1:00:84:fa:
                    96:e5:cd:73:b3:fa:9d:3b:15:d7:94:25:8f:22:50:
                    71:34:d1:b8:be:a2:ff:4e:45:22:a1:1e:34:b9:a8:
                    9f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2F:CE:8D:95:75:5D:73:A3:01:9A:2C:95:E7:56:E4:3B:15:BA:26
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2942c7e-946f-4f9f-bcfd-f5d70bb7d59c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.178.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a2:dd:d1:d8:e1:ff:fb:e9:a6:4c:d8:c7:42:05:79:71:77:b5:
         cc:89:be:53:25:e1:57:70:bb:4a:54:7e:31:55:9a:a8:68:b5:
         c8:1a:42:e4:fb:75:0b:8c:e6:f4:a2:db:60:00:70:e0:8d:00:
         09:e4:d3:ca:18:dc:1c:ed:ed:a7:bb:2e:b2:c1:71:96:6e:9e:
         a4:18:7c:26:a6:8d:20:33:76:e3:4d:ba:aa:28:ef:64:34:2b:
         4a:ef:db:44:4f:7e:3d:cf:eb:e6:c4:b7:54:88:e8:17:54:fc:
         66:80:21:0f:82:ff:7c:f4:49:07:77:66:b1:42:f4:f8:b0:8e:
         a4:a9:85:43:ea:f2:dc:b5:10:1a:66:25:e0:a4:e9:9a:d7:3c:
         13:ca:96:13:02:75:ce:a0:e5:c5:e2:c2:b0:50:cc:1d:41:90:
         79:a7:81:7f:94:0c:b6:a1:b8:18:15:a3:54:52:67:40:9f:e6:
         89:58:11:a0:0a:41:15:f5:fe:bd:2b:5f:41:6b:89:49:4a:84:
         d7:bc:56:c8:9a:0e:66:ac:5d:58:5c:98:47:d1:19:5d:95:43:
         86:68:40:a0:59:5c:24:40:d5:21:51:5f:18:9d:9a:ee:4a:3e:
         48:0b:72:5b:28:ed:0e:5d:97:fb:c9:2a:8c:0f:7d:91:e4:72:
         22:38:8d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 13:16:30 2026 by rpki-client