Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70aa4285-cbd0-450f-b52c-a70ba1e394d0.roa
File:                     70aa4285-cbd0-450f-b52c-a70ba1e394d0.roa (raw, json)
Hash identifier:          YaX/4CsL8zYFLFKo+nTg9CAlM1j/pDGv0gganBK0Bxg=
Subject key identifier:   67:55:8C:B0:17:B7:77:41:22:C3:D8:E5:24:37:FE:6F:D0:C0:11:FF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1694C00293F9F2027787CF8A5EED8D45F7581742
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70aa4285-cbd0-450f-b52c-a70ba1e394d0.roa
Signing time:             Sat 16 May 2026 01:10:09 +0000
ROA not before:           Sat 16 May 2026 01:10:09 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.182.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:94:c0:02:93:f9:f2:02:77:87:cf:8a:5e:ed:8d:45:f7:58:17:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 01:10:09 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=2672e71c64f6447f274274f04c2eadeabeec32bd4d6d58fafa97823ed450c39d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0c:3f:35:8f:0d:fd:21:06:1b:b5:9d:76:52:
                    9f:0b:de:93:af:e2:62:f7:4b:6c:52:45:95:52:7a:
                    17:66:66:8f:46:a3:74:d1:28:b0:82:06:34:13:31:
                    50:fb:64:bb:37:8d:20:e4:c2:ba:b4:35:2a:a4:f1:
                    df:9f:85:4a:39:e0:5f:d9:1c:d7:a3:cb:13:ef:27:
                    e1:21:dc:4c:03:1f:1d:f6:57:c5:74:c0:cc:86:9f:
                    3d:df:8e:58:25:7b:6e:21:6e:39:3e:ed:29:41:45:
                    58:4d:01:f2:a8:e5:16:ef:79:d3:b4:e3:c5:64:b5:
                    9c:d5:04:92:88:1c:42:ad:eb:35:c4:c2:2c:e7:39:
                    f8:c5:54:8a:1b:7f:0d:1d:ed:9d:21:20:40:c9:cf:
                    71:8d:11:e9:59:c3:95:25:b5:70:7d:32:bc:32:44:
                    4b:ee:d6:95:79:95:a2:23:12:c4:76:16:7d:7e:f3:
                    94:bc:b4:e5:9d:3c:7c:29:0c:29:8b:b3:93:8e:a1:
                    ee:a7:b8:82:e1:ec:0c:f2:ad:ed:4a:cb:9e:b3:c7:
                    b5:93:03:1b:03:c7:c3:dd:8c:ba:ba:e5:88:b4:e9:
                    1f:56:3c:2e:da:20:c8:f6:63:9d:38:52:31:fc:93:
                    3a:39:ee:03:f7:94:54:d2:dc:97:2e:a1:55:26:ab:
                    82:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:55:8C:B0:17:B7:77:41:22:C3:D8:E5:24:37:FE:6F:D0:C0:11:FF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70aa4285-cbd0-450f-b52c-a70ba1e394d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.182.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:a4:a3:72:2b:a7:91:d0:3b:ce:58:60:c8:e5:12:89:ee:73:
         37:1c:f7:fe:19:b1:5f:55:ee:08:67:14:1b:94:ee:20:5b:52:
         e1:96:81:55:8d:a6:3c:45:a8:1b:53:14:86:65:df:0e:90:7a:
         81:6f:ab:ec:34:f1:e5:aa:ce:c8:22:1b:05:09:17:78:33:27:
         1a:68:38:cb:80:8f:c4:f4:b7:b4:97:cd:4c:46:d7:c0:82:3e:
         e4:9b:89:55:a5:0b:f7:1c:fb:a0:c8:f9:a9:45:09:19:56:0a:
         f5:e8:43:1b:40:81:dd:ec:5a:0c:f5:59:fa:89:a9:ce:55:23:
         dd:0e:e2:25:2a:33:31:5e:0a:45:dd:8a:97:c8:74:dd:0c:46:
         dd:19:2f:ec:c0:c7:8c:4a:20:5b:c3:8d:fa:50:5d:c8:9b:20:
         b6:22:14:0d:be:72:21:8b:41:16:d6:0e:93:07:73:64:27:d7:
         60:28:26:06:fb:57:69:6e:d0:c5:42:5a:93:f9:13:18:85:67:
         b7:05:03:bc:b7:9e:54:8f:8e:6d:66:d4:4c:67:d0:d1:a5:72:
         ff:c4:cf:71:63:a3:2a:bc:97:2a:4d:6a:9d:94:57:62:51:a8:
         e7:0a:c1:ec:7a:43:b8:c7:3c:2a:e4:04:fe:b1:df:be:11:b0:
         8b:d1:77:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:50:32 2026 by rpki-client