Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2983c2e1-ba11-40a6-9ad5-b5b22db61183.roa
File:                     2983c2e1-ba11-40a6-9ad5-b5b22db61183.roa (raw, json)
Hash identifier:          aA7wMlO/ZGOl5l0RKrunGHYLpAqt3wZufT/3Nj8Uh0A=
Subject key identifier:   19:01:4D:F9:7C:BA:DE:91:61:38:58:D3:D5:3E:7D:4D:A7:15:8B:37
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       71FE69DCF4A6627F35A87203EF00CFA8DBD53A33
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2983c2e1-ba11-40a6-9ad5-b5b22db61183.roa
Signing time:             Sat 18 Jul 2026 01:00:44 +0000
ROA not before:           Sat 18 Jul 2026 01:00:44 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        136.1.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:fe:69:dc:f4:a6:62:7f:35:a8:72:03:ef:00:cf:a8:db:d5:3a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 01:00:44 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=aaea9795b38ad6a07e2dda209d315db08e62a389c72327ee12efac95f16daee9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:21:bc:c1:80:0c:9f:2d:6c:62:09:b0:c2:09:
                    cf:c8:17:f6:d6:dc:6f:71:2c:d5:de:bf:2e:03:39:
                    90:69:11:5a:87:d1:05:a3:43:f3:b5:66:67:c4:bb:
                    23:78:21:38:07:6f:81:ce:e4:c1:d3:62:c9:4e:e7:
                    82:98:7f:bb:e6:c4:f8:ac:b9:d2:62:07:26:8f:67:
                    ab:d9:d7:3c:dc:c6:d1:45:1d:3d:0d:28:86:c5:7e:
                    04:a3:3a:b1:dd:65:e4:f5:8a:0e:26:a8:a6:48:01:
                    19:bf:b3:9b:9b:5d:ef:e7:f0:2f:4e:66:04:35:e8:
                    5b:3c:dd:9e:98:1e:dc:36:41:29:10:4d:43:c1:a1:
                    ea:84:23:ad:6e:9f:45:d2:da:05:44:7e:82:3d:14:
                    27:52:4a:0a:78:6a:70:0f:40:40:45:b8:24:7b:a0:
                    49:4f:3d:56:9e:b9:51:81:1a:71:ae:a6:7b:48:27:
                    64:b7:6b:81:35:ee:46:fd:cc:ea:0e:97:ca:d0:90:
                    0c:3c:32:83:fb:60:05:eb:23:83:ca:5b:66:d1:ef:
                    b6:32:0d:64:ff:98:1e:52:73:72:6a:21:83:49:e8:
                    37:70:fb:19:64:d6:ec:fc:55:dd:84:fc:c6:cd:95:
                    25:50:10:4a:ec:95:de:47:68:3a:a9:cf:f6:91:ce:
                    b4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:01:4D:F9:7C:BA:DE:91:61:38:58:D3:D5:3E:7D:4D:A7:15:8B:37
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2983c2e1-ba11-40a6-9ad5-b5b22db61183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.1.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         42:22:00:d8:20:92:dc:1b:d8:d0:65:37:14:0b:b3:78:e2:c2:
         ef:39:52:6c:6b:15:71:57:29:25:ff:05:7e:fd:4a:1d:63:29:
         66:29:24:2a:31:df:63:24:fd:af:82:77:c5:d5:d4:75:26:08:
         86:d0:7f:37:f7:d9:e5:d6:e9:e0:90:24:26:6e:fb:68:14:62:
         af:0e:24:3e:6c:46:a2:fc:75:ae:b4:a6:d8:11:08:d7:d6:ba:
         f3:42:ea:1c:3e:6c:8c:8e:07:6c:f7:e2:67:dd:80:66:39:c4:
         6d:01:93:ec:ca:a6:96:12:65:1c:76:e9:8e:0b:a0:5e:ed:28:
         c6:5c:0a:56:78:4b:36:90:5c:56:5e:a7:d5:91:ed:cf:36:ee:
         f0:15:23:3f:d6:82:de:59:d8:cc:e6:22:1d:04:02:8e:4a:bc:
         90:8f:d6:4e:39:55:56:1d:13:0a:61:f5:f1:11:73:85:62:1e:
         ff:02:ef:1a:4a:4e:d4:20:33:f8:5f:66:2b:c1:c8:97:9f:13:
         58:33:0d:ec:fc:20:51:0a:94:40:a0:bc:87:7c:d2:9c:32:eb:
         b8:63:7d:e5:7f:ed:e3:c9:6b:9a:ce:31:92:d2:1b:dd:ec:fd:
         d7:51:5c:61:8b:0b:0c:7b:e7:7a:11:8b:f9:e6:83:8c:f8:6c:
         02:45:5f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:33:16 2026 by rpki-client