Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1bc6e52e-405d-40de-8e67-9c19da9e32ac.roa
File:                     1bc6e52e-405d-40de-8e67-9c19da9e32ac.roa (raw, json)
Hash identifier:          /op7UUmPpFpCP2LN0pYOlTvyv9JlyCY5IzHk8y9hmRI=
Subject key identifier:   28:88:EC:37:18:63:23:0B:E7:3D:1C:DE:61:2C:6C:0F:EB:D8:A7:C7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       218980DCB644FD2E60F1FB3C23907673FE325B6A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1bc6e52e-405d-40de-8e67-9c19da9e32ac.roa
Signing time:             Sun 21 Jun 2026 00:00:07 +0000
ROA not before:           Sun 21 Jun 2026 00:00:07 +0000
ROA not after:            Sat 19 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.15.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:89:80:dc:b6:44:fd:2e:60:f1:fb:3c:23:90:76:73:fe:32:5b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 21 00:00:07 2026 GMT
            Not After : Sep 19 23:59:59 2026 GMT
        Subject: serialNumber=f8b851aeaaedce962c119adbc96530ecfc9c7c0a6be81e3a6f563b5110e037b8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:10:3e:19:81:f3:76:e0:9d:75:7a:49:be:2e:
                    86:b8:10:40:07:c5:10:cf:3c:fb:c3:eb:28:44:6b:
                    af:00:9e:15:55:cc:56:24:92:ef:33:07:35:18:b9:
                    47:1d:dc:61:62:ce:e0:35:bf:2f:aa:96:46:9f:b3:
                    bd:4d:ff:7b:74:b6:21:6d:98:ab:05:21:c1:0c:ba:
                    85:22:df:20:df:cf:e6:1c:49:f2:17:0c:50:62:e7:
                    4b:09:3c:e6:1b:57:26:d9:13:cf:21:cb:65:2f:f5:
                    42:b6:84:ae:8f:e4:8d:29:0f:f5:33:1f:4c:97:df:
                    e5:1c:01:61:9e:c4:bb:5b:aa:c7:39:2c:ec:b2:80:
                    5c:41:28:8d:99:9f:bd:5e:6e:41:2f:e7:25:ea:2d:
                    01:65:99:e4:a5:19:35:5d:d7:47:80:cc:e3:f0:0b:
                    31:08:72:cd:36:c7:ab:b1:91:12:01:60:1f:f8:5a:
                    05:49:77:81:48:2b:a6:2b:e5:48:65:bb:dc:1d:c7:
                    4a:51:2e:60:6e:e9:4e:53:8f:ad:e9:48:41:b4:97:
                    be:3c:de:db:ae:1d:2c:9d:4e:14:61:91:ac:25:67:
                    a3:10:09:32:80:3e:07:eb:d1:43:e4:1b:21:71:bd:
                    43:de:1d:f5:ee:f9:b9:20:d9:60:1a:96:56:2b:85:
                    c3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:88:EC:37:18:63:23:0B:E7:3D:1C:DE:61:2C:6C:0F:EB:D8:A7:C7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1bc6e52e-405d-40de-8e67-9c19da9e32ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.15.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:c5:7e:68:cb:7a:f8:ab:5a:36:35:7e:d6:ef:12:fc:b4:ec:
         b0:07:30:8d:1f:e9:5b:d3:4d:67:13:cf:9a:b1:2b:22:40:ff:
         0c:21:c7:94:e9:d3:b6:fe:07:b7:c3:0c:46:5c:9a:3c:85:89:
         4b:25:35:db:8a:15:1a:6c:32:1e:2b:4e:ba:98:2a:65:97:fc:
         30:b6:ee:f6:99:ce:5e:85:6a:7f:91:97:aa:92:f2:63:73:9b:
         c5:79:0d:31:79:ea:ff:8e:97:03:65:d9:f1:ff:37:79:fc:76:
         42:38:5d:06:9d:42:81:20:40:aa:d8:bd:1c:6a:44:ec:7d:49:
         e0:8a:9b:13:bf:43:4e:49:15:af:9d:50:63:14:7b:e6:ec:f5:
         1e:10:18:c2:3c:35:e4:a2:ce:e7:91:5c:13:23:18:26:a6:7f:
         ff:9c:e4:6f:f6:c8:cf:db:fa:b9:18:5d:76:fc:56:58:93:73:
         7e:d4:70:3a:f3:1e:b2:52:92:5f:dc:46:e7:4c:c5:21:a8:2a:
         99:da:93:3d:cd:5c:ad:aa:a3:8c:30:e0:cd:4a:4c:10:6e:22:
         a1:6f:82:20:30:d7:84:9f:26:95:03:49:f7:25:11:ad:6a:0a:
         74:72:63:f5:83:41:b5:2b:a6:65:51:58:23:ab:bd:2a:74:61:
         3d:4b:01:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:24:30 2026 by rpki-client