Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b205a6d-48aa-4da0-bceb-029957973791.roa
File:                     0b205a6d-48aa-4da0-bceb-029957973791.roa (raw, json)
Hash identifier:          Ybfk8jiwVMyzx6VfjlBcoQ7Mx6JA34BM86FNxYCjYa8=
Subject key identifier:   48:95:3B:1B:D6:B4:73:2D:56:28:A3:5F:90:C2:F3:B1:34:02:B0:EA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       78F5C1F8FB194F4FA1F9783D8D878F32F5947585
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b205a6d-48aa-4da0-bceb-029957973791.roa
Signing time:             Sat 16 May 2026 00:50:13 +0000
ROA not before:           Sat 16 May 2026 00:50:13 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.118.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f5:c1:f8:fb:19:4f:4f:a1:f9:78:3d:8d:87:8f:32:f5:94:75:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 00:50:13 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=c2a7b5f8aa32782d5f3852b1cc1d12cf42ae463d32e47d56b5a6fc190b86043d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:45:22:01:e7:29:7c:df:2e:ac:6a:99:ea:35:
                    d4:2b:15:e0:70:14:32:27:5c:27:ee:09:76:8f:5e:
                    69:c4:80:62:88:ca:9c:f4:3f:39:60:f3:1f:aa:7f:
                    68:1f:a5:24:fc:e0:0a:32:a7:1a:26:62:0b:02:d3:
                    e2:69:e4:d5:3e:c6:00:1e:29:d0:af:3d:21:83:d3:
                    3f:37:d5:3c:2b:e1:43:e3:3c:6f:ff:54:cf:f8:00:
                    2d:53:7b:42:7f:59:db:9a:b6:72:2c:da:ed:38:d4:
                    95:e3:0f:99:2a:ae:7b:a1:ef:da:d5:0a:b8:00:b0:
                    bb:02:00:7a:48:22:5a:4c:75:ee:d7:0a:af:67:f5:
                    ad:da:b6:cd:d0:1a:ec:a6:59:f6:18:23:c4:b9:e6:
                    5a:c6:1f:f4:76:64:ee:85:f1:19:9d:0c:80:b1:a2:
                    dc:0e:aa:b4:74:cc:38:dd:31:4f:1f:40:9c:ff:a4:
                    19:b7:3f:b4:a9:75:8a:dd:ba:fd:db:26:29:a0:73:
                    64:0d:aa:7f:ec:89:a6:9a:e4:82:5e:d1:87:24:18:
                    83:1f:61:5c:f6:70:60:18:ba:84:b3:57:9b:2a:b3:
                    7f:87:a4:ec:63:47:ce:1c:19:31:8b:9d:0f:48:76:
                    25:d7:a4:f6:fe:dc:45:ec:1e:2d:bf:d6:7d:26:42:
                    07:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:95:3B:1B:D6:B4:73:2D:56:28:A3:5F:90:C2:F3:B1:34:02:B0:EA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b205a6d-48aa-4da0-bceb-029957973791.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.118.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3f:59:3f:4f:7c:51:8b:3a:31:af:19:3f:4f:3e:b1:5c:79:56:
         7d:ca:f3:76:9d:3c:70:2a:b6:f4:7b:c2:31:21:ea:0b:ca:ee:
         bd:1a:08:3d:ed:f2:39:57:f3:d3:80:d0:5d:c8:f5:fd:ad:0a:
         75:b8:bf:9d:a1:9a:f1:e5:e9:c1:1a:eb:8e:53:06:e8:f6:dc:
         8d:33:a3:75:16:f3:6a:f6:dc:fd:99:94:25:32:a4:0f:a0:5c:
         8e:86:bd:f6:80:4a:d5:75:99:4c:35:68:f4:6d:e5:7b:50:4c:
         08:18:16:19:0d:b5:73:9e:58:e9:53:c4:68:f5:6a:10:f7:ae:
         51:e0:86:17:bb:31:7b:6d:aa:1c:8c:10:41:38:53:7b:2b:ac:
         44:d9:5e:4f:d6:87:3c:c2:4a:34:6c:bb:ea:11:0d:63:9f:17:
         6a:2e:67:f8:ad:0a:eb:78:8b:1b:58:36:4f:9d:28:46:e8:24:
         3b:8b:fc:38:f5:73:24:26:49:1f:34:5e:49:7c:59:21:8e:dd:
         6f:b4:da:37:eb:24:42:83:26:29:37:4e:36:ec:4a:ff:19:67:
         2a:72:92:23:15:fc:44:58:4a:bd:b5:2b:d0:c1:2a:92:2a:9d:
         14:ae:40:93:0a:27:e9:28:64:9b:86:d0:8e:03:0f:d9:52:1e:
         6f:b0:1f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:52:23 2026 by rpki-client