Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ce5aa3d-8ebe-4ba4-b174-db51e75f03e1.roa
File:                     1ce5aa3d-8ebe-4ba4-b174-db51e75f03e1.roa (raw, json)
Hash identifier:          HUfHvuWg2s2jQGBpI7uQCdAQdugKmgecHBcQ9j7h/NM=
Subject key identifier:   EE:3E:54:EF:0C:3A:DA:88:6F:70:88:C7:08:64:7A:3F:46:0B:D2:61
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       21C0F9BB35F975DEC5D498B2AB50D4F19BDA4A28
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ce5aa3d-8ebe-4ba4-b174-db51e75f03e1.roa
Signing time:             Thu 16 Jul 2026 00:00:13 +0000
ROA not before:           Thu 16 Jul 2026 00:00:13 +0000
ROA not after:            Wed 14 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        143.168.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c0:f9:bb:35:f9:75:de:c5:d4:98:b2:ab:50:d4:f1:9b:da:4a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 16 00:00:13 2026 GMT
            Not After : Oct 14 23:59:59 2026 GMT
        Subject: serialNumber=ad407a40ae3a1d8492fe1139f40b3a586630bea762409857573cd2f21c52721b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c0:83:54:f6:d2:73:cd:7d:f3:4e:6b:06:c4:
                    85:e6:c1:32:77:c7:7f:85:8c:ba:f5:65:57:29:55:
                    24:c7:28:d3:d6:20:37:5f:a7:5b:01:f6:1f:88:b2:
                    43:e9:e5:1c:e3:72:3a:21:76:68:37:0d:e9:f1:5f:
                    27:e0:93:0c:76:85:a5:ea:dc:82:04:f0:83:cc:e7:
                    12:fb:37:d4:83:3d:35:3b:53:30:5a:b2:10:99:a5:
                    16:27:f5:a0:0a:fa:70:fd:96:6f:dc:34:6f:24:02:
                    00:ce:a4:9b:13:b4:85:7e:e7:65:48:12:f7:07:7f:
                    9f:f6:4e:3c:b9:70:63:b6:3a:5d:43:c9:73:53:12:
                    9a:f1:c7:64:a4:ba:bb:34:05:53:db:a5:f9:98:1e:
                    1b:23:7e:80:5e:e7:99:90:93:af:6f:13:49:dc:3a:
                    03:20:60:57:78:1a:01:df:b4:0f:09:37:d2:af:9d:
                    f4:4d:6a:f9:15:33:74:75:f2:a1:c7:10:ac:3c:4a:
                    55:34:7c:85:80:da:3d:25:23:05:97:22:91:0c:06:
                    ae:26:85:33:67:3b:59:a7:b1:9b:47:20:48:7b:fd:
                    09:1d:d4:30:45:a3:6d:53:c2:e0:a2:ae:0e:37:a0:
                    38:4f:49:93:7b:22:60:58:48:bd:59:a8:06:0a:1c:
                    35:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3E:54:EF:0C:3A:DA:88:6F:70:88:C7:08:64:7A:3F:46:0B:D2:61
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ce5aa3d-8ebe-4ba4-b174-db51e75f03e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.168.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ac:22:ec:50:ac:81:a0:a1:b4:c2:ee:be:b5:6a:95:74:c1:77:
         10:95:6d:a8:fb:aa:06:23:c3:cc:bb:54:90:01:f8:48:66:00:
         81:9e:56:0d:40:8d:fa:1e:c3:60:05:3b:7f:46:ee:d7:ab:d1:
         16:16:93:9a:3f:fb:2d:de:70:47:ab:7f:1b:23:5c:8d:ea:29:
         68:34:bf:8c:4d:36:20:5d:ef:74:4d:e9:66:e2:2d:29:c1:b6:
         ea:08:8c:82:21:7f:af:a4:6f:55:ad:de:42:c8:78:86:36:45:
         b6:e5:78:ac:00:ef:08:94:89:36:34:de:cb:87:e8:91:98:a7:
         1d:37:e8:8e:86:0e:50:55:c6:75:ea:93:78:5f:0b:bc:b9:94:
         8a:b8:9e:25:70:4e:30:72:f8:72:41:c4:a9:05:01:2e:e3:b2:
         4e:8b:fa:82:38:b6:a5:b5:9a:7f:80:c4:9c:8d:04:31:3f:ff:
         01:26:b5:29:d8:a3:c2:e8:fc:83:9e:f3:dd:24:cc:32:8f:d4:
         15:d9:9c:62:ba:cb:d2:4e:78:2d:ed:c9:d9:02:21:4d:26:ed:
         8f:5a:fa:df:a2:e9:dc:17:25:9d:29:ed:0e:4a:2a:35:c7:9b:
         17:31:ed:3c:7e:d4:62:62:1a:89:39:c8:da:e2:21:6f:05:b7:
         07:a4:7d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:48 2026 by rpki-client