Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/458871ad-e65a-47a2-8f6e-097ab3d3c82d.roa
File:                     458871ad-e65a-47a2-8f6e-097ab3d3c82d.roa (raw, json)
Hash identifier:          qic6BjkOViuopAUN4DeQ71VoW4QMfU62ir/d0sPBCyE=
Subject key identifier:   EB:D3:AC:EA:51:81:17:63:8F:33:1E:00:93:4A:8A:3B:B4:6E:D2:6E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       13008F5FA06315D4B552AECD74054D274096825A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/458871ad-e65a-47a2-8f6e-097ab3d3c82d.roa
Signing time:             Wed 10 Jun 2026 10:47:15 +0000
ROA not before:           Wed 10 Jun 2026 10:47:15 +0000
ROA not after:            Tue 08 Sep 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        141.230.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:00:8f:5f:a0:63:15:d4:b5:52:ae:cd:74:05:4d:27:40:96:82:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 10 10:47:15 2026 GMT
            Not After : Sep  8 23:59:59 2026 GMT
        Subject: serialNumber=92d91a2b9f137cba7e59fd8f153c9ab5df84209434b823b4d25cb276b3600028, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:59:21:22:30:ab:4b:ea:a2:f7:23:b6:4a:33:
                    73:7c:9c:35:29:29:a7:d8:1a:da:0d:0c:6f:17:fe:
                    15:61:c7:a6:53:09:d5:04:40:88:08:33:3a:e2:99:
                    76:ea:bc:79:1a:0f:31:3f:e2:26:8a:55:69:ce:fe:
                    ef:d6:66:07:0d:4d:8b:75:66:3c:d3:65:8b:12:b0:
                    10:00:92:a9:4e:99:a6:1c:3f:dd:a7:b8:91:a3:3c:
                    cd:ff:df:b0:d7:f1:e1:b1:37:0e:5d:44:07:0c:f3:
                    53:ae:34:6f:95:24:4e:02:a7:d2:76:c0:5c:bc:e8:
                    f5:b2:46:12:f2:9b:b0:d2:f7:c2:c2:2a:51:f6:76:
                    33:02:62:1f:d5:e4:55:8b:a0:cc:3a:67:b0:b6:b8:
                    37:42:d8:71:91:e6:5b:d3:d4:1f:c5:3f:24:c6:6f:
                    fa:8b:46:86:68:9f:49:b4:76:21:b0:a5:5d:4b:8a:
                    9c:fb:02:09:26:84:30:fe:bc:90:a8:95:81:a4:35:
                    a2:91:c4:de:84:6d:24:2e:80:3d:ca:31:95:c5:f0:
                    ad:3c:f1:79:09:53:7d:a7:31:16:14:1d:4b:e9:0f:
                    73:c3:0e:5a:d1:31:18:51:11:19:9b:12:cd:46:01:
                    bc:5b:55:7e:39:c6:0c:f7:4d:a2:29:bd:9c:f2:a2:
                    dd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D3:AC:EA:51:81:17:63:8F:33:1E:00:93:4A:8A:3B:B4:6E:D2:6E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/458871ad-e65a-47a2-8f6e-097ab3d3c82d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.230.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bd:e8:16:c2:d9:18:b1:05:3b:20:4e:65:b1:e1:c1:19:59:4c:
         2e:d0:86:4f:dc:ed:ea:41:97:f6:3a:30:67:8e:b1:fc:65:79:
         2c:87:ee:8c:28:eb:3c:0d:00:9b:aa:24:a6:00:01:e8:bc:38:
         89:9b:46:b5:31:8a:15:38:ca:82:93:66:3c:18:50:56:29:06:
         3b:4d:8f:07:4a:51:da:4a:b2:a0:82:26:32:ce:51:b8:be:e0:
         eb:aa:4f:c4:9c:de:17:69:6b:91:ec:7d:88:86:6c:f1:95:80:
         97:49:94:86:8b:7d:5d:7c:81:4b:df:b1:fb:4d:ce:b9:69:f6:
         df:9d:36:59:f6:29:3c:40:ca:a4:7f:83:ef:84:72:3b:e1:82:
         a3:ff:c9:31:e6:09:5c:e1:ec:b2:a8:95:ad:78:10:77:13:92:
         4e:79:47:98:13:81:94:92:3b:a9:d8:cb:8f:29:25:49:89:1e:
         62:ae:17:d8:4a:a9:04:30:f1:ae:7e:9f:cb:4f:23:38:ea:57:
         e2:1f:28:c8:01:80:91:cc:ad:c5:79:a1:82:96:9e:00:60:39:
         06:43:20:75:e7:b2:ed:26:e0:35:c1:a3:82:65:1f:e0:89:f2:
         66:db:32:a3:96:50:2c:5e:ab:cd:f3:8e:a3:17:4b:2d:0f:e2:
         1f:28:f7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:19 2026 by rpki-client