Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/799c386f-67bd-428b-8c5a-c04024c7aaf2.roa
File:                     799c386f-67bd-428b-8c5a-c04024c7aaf2.roa (raw, json)
Hash identifier:          TJx50BaEMT8sFfFAcj518aBKzACEaFl9WpqwoweJFVo=
Subject key identifier:   18:E7:D7:6D:9E:A6:2E:1E:CA:38:4C:D3:6D:89:DC:D5:32:F6:6C:E6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       411D4198216648045C9265977A9B106498385B25
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/799c386f-67bd-428b-8c5a-c04024c7aaf2.roa
Signing time:             Sun 08 Feb 2026 00:50:38 +0000
ROA not before:           Sun 08 Feb 2026 00:50:38 +0000
ROA not after:            Sat 09 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.137.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1d:41:98:21:66:48:04:5c:92:65:97:7a:9b:10:64:98:38:5b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb  8 00:50:38 2026 GMT
            Not After : May  9 23:59:59 2026 GMT
        Subject: serialNumber=c118d765deebe88adcf4a9ac86a7feafa7eee4fffa4d2ec2c79503dbc7ccbb81, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d8:ba:d3:be:a3:02:c2:c0:10:c2:5a:65:66:
                    38:e2:9d:0a:1a:8e:4a:f8:86:e8:0f:ae:f5:40:de:
                    9e:9a:61:ac:c9:c5:50:10:ef:27:00:41:5d:37:51:
                    1d:6a:fd:9e:84:ca:a8:5f:b8:15:9d:42:86:91:2d:
                    24:0c:38:d7:d7:08:fb:68:fe:68:ff:84:40:76:fd:
                    b9:a8:30:46:2d:92:01:a6:75:58:ff:96:b6:cf:a7:
                    eb:ff:67:07:a7:67:3f:fa:b0:4a:bf:f9:73:f8:ef:
                    26:25:30:62:ef:c9:22:ce:50:6c:ae:23:36:ad:b0:
                    d6:94:d1:82:4c:50:7a:d0:00:97:ee:b1:3a:8f:5b:
                    ff:63:fc:90:55:f4:62:52:cf:02:4b:9f:e0:72:9c:
                    5a:8d:94:61:27:66:a3:0d:2e:44:40:4b:0c:87:a9:
                    6d:9d:fe:7b:60:f3:12:ee:71:cc:65:19:ea:b6:b0:
                    c6:bc:76:aa:6e:08:48:9b:b5:ed:a0:04:76:67:a9:
                    a0:f6:58:d6:e0:7a:7a:db:b3:48:53:0c:0c:3d:bc:
                    f3:a2:a0:f5:82:aa:45:2b:c5:44:6f:33:ac:bc:0e:
                    06:39:1e:f0:4b:74:62:8a:34:67:b8:2b:43:25:d5:
                    ea:86:fc:49:50:ee:78:bc:25:92:b1:35:3c:f0:e1:
                    5a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E7:D7:6D:9E:A6:2E:1E:CA:38:4C:D3:6D:89:DC:D5:32:F6:6C:E6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/799c386f-67bd-428b-8c5a-c04024c7aaf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.137.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a3:e3:7f:42:58:87:a7:45:24:cb:20:ce:eb:64:8f:94:7a:c7:
         ba:7e:ff:be:ea:e4:50:d6:27:23:5a:dd:b4:24:26:ee:6d:60:
         7c:74:b7:24:ef:74:6e:da:86:75:99:ed:c9:be:98:70:ad:ca:
         a7:1d:fa:b2:7d:b5:bb:af:46:7c:b7:c3:a6:c6:fd:a1:b0:bd:
         d3:a6:78:b1:06:00:57:e3:ec:2d:1b:96:19:7f:ae:94:63:50:
         d8:7c:5d:35:58:a8:1c:ef:e1:dd:9a:7b:c3:72:7f:99:1d:dc:
         55:16:6d:a8:57:9d:52:9f:e2:01:76:08:e0:4d:04:3f:68:11:
         07:56:f6:73:a0:a1:4a:03:46:9c:9a:df:54:5a:e5:76:8a:cd:
         52:52:47:a3:5b:32:1c:50:fd:39:6c:a8:9d:b8:74:fc:3f:ca:
         cc:67:44:97:f3:4e:8e:5c:89:7a:31:3d:b7:1a:bd:96:67:b8:
         26:0d:26:25:29:e4:43:ab:b5:66:7f:ed:f3:27:02:e4:90:c7:
         a2:2e:33:ee:51:7a:bb:16:66:11:e4:ef:30:27:d7:32:7d:da:
         0c:c8:8f:69:7d:2b:0d:a2:3b:15:f5:84:60:78:f8:82:8e:6e:
         50:55:78:4d:e9:47:87:e3:08:7f:1e:6b:a8:59:7c:8e:00:31:
         46:3f:81:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:31:40 2026 by rpki-client