Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66d09b39-1446-4e42-80fc-0169f63763f8.roa
File:                     66d09b39-1446-4e42-80fc-0169f63763f8.roa (raw, json)
Hash identifier:          Urd5Yqb2ERQftnFYLDiZP04EPM5IreBb+VV7Zjl1DAQ=
Subject key identifier:   66:DF:25:C2:B4:D6:54:28:16:2F:61:B6:F9:B9:1D:9A:7C:DF:A1:96
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7C16B3952E8244325DD8761C6C272C93E2275964
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66d09b39-1446-4e42-80fc-0169f63763f8.roa
Signing time:             Sat 16 May 2026 00:21:13 +0000
ROA not before:           Sat 16 May 2026 00:21:13 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.56.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:16:b3:95:2e:82:44:32:5d:d8:76:1c:6c:27:2c:93:e2:27:59:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 00:21:13 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=8dd2b83c209c0f97fb6dcc69fa63af8046f3f92862951086b7700a4d45ee6bf8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e6:ea:c1:94:27:5f:00:cd:27:c1:a0:cc:cb:
                    ff:13:31:0e:18:a3:8d:a6:47:a4:9e:85:0d:86:cd:
                    d1:11:e7:2e:6a:71:6c:37:c3:bd:5c:ab:91:07:16:
                    1a:9b:c5:56:db:6f:9b:69:38:e5:2a:53:aa:98:b0:
                    2d:02:5c:f6:93:90:a8:f4:ab:54:9d:27:51:9f:f8:
                    22:09:0b:4d:38:d1:89:06:d5:e3:55:3d:11:63:cc:
                    ed:d0:29:8b:f1:ae:94:53:be:8b:73:0c:a4:74:97:
                    bb:98:c4:34:17:b0:87:4a:90:8c:d2:c8:6f:69:b4:
                    ef:1f:92:de:98:35:8e:5a:66:e2:7b:5c:0e:16:88:
                    08:a8:f2:61:fd:31:04:73:0e:fd:e7:4a:77:91:39:
                    3b:8d:f9:6a:21:cb:f3:b9:ca:3a:9a:b7:04:43:2e:
                    58:b0:25:7b:bc:48:d9:04:31:5f:18:c4:47:ba:21:
                    6e:a6:d0:0e:79:d6:c8:3b:09:ae:a0:0e:9d:f1:2f:
                    9d:e0:62:3b:6f:bf:77:e9:8b:1c:2d:68:27:d6:70:
                    40:aa:f2:3d:0a:e5:aa:03:f3:8f:f9:87:cc:8b:f0:
                    e1:c2:8a:26:fe:15:1c:33:8e:a7:26:a9:65:8a:4a:
                    41:34:a2:8c:16:22:95:33:bf:32:30:7d:d0:65:3f:
                    29:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DF:25:C2:B4:D6:54:28:16:2F:61:B6:F9:B9:1D:9A:7C:DF:A1:96
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66d09b39-1446-4e42-80fc-0169f63763f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.56.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         0d:0e:7e:cd:54:d2:8e:83:1b:68:17:43:bb:1c:8b:14:87:3f:
         28:e7:49:d8:a3:70:75:64:bf:27:70:36:22:51:7d:e7:5f:19:
         70:cf:0a:a4:dc:bd:5d:9d:8c:84:b9:5b:c0:bf:f7:cb:4e:cb:
         b6:97:68:9a:f5:10:c8:8b:e3:16:a8:70:b5:c7:e3:a9:98:6c:
         3b:81:17:ce:d2:e6:ca:a0:1d:07:94:32:6b:dd:ab:bd:09:ec:
         3b:c6:7f:bd:74:47:64:a8:5d:de:fe:71:aa:3b:9b:5d:63:ff:
         03:7e:d4:71:ba:08:3f:9f:24:0a:20:b6:e4:dc:28:65:c4:2d:
         34:17:24:82:90:27:d4:33:6e:1c:06:2b:0f:ca:06:c6:1d:1c:
         cf:c6:a9:01:5e:ad:83:6d:ac:98:d2:f6:7b:d6:c1:94:1a:04:
         c5:24:22:a3:5e:26:be:51:01:17:e9:96:ad:80:0b:8b:a0:ae:
         7e:2d:9a:6f:d4:2f:47:2f:9b:46:30:6d:58:ed:7a:2f:99:c0:
         f3:4e:3c:19:d9:5b:d0:e1:fc:0c:86:53:0d:cb:f1:4a:0d:99:
         6b:ab:18:a7:89:ca:8e:ba:1e:44:45:a2:59:49:cd:51:1f:c0:
         38:65:fd:3d:ae:9f:11:0f:70:0c:94:8d:4d:11:b9:e7:03:af:
         19:b2:db:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:19:24 2026 by rpki-client