Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16c2233b-7c35-4cc7-90e3-d9434daaada5.roa
File:                     16c2233b-7c35-4cc7-90e3-d9434daaada5.roa (raw, json)
Hash identifier:          +NS4dQEzTenboibDZSYNzIMi3z7S+McHGCy02HntH2c=
Subject key identifier:   F9:6F:26:22:26:A3:D9:7E:94:66:C3:FC:32:EE:7D:14:E7:DA:13:71
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       66874377AD7F3D1422FEE1A5CCBCE12414CDC269
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16c2233b-7c35-4cc7-90e3-d9434daaada5.roa
Signing time:             Sat 16 May 2026 02:01:47 +0000
ROA not before:           Sat 16 May 2026 02:01:47 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        40.176.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:87:43:77:ad:7f:3d:14:22:fe:e1:a5:cc:bc:e1:24:14:cd:c2:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 02:01:47 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=1b69669829e5680be55715873600411c62d2da89f4ac758e82a00cfc45af3f0d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:00:27:fe:ed:f6:bb:c0:7d:e0:86:d2:01:10:
                    f3:a6:fc:89:f6:00:90:87:b8:d9:8c:c5:6c:79:02:
                    70:9f:b0:59:eb:c3:99:a3:33:28:a1:0d:3a:63:33:
                    ef:b2:fa:74:75:b3:21:2b:77:7f:cd:bd:44:96:49:
                    2c:a3:21:9d:57:50:d1:a1:17:ec:fc:e0:e3:1e:e3:
                    e9:86:73:78:b4:0b:17:ef:bf:50:03:08:0e:6f:8a:
                    a4:01:fd:c1:c1:c8:18:66:c2:16:2d:4f:c6:67:90:
                    82:f6:76:f9:b3:20:ea:e5:4f:2a:d1:da:73:0e:db:
                    c2:8f:ec:5e:e4:16:81:36:7d:df:b4:f8:37:88:c7:
                    21:d2:d2:54:f8:a3:87:e9:3e:75:9b:55:32:c9:da:
                    c0:2c:c3:95:3b:ae:01:84:d4:1b:d4:09:71:3a:55:
                    5d:9c:9b:dc:61:f3:18:26:2a:e3:bf:1c:56:90:a3:
                    51:7f:d6:f6:90:f0:c4:a2:c2:39:24:94:fb:b6:c8:
                    c1:84:45:2e:e7:73:bd:24:a6:cd:8c:25:81:45:ea:
                    a2:ea:12:8f:60:86:21:d2:1e:ea:d9:37:23:26:d1:
                    86:58:ec:fb:1d:52:62:32:b3:7b:17:bc:43:ef:4e:
                    32:1d:49:9e:cb:c5:3b:b2:40:84:3a:02:6d:ed:40:
                    e2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6F:26:22:26:A3:D9:7E:94:66:C3:FC:32:EE:7D:14:E7:DA:13:71
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16c2233b-7c35-4cc7-90e3-d9434daaada5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.176.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         61:5b:3f:77:47:7f:4a:ce:e3:6e:4f:76:26:ec:8a:d4:9c:f7:
         4d:3b:ab:ed:32:ed:f5:81:43:da:a7:46:1c:94:63:8c:3a:a9:
         89:b9:f8:9f:54:0f:e9:97:9e:ec:e7:90:4f:b8:61:2a:1d:94:
         43:d8:af:ea:30:52:a8:41:a9:ef:af:db:16:89:62:63:2e:53:
         bb:c8:ec:17:bf:ab:a2:47:15:65:20:8e:b4:da:f4:cd:05:77:
         55:79:df:93:67:93:ad:db:95:3b:a7:ed:8f:03:a6:a3:db:fa:
         0c:38:4b:d7:c5:4f:cc:f2:f8:ec:77:b2:8c:35:5b:61:74:5d:
         12:0a:36:60:bc:07:f3:b5:38:c1:75:76:db:ef:00:f2:0c:22:
         bb:f9:9e:17:b5:18:6c:0e:43:47:0f:04:ff:25:b4:87:0d:c9:
         f2:56:e4:5b:87:75:8a:28:11:ba:6a:0d:dd:e0:16:15:94:bc:
         5c:a9:73:d4:89:ce:cb:b9:6f:44:7e:64:e9:aa:5f:0c:10:9a:
         d3:15:45:c8:4b:42:8b:4a:a3:65:b4:df:9f:66:8e:0f:3b:3a:
         f0:00:c9:90:fe:aa:e0:45:a7:01:0e:28:7f:82:db:9d:b5:48:
         70:8a:20:c2:5a:ad:2f:f4:1b:9b:40:e7:98:92:ce:52:fe:b4:
         5f:f3:fe:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:51:10 2026 by rpki-client