Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0186970e-89aa-4c95-ae6f-6bb7b45d5b25.roa
File:                     0186970e-89aa-4c95-ae6f-6bb7b45d5b25.roa (raw, json)
Hash identifier:          /0AhEt69n7K7D+HVzAFV+Ue8hO1gw8ioxaYE0JqWw3g=
Subject key identifier:   91:92:F1:ED:12:AD:7B:E1:79:07:7D:59:A1:D0:AB:0C:47:30:95:30
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5F815AC5C6EF53D5178680946EC382E2904C312D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0186970e-89aa-4c95-ae6f-6bb7b45d5b25.roa
Signing time:             Sat 28 Feb 2026 00:10:51 +0000
ROA not before:           Sat 28 Feb 2026 00:10:51 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.116.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:81:5a:c5:c6:ef:53:d5:17:86:80:94:6e:c3:82:e2:90:4c:31:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 28 00:10:51 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=f6881576eace903bb46790b1c25b75be030a8d93d3617eb621cfcea8be2ef9d5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0f:5d:e5:fa:89:ef:6c:77:60:09:cb:f8:dc:
                    af:45:50:85:24:ee:d2:cf:a4:28:57:1e:5d:e9:1c:
                    72:9a:f5:a1:f9:be:6e:dd:9f:c9:fc:5e:f8:62:10:
                    33:a5:e7:ff:47:0c:da:60:dd:7e:b7:e5:9a:6e:f3:
                    eb:1f:56:d5:63:32:2e:24:5c:78:c4:f0:f9:31:b4:
                    73:77:1c:fe:db:92:ca:b2:38:d7:09:23:ce:da:fb:
                    14:3a:ec:8b:8f:cc:f2:20:1f:2d:fa:7a:10:dc:df:
                    12:74:16:d8:11:5b:25:f6:1a:8a:aa:96:32:10:a1:
                    28:f5:09:4c:ac:2b:f6:1e:92:92:f1:d4:53:00:53:
                    8e:fd:f2:e6:2c:11:49:b1:39:8a:1a:4b:ff:7d:b0:
                    24:08:75:b8:90:4d:2a:1e:cd:01:eb:14:27:3b:16:
                    fe:46:89:94:fe:95:8d:1b:a0:12:5a:c0:b8:ba:4c:
                    e9:e7:ab:5a:5c:9f:c6:03:4b:4c:f1:83:86:e5:dc:
                    e9:58:5f:51:53:ed:18:b1:8a:4d:9a:31:0d:52:1f:
                    49:4f:d2:2a:77:74:04:8a:c9:74:e6:11:20:47:d1:
                    09:82:f0:f4:9b:0b:b6:7a:6b:6e:26:02:10:c6:35:
                    a3:c4:c9:7f:a8:80:fd:cb:7c:aa:34:ee:6c:6f:ea:
                    1f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:92:F1:ED:12:AD:7B:E1:79:07:7D:59:A1:D0:AB:0C:47:30:95:30
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0186970e-89aa-4c95-ae6f-6bb7b45d5b25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.116.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ce:a2:a7:78:ef:62:b9:8a:e4:f5:c4:db:60:5e:03:55:d0:df:
         6e:29:43:ef:2f:b9:0a:4a:5b:a4:33:04:48:8b:9e:11:f1:cc:
         26:dc:1d:3d:14:55:50:79:49:68:99:e1:8b:07:e5:25:fa:c1:
         cf:f6:84:ba:4f:a3:44:99:8d:f3:a4:72:61:ca:5d:e8:be:b1:
         bc:4d:5a:a3:d9:9b:42:57:38:f0:dd:76:c8:68:b3:6d:70:37:
         16:99:dc:ac:9f:ed:50:ca:a8:29:91:a9:2e:7d:94:4c:d6:8a:
         c8:10:58:ff:3c:4c:1f:6d:63:e1:ef:d9:fe:5d:38:dc:79:78:
         3b:83:6f:86:e0:5f:47:e8:fc:6f:4b:ce:b6:5f:0e:47:5c:9a:
         fd:ee:63:17:c9:fb:09:0f:12:0a:d1:20:93:3d:9d:93:56:fa:
         22:fb:26:df:ed:c5:57:e9:21:14:c4:41:bc:05:33:85:3b:e5:
         00:f7:b3:9c:34:c0:12:af:e6:f6:11:78:12:01:a8:37:b4:0d:
         06:dc:bc:e3:09:4b:d6:6a:c5:9e:48:cb:8e:5b:ec:3d:18:e3:
         78:7c:20:d6:6d:cb:99:b4:e5:f6:1e:ec:85:27:ca:b5:79:62:
         03:37:b1:0c:d0:9e:b6:4b:f6:4a:da:f6:5e:a8:66:51:e8:f5:
         0f:6b:ae:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:20:12 2026 by rpki-client