Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edaf6eb4-ef4f-49cd-b06e-97e2bd78c821.roa
File:                     edaf6eb4-ef4f-49cd-b06e-97e2bd78c821.roa (raw, json)
Hash identifier:          +Mc4mKBdWRauKsSXyR+bUrxv54IEJwktVECgCx0UTuA=
Subject key identifier:   D1:AD:D1:50:93:6C:13:1B:49:FA:D8:A8:26:8E:21:6D:DD:79:BC:93
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       21DC9C38C510E0C84A04107412687FF38739D0F7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edaf6eb4-ef4f-49cd-b06e-97e2bd78c821.roa
Signing time:             Sun 17 May 2026 00:00:07 +0000
ROA not before:           Sun 17 May 2026 00:00:07 +0000
ROA not after:            Sat 15 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.18.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:dc:9c:38:c5:10:e0:c8:4a:04:10:74:12:68:7f:f3:87:39:d0:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 17 00:00:07 2026 GMT
            Not After : Aug 15 23:59:59 2026 GMT
        Subject: serialNumber=4cb805a9e9371944238aba055d6396b7fd5106d3f3312262cc29406582190479, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3a:74:3a:42:08:5c:a7:bf:25:06:7b:8a:4b:
                    1d:c0:23:8f:89:2d:bd:dc:91:48:ad:5b:ee:d7:fe:
                    2b:f2:8c:c8:8e:df:bd:7b:88:dc:13:19:45:34:e2:
                    b0:96:82:78:f0:13:f1:43:b1:a2:ad:6b:7f:a4:b3:
                    8d:7e:54:a2:f4:38:b5:06:5f:56:55:fd:13:2c:67:
                    22:dc:65:20:5e:ef:15:3d:77:07:e7:b1:7d:9d:47:
                    6b:91:ba:0f:62:9e:f2:a6:06:e2:46:28:4d:ce:ad:
                    0b:6b:b0:0d:f8:7b:c0:1c:ef:b8:4a:1f:00:a0:b2:
                    79:c7:08:fe:35:03:27:aa:57:d6:ea:0e:ff:e7:b5:
                    e3:63:2d:c4:9c:b4:f0:32:0c:39:d8:59:d7:89:21:
                    6c:f9:cf:08:0d:01:7e:7e:f9:a9:05:8b:0a:ad:e6:
                    71:2b:b0:1e:66:a3:9a:37:11:f2:fa:79:35:75:16:
                    6f:9a:d5:27:b8:a0:21:a9:8b:b7:22:49:48:d0:0f:
                    41:cb:9c:c2:92:ea:77:9d:df:00:40:38:cf:10:92:
                    94:a2:c5:45:71:9e:9c:fd:f9:0b:58:e7:cd:6c:21:
                    0a:6c:f1:9e:ce:ff:8c:90:dc:e5:97:86:e2:c2:4b:
                    ff:fd:43:02:48:ac:cd:76:55:5a:0c:89:a0:a5:70:
                    5a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AD:D1:50:93:6C:13:1B:49:FA:D8:A8:26:8E:21:6D:DD:79:BC:93
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edaf6eb4-ef4f-49cd-b06e-97e2bd78c821.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.18.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         07:9d:ec:4b:1b:5d:cc:09:7b:25:a6:63:1f:f0:fd:a1:f5:7b:
         6a:0d:17:3c:13:85:e2:b0:74:6e:f2:45:57:1f:ed:97:a0:4c:
         17:5f:b9:3d:65:f2:da:ff:d7:ce:e3:0e:60:bb:10:1f:8e:5d:
         64:34:93:88:08:64:2d:f5:a9:5d:4d:67:66:5c:bc:16:0c:1e:
         e9:0a:4e:48:1b:52:c2:1c:36:e4:1b:5a:6f:ec:56:3b:63:a2:
         f9:98:6c:ed:23:60:3d:b5:96:f7:37:77:08:8d:95:cc:2c:4d:
         60:58:34:6d:29:ee:18:a6:b7:39:28:1f:3a:c0:21:74:6d:ca:
         c8:b3:80:c6:8c:89:69:5d:c5:39:2d:55:6e:6b:e7:b4:d5:8b:
         42:29:d1:2e:47:f4:18:e0:e2:14:ec:6e:62:08:d5:00:c8:7a:
         82:9d:36:aa:7b:04:14:e1:10:a2:48:b2:cd:40:55:92:b4:42:
         2f:d8:01:e4:d1:65:29:50:ca:f6:dc:10:0b:08:45:0c:c2:2d:
         75:b2:72:02:fe:11:b5:ed:8d:f2:4c:e9:fb:c8:68:fa:dc:ca:
         01:f8:08:b0:bc:87:22:b3:6f:ad:54:c4:f2:14:af:35:2d:2d:
         90:96:ea:07:08:79:08:31:c9:d2:4e:0c:68:ce:63:88:b7:a2:
         b0:13:90:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:44:23 2026 by rpki-client