Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19942597-bc32-40b1-ac29-c19e9c9fd9ce.roa
File:                     19942597-bc32-40b1-ac29-c19e9c9fd9ce.roa (raw, json)
Hash identifier:          m/euN7t0NHMpHPSsPe/wyKvGzSOCh3zEiv49x6CGPaE=
Subject key identifier:   79:74:0F:FF:34:A2:A6:CB:28:F2:7D:1F:1D:4D:B8:D2:86:D8:CA:0E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       533762A70D227DE410F2961CA934948DEDD5EF79
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19942597-bc32-40b1-ac29-c19e9c9fd9ce.roa
Signing time:             Fri 15 May 2026 02:01:22 +0000
ROA not before:           Fri 15 May 2026 02:01:22 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.19.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:37:62:a7:0d:22:7d:e4:10:f2:96:1c:a9:34:94:8d:ed:d5:ef:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 02:01:22 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=7f74d97b5f5326c48d79db9b2c38b57ae1f26964a4fa3382a9bae24707dc7cfb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:09:91:17:84:9a:32:ab:32:df:79:51:3d:2b:
                    4f:82:ed:f7:77:c1:62:3b:47:03:af:e8:9e:b8:3c:
                    7e:00:fa:cc:b2:7e:94:5a:fb:a5:ab:28:13:9e:a0:
                    46:6e:6c:fc:6e:e9:b9:d9:a6:2c:8a:2a:75:43:26:
                    e3:1f:91:29:ba:7d:04:5f:cb:b4:18:aa:64:d2:1a:
                    3c:5e:0c:16:51:66:9c:c8:f8:e4:61:22:8b:59:ad:
                    49:ae:0e:d1:60:63:67:a5:8f:2f:cf:53:e8:a3:1f:
                    99:c3:8f:06:50:57:6d:52:fa:26:51:8c:79:3d:29:
                    7b:c4:3a:13:1f:2a:df:c8:64:92:0d:72:19:b6:46:
                    a5:8a:ac:0c:5f:95:fa:cc:78:f5:f2:c6:a1:08:50:
                    87:13:c7:3e:57:fb:17:24:fa:aa:38:95:8d:c7:cb:
                    7a:58:3b:dc:7d:e7:c8:d6:f5:26:f3:53:40:68:27:
                    00:48:26:5f:6a:ae:0d:b3:ce:ad:e7:66:e3:d5:9a:
                    be:8c:d1:fe:6c:5d:df:8d:84:3e:4b:28:50:bf:0d:
                    72:55:ea:4c:8c:85:8a:93:74:8e:80:3f:d0:6b:01:
                    57:65:fe:87:de:be:1a:ff:d9:aa:79:aa:31:6b:72:
                    41:4a:8b:87:ea:8a:be:ce:25:ef:33:ce:00:5f:48:
                    08:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:74:0F:FF:34:A2:A6:CB:28:F2:7D:1F:1D:4D:B8:D2:86:D8:CA:0E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19942597-bc32-40b1-ac29-c19e9c9fd9ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.19.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         27:0b:2a:fc:fc:ec:f4:a4:2c:82:79:d3:94:f3:9f:52:77:7d:
         e5:fc:bf:5b:98:94:88:ec:7c:bf:4b:d7:4b:2f:1f:84:64:c8:
         65:ee:a3:bc:28:54:d3:7b:46:38:ff:71:a3:40:f1:b0:ec:6a:
         35:a7:49:e1:45:b3:3f:8c:69:20:7b:59:58:13:0b:11:48:42:
         62:ff:f6:ef:cc:d6:8a:66:8f:ca:d2:8a:70:cf:9c:c2:09:8e:
         63:d8:a5:d4:b4:b0:63:b9:fd:56:e2:25:4a:9a:ad:40:ae:25:
         fd:75:5a:62:64:fa:20:4f:9d:38:f4:d0:be:27:0f:14:7a:a3:
         d3:b4:88:74:2b:d5:d8:ac:d3:44:74:fc:34:a9:00:23:97:7c:
         76:a5:d0:81:78:28:ed:83:eb:75:52:52:7b:0b:5e:6b:77:95:
         d3:9e:2f:70:3d:9a:e9:51:e1:84:29:41:20:8a:f3:64:75:88:
         4b:31:c8:22:56:9b:40:18:88:b9:05:79:2f:47:6a:ae:58:47:
         7e:69:c6:62:b2:36:e3:10:b1:f2:0f:54:ca:8d:f8:39:7f:52:
         dd:f2:06:3f:52:5d:26:fa:2f:ae:08:f7:95:31:52:9d:f4:c9:
         8a:6b:85:fc:73:69:17:70:10:47:fe:1b:72:0d:fe:b6:dc:44:
         96:22:03:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:29:29 2026 by rpki-client