Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10963cb0-949a-4d70-92e8-7ffe7d080a89.roa
File:                     10963cb0-949a-4d70-92e8-7ffe7d080a89.roa (raw, json)
Hash identifier:          nCwRH7Po3Zvmd7+b1MPCgZrTPb9FJw7/p80Quqj/Bxs=
Subject key identifier:   6E:E4:44:21:A5:74:F2:8F:67:06:0B:13:1B:2B:52:FE:DB:AF:16:CE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0EE4EA214A36598139BE96883B26E03F3803EF21
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10963cb0-949a-4d70-92e8-7ffe7d080a89.roa
Signing time:             Tue 05 May 2026 00:10:41 +0000
ROA not before:           Tue 05 May 2026 00:10:41 +0000
ROA not after:            Mon 03 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.15.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e4:ea:21:4a:36:59:81:39:be:96:88:3b:26:e0:3f:38:03:ef:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  5 00:10:41 2026 GMT
            Not After : Aug  3 23:59:59 2026 GMT
        Subject: serialNumber=c4c9630cd9ecea8db01b4716412120fcd94600010a1c19f754641201b3598ceb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:85:77:09:ac:74:f6:0d:8c:4d:5f:67:d0:20:
                    a9:dd:73:f0:6b:54:c4:b8:25:a2:57:93:fb:f4:40:
                    f9:60:4e:f7:fe:c0:28:5b:39:30:ed:de:7d:43:9f:
                    5b:37:74:f5:71:b2:4c:f0:cf:02:87:42:61:49:e6:
                    b8:0a:a9:bd:ca:ae:91:17:75:e1:78:f5:50:bd:98:
                    e7:51:f6:32:e8:27:6f:e0:09:7c:e1:dc:c7:70:02:
                    16:40:3a:63:21:2e:7e:66:23:7d:ef:ce:eb:78:65:
                    12:c6:86:a9:a7:c7:1e:cf:1c:57:7b:55:47:e3:42:
                    f2:3e:fe:1e:a2:b0:52:31:04:85:66:68:93:e7:d5:
                    97:0f:c7:ce:3e:ee:30:9f:69:ee:52:37:df:c6:21:
                    a9:56:81:a2:ca:3b:ca:99:43:be:66:be:1c:51:96:
                    93:31:e5:59:24:4d:f3:b3:83:fe:69:dd:f7:30:d9:
                    93:59:e7:b5:64:12:d6:f8:38:ac:41:8d:c1:c7:93:
                    7a:0c:e3:71:9d:c6:06:28:03:40:fd:de:c4:63:88:
                    0a:7a:86:f5:92:7f:d8:83:d2:a8:79:d9:f4:ad:e1:
                    21:f9:4b:67:7f:3b:da:dc:dc:d7:7f:23:87:c2:24:
                    6c:a7:d7:e6:82:e9:05:94:1a:22:19:5b:4e:3a:93:
                    2d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E4:44:21:A5:74:F2:8F:67:06:0B:13:1B:2B:52:FE:DB:AF:16:CE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10963cb0-949a-4d70-92e8-7ffe7d080a89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.15.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         40:de:96:22:b1:71:71:20:16:8e:cc:5b:43:cc:02:31:71:9e:
         49:e7:95:83:a6:0e:7e:8f:f5:d0:0b:c3:01:81:d9:8e:41:4e:
         7c:7b:11:8f:59:05:ee:1e:d7:19:e5:f1:eb:38:33:8f:5f:bf:
         87:1a:bd:f6:2c:e8:e3:c9:5e:16:b9:91:3f:f5:06:7e:cd:ae:
         81:8d:4c:8f:17:a1:ca:e8:7b:60:18:1d:b3:d2:6c:e5:90:93:
         4d:25:98:9f:11:96:c8:65:2b:43:90:db:12:3c:af:12:8c:8e:
         c5:42:88:a1:22:af:66:cd:dc:bc:0f:53:da:25:6c:c5:db:1f:
         33:1e:6c:c1:17:0f:dd:69:2b:a2:06:fb:29:1e:e4:8a:83:cd:
         48:bf:5e:cf:5e:18:a2:a6:64:f2:65:e3:98:89:7c:b0:ae:59:
         ad:e2:88:92:e5:2d:18:ba:c7:f8:f2:19:50:a7:05:e1:48:d6:
         9e:2c:c0:7e:50:fa:e5:b6:48:7e:60:11:63:87:63:68:0b:04:
         43:34:d3:ff:c1:bf:f6:8e:0f:3e:30:4c:dd:cc:04:79:89:de:
         65:b2:7a:21:3b:80:a8:dd:3e:06:d4:a2:63:03:1f:d3:e4:15:
         82:a1:b2:07:ba:22:56:73:4d:69:5e:2c:3c:87:da:ed:d6:98:
         1a:25:e7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:59:08 2026 by rpki-client