Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e261541c-5236-438a-addf-e0379cb8428e.roa
File:                     e261541c-5236-438a-addf-e0379cb8428e.roa (raw, json)
Hash identifier:          jg0ParYWSMdndBdvXlLAwF2JhCbu4t+SRPM0RKoV9hU=
Subject key identifier:   E8:29:B4:51:66:50:09:A7:4F:25:3E:83:C6:26:2F:4F:C1:B3:81:AF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0953C5179E25D0CF37F838E4286DA811666913F9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e261541c-5236-438a-addf-e0379cb8428e.roa
Signing time:             Tue 05 May 2026 00:31:19 +0000
ROA not before:           Tue 05 May 2026 00:31:19 +0000
ROA not after:            Mon 03 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.162.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:53:c5:17:9e:25:d0:cf:37:f8:38:e4:28:6d:a8:11:66:69:13:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  5 00:31:19 2026 GMT
            Not After : Aug  3 23:59:59 2026 GMT
        Subject: serialNumber=adbd2240b4f1ac54c8b959b55029d6bb0d00a5716a2ad18b3e29fef8a1ea9129, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:49:4e:a1:8a:ec:f3:ff:48:7f:24:82:98:e9:
                    bf:a7:00:3e:86:f8:a1:e9:33:5d:4e:aa:02:4b:47:
                    f3:06:c6:7d:69:41:ac:a9:b0:ae:6c:fa:82:6b:b1:
                    10:c6:a6:aa:c4:0b:49:24:fb:67:ec:bc:54:a7:50:
                    36:9e:a9:30:31:d6:ce:3a:54:87:b6:a8:37:d3:4a:
                    d5:e6:58:00:ec:06:61:c0:2e:25:4d:b4:91:d3:c0:
                    18:f5:ec:69:0d:ba:fe:19:f3:26:c7:54:0b:26:d7:
                    b0:b2:dd:dd:c9:2f:47:59:ad:7c:88:70:c9:38:37:
                    e5:98:a3:61:ee:05:93:7e:5b:df:3f:60:8b:85:9e:
                    60:ca:c7:23:d4:ba:22:72:a1:e2:94:4c:f0:4d:ef:
                    2d:dd:e9:57:b7:21:9c:78:6a:88:fc:d6:b1:ce:ec:
                    0a:30:62:75:90:dd:9d:bb:7c:c6:cf:47:40:03:18:
                    0f:75:4a:56:2b:75:3c:f1:1a:73:32:c3:c8:52:19:
                    1b:54:36:75:89:a3:2a:01:ba:e3:b3:01:7e:c3:d7:
                    df:54:9b:a8:ba:77:b4:03:e9:dc:88:15:f2:67:57:
                    26:0f:67:e1:30:07:f6:63:ee:b5:68:1a:03:9a:4a:
                    16:6c:f9:ed:43:ba:c7:48:4c:1c:25:48:8c:c3:37:
                    d7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:29:B4:51:66:50:09:A7:4F:25:3E:83:C6:26:2F:4F:C1:B3:81:AF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e261541c-5236-438a-addf-e0379cb8428e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.162.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         87:c2:5d:f8:c9:b1:20:67:0c:07:6e:bf:86:bd:5a:5c:21:2e:
         3b:8f:3a:f1:aa:7a:32:38:71:a7:46:76:e5:1f:fc:15:a7:c1:
         d5:c0:10:01:91:89:51:30:7a:38:de:0b:3b:45:8f:4c:d0:74:
         a6:57:db:fb:d2:16:04:53:0b:ab:f3:a6:13:4b:0d:f1:12:bd:
         7e:49:e2:9e:28:eb:b4:c4:75:04:5e:94:97:99:8c:05:03:7c:
         42:e0:81:b2:45:53:f8:b2:57:f6:25:ec:93:07:ad:cb:60:d0:
         9e:7b:49:30:33:db:74:ea:61:50:79:f0:29:0b:3d:3a:e8:da:
         f4:0a:7b:b3:61:60:fe:97:86:10:a4:11:e7:21:fb:1d:ce:a5:
         73:e5:60:63:c8:e6:a0:d2:e9:4a:c5:db:3e:c2:ef:c2:ce:45:
         17:28:8c:fe:76:03:1c:15:ff:61:d6:e5:4e:ce:55:56:a2:63:
         36:bc:01:ae:e9:fa:b7:14:6c:a6:5b:b2:97:c0:5c:b5:b4:87:
         38:4a:a9:80:73:75:4d:16:c9:8a:a9:4d:03:5f:98:47:df:8e:
         b5:70:3b:89:a2:91:3b:b3:34:4c:22:31:fd:14:be:d2:54:ec:
         b4:95:31:5f:32:83:d8:8a:ab:59:2c:6d:90:c5:81:c0:66:cd:
         23:25:83:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:17:22 2026 by rpki-client