Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe061fe4-7f72-4eb7-8ef9-28f55bb762e6.roa
File:                     fe061fe4-7f72-4eb7-8ef9-28f55bb762e6.roa (raw, json)
Hash identifier:          IDZTwl4CcEsx+TEXnD7xCygu4eBJBgM59/qfrx5moiw=
Subject key identifier:   27:7E:59:CD:E2:5E:54:C8:B9:8C:E0:F3:CF:3E:3D:D5:AA:56:11:F6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5A9C3DD1BCC1552F8CDA85AADCB8077956AC228F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe061fe4-7f72-4eb7-8ef9-28f55bb762e6.roa
Signing time:             Wed 27 Aug 2025 00:41:45 +0000
ROA not before:           Wed 27 Aug 2025 00:41:45 +0000
ROA not after:            Wed 01 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.78.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:9c:3d:d1:bc:c1:55:2f:8c:da:85:aa:dc:b8:07:79:56:ac:22:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 27 00:41:45 2025 GMT
            Not After : Oct  1 23:59:59 2025 GMT
        Subject: serialNumber=030f413c7a5810e0ebd7b80d7e6516c1280d0640648eb75b3d16eedbc9703f7b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a4:3c:69:ec:82:31:02:30:cf:b5:6f:8b:91:
                    8e:13:ae:d8:db:20:1a:14:ca:b0:de:65:db:03:19:
                    9c:a3:a5:29:47:38:4b:fc:96:af:ab:e5:ef:dc:4a:
                    7e:61:1a:8e:8b:d3:41:8b:ba:de:f9:3c:2a:52:59:
                    cd:86:6c:aa:b0:89:10:ee:b2:e8:cf:16:f8:2b:50:
                    9d:f2:d7:e6:47:1e:7b:fd:a2:7c:3b:ca:9a:64:f5:
                    f0:f5:89:b5:7b:25:ee:1f:7d:58:cf:13:98:6c:b0:
                    30:eb:48:9e:9d:f1:79:a3:d9:95:69:8a:18:f5:2b:
                    c6:bf:d4:51:4d:61:8b:68:53:28:eb:25:59:82:1c:
                    5a:b3:12:bc:7b:73:0a:cd:c5:b2:12:e4:c5:83:3d:
                    a4:3f:e9:4b:05:60:b4:d6:3c:cc:d2:2b:13:d1:53:
                    12:bc:29:f0:8c:2f:75:d2:88:3f:d5:90:34:e8:a9:
                    ec:77:1f:12:1e:42:5f:ec:d1:64:e5:f7:33:c7:38:
                    5d:b5:e2:95:37:a6:96:6a:40:f6:b1:46:00:3d:8a:
                    8c:34:84:14:52:5c:b0:f9:49:e1:71:b2:0c:b8:fa:
                    d1:42:82:4a:ad:80:1f:85:8d:6b:c5:76:5c:61:70:
                    40:69:3d:37:69:e7:e5:fd:46:72:12:26:78:61:72:
                    23:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7E:59:CD:E2:5E:54:C8:B9:8C:E0:F3:CF:3E:3D:D5:AA:56:11:F6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe061fe4-7f72-4eb7-8ef9-28f55bb762e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.78.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         25:c3:83:9a:77:11:76:a1:3b:6f:94:73:e3:d7:e1:04:20:a5:
         9f:90:73:8e:c7:ca:62:97:fd:90:b6:ed:87:6c:c2:4b:cb:97:
         82:20:49:99:d3:c7:22:15:bf:f7:a1:27:fa:7c:cd:1d:09:8e:
         85:ec:27:d7:81:fe:09:ac:6a:8c:3b:e2:9b:22:70:e3:33:e6:
         c0:9f:47:9f:bd:53:7c:cb:83:7d:bf:ff:f2:df:b4:14:0d:21:
         28:18:dc:3b:15:69:3f:1d:bd:47:b6:1c:07:ea:a1:00:42:11:
         39:f8:cc:96:a6:26:ff:8a:2f:27:f0:4b:f5:06:75:86:ef:a2:
         f6:53:98:c3:fd:f8:0b:be:00:76:91:b0:37:fa:3f:a1:08:98:
         5b:84:fb:a6:2a:40:11:57:ee:36:81:3b:f0:e4:83:26:d4:c8:
         f8:1e:4f:e1:71:d4:ca:37:74:a1:a5:13:5d:b5:94:06:72:a6:
         42:69:93:ba:93:66:56:ff:ef:27:fc:bf:78:a9:89:3f:19:9a:
         9a:72:82:14:c1:72:0e:be:a1:68:79:c9:fc:0c:8a:90:c1:ae:
         69:c9:25:ab:82:bb:d2:2f:68:fc:52:b1:92:c8:46:69:72:19:
         e4:2c:db:54:d9:93:b0:96:0d:59:97:2c:fa:98:1e:28:f7:65:
         d9:b8:51:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:05:56 2025 by rpki-client