Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e72e62b-6891-45f4-a8c7-d6b2fcf6089d.roa
File:                     3e72e62b-6891-45f4-a8c7-d6b2fcf6089d.roa (raw, json)
Hash identifier:          hEqogasUBGZF0RdLJojHnrurVH4ywqI3W4OuI17R4jc=
Subject key identifier:   18:F5:9D:87:54:99:D2:E4:4D:AA:DB:6C:5E:11:45:2B:F8:6F:4E:FE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       25D292C98973B955FDD375A281A6371DD8852043
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e72e62b-6891-45f4-a8c7-d6b2fcf6089d.roa
Signing time:             Tue 21 Jul 2026 00:51:20 +0000
ROA not before:           Tue 21 Jul 2026 00:51:20 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.216.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d2:92:c9:89:73:b9:55:fd:d3:75:a2:81:a6:37:1d:d8:85:20:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 21 00:51:20 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=ec22ee5783d50e3e487f3ec17dcc817408d528986a331724308300ee69073e6d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:52:b2:6c:24:52:e1:a0:f5:74:08:9a:39:d2:
                    08:4a:b1:b2:99:ee:24:66:ce:97:d2:2e:69:f9:49:
                    cf:72:ab:f4:8c:01:85:f9:57:6d:21:12:b9:90:b0:
                    32:c9:8e:b9:5a:76:87:10:42:f6:62:e9:03:ee:bf:
                    e0:99:2e:6a:88:bb:49:1d:fa:ed:6e:93:22:ec:18:
                    f0:c8:d5:fa:0f:45:88:70:f5:f7:c2:28:bd:d7:7e:
                    91:a5:63:11:f4:3c:07:ae:1d:c8:be:80:da:32:95:
                    5c:92:c6:42:4c:e8:04:88:07:02:d5:15:dd:c6:53:
                    a9:fd:aa:64:26:00:31:38:25:2d:ee:3f:3c:ae:f2:
                    60:27:8b:8b:fd:40:ef:21:78:a7:4b:54:80:88:fd:
                    e1:88:47:45:e8:18:16:22:05:cf:b0:e4:a0:98:2e:
                    00:46:7e:8a:d8:65:52:6c:87:19:d3:3c:8c:64:2c:
                    b5:f0:bd:62:a2:36:13:48:8e:61:84:f5:57:05:ee:
                    4c:bc:bd:6c:60:f3:d1:39:93:43:70:ab:60:89:b5:
                    e6:06:69:18:9d:32:06:e8:43:65:7e:1d:20:9f:e0:
                    48:e9:34:41:98:f0:8f:d8:3d:f4:c9:ca:80:a1:85:
                    09:68:9c:22:fd:fa:83:51:c4:ae:ae:2a:16:ee:5a:
                    51:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F5:9D:87:54:99:D2:E4:4D:AA:DB:6C:5E:11:45:2B:F8:6F:4E:FE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e72e62b-6891-45f4-a8c7-d6b2fcf6089d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.216.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         15:e1:33:37:5b:6d:d5:39:c6:b1:d4:c9:99:1e:33:a9:73:30:
         37:1d:d2:c0:63:51:73:8e:b0:5f:c3:b2:ae:ef:16:ea:2e:3e:
         22:f8:20:d3:34:24:a7:8c:e2:98:30:da:74:20:93:ab:5d:6b:
         41:89:40:b8:0b:04:bb:95:ff:ed:fa:ed:6b:e6:12:c3:fd:ca:
         ed:92:73:66:ef:b3:3e:2f:e4:0d:ec:11:3d:2d:db:8b:5e:cf:
         bb:c4:d6:11:05:8d:0c:1f:a2:48:78:07:ad:42:d7:91:f8:30:
         e7:06:f8:f3:7f:70:c9:ad:58:74:e3:8f:36:87:5f:0e:ec:73:
         1a:d8:a8:0e:49:13:95:16:d8:77:1d:a9:9d:d8:59:df:aa:84:
         83:14:00:9f:59:3b:c6:91:b0:24:06:29:1f:78:c7:78:de:1d:
         b8:ab:f9:76:ec:03:fe:94:37:2d:e4:cd:c2:12:81:af:58:a2:
         a6:51:9b:ab:09:a8:36:be:74:f8:ef:eb:cd:60:06:34:8f:ea:
         6e:58:a2:5c:ff:c2:8a:f8:3f:68:9b:b8:ce:a2:23:9d:99:6c:
         fc:53:43:72:26:22:40:18:19:0e:0e:8e:27:69:e8:ac:dc:b5:
         ae:a2:6e:c6:9b:9d:16:3b:52:4e:f2:c7:97:aa:e9:65:fe:e8:
         5c:32:9f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:48:30 2026 by rpki-client