Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f26a4b-62f1-40da-8ebc-27801bd5f757.roa
File:                     40f26a4b-62f1-40da-8ebc-27801bd5f757.roa (raw, json)
Hash identifier:          miCxkIRyR8zegt9aC/FqrXxu7cY9MSwr2t8zi3hyaPs=
Subject key identifier:   F2:03:B8:05:3F:F5:A6:CF:49:4A:04:0A:AE:04:47:65:D2:8D:DF:7B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       57E20590651081738A26FDD71C9B76B88E7AD754
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f26a4b-62f1-40da-8ebc-27801bd5f757.roa
Signing time:             Sat 18 Jul 2026 00:41:37 +0000
ROA not before:           Sat 18 Jul 2026 00:41:37 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.95.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e2:05:90:65:10:81:73:8a:26:fd:d7:1c:9b:76:b8:8e:7a:d7:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:41:37 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=4642c3537f5a1c4bced93585ce9e4ca9fe0e3a0f02f4ae92f2f0a7dbb7511cf7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:03:34:12:7e:1c:ff:12:0c:7f:99:a2:e2:6b:
                    cd:83:71:92:49:4a:38:f3:1b:91:41:76:f2:22:e8:
                    04:f9:93:6c:97:f0:c5:33:4f:96:a9:4c:71:97:c6:
                    47:c2:d1:0f:7b:eb:4a:05:ba:90:e8:4e:23:a4:fd:
                    af:02:75:e7:da:1b:8b:72:db:2f:4a:84:48:c5:2a:
                    4d:7c:8e:6b:4f:55:4e:43:2f:e0:bf:42:e6:9c:f6:
                    16:9e:6b:a0:49:80:97:ef:e5:1e:e1:cd:6f:d0:5f:
                    16:98:a5:55:21:73:80:c0:de:8f:36:2f:e8:5c:f3:
                    c2:ba:95:be:d7:1d:0e:92:93:bc:aa:64:e4:74:0e:
                    10:bf:54:5b:9c:c5:c3:e6:74:0d:ef:34:4e:ae:eb:
                    2f:61:89:a3:ed:ec:3d:10:13:91:43:95:b6:5c:ae:
                    d3:95:66:8e:91:45:ae:5a:3c:64:c5:9a:b3:44:f0:
                    3a:b3:d9:4b:63:9f:44:2c:27:8f:0a:78:87:17:33:
                    3a:ab:56:79:a6:1c:a0:4b:df:77:fc:75:5c:af:ed:
                    7b:ea:0f:eb:ac:71:31:de:ac:81:a1:04:df:2f:90:
                    be:40:3e:95:53:31:c0:e6:29:3b:c2:d4:01:38:c4:
                    c1:0d:c7:b8:15:cb:71:01:c8:1d:0c:4f:26:67:e7:
                    66:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:03:B8:05:3F:F5:A6:CF:49:4A:04:0A:AE:04:47:65:D2:8D:DF:7B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f26a4b-62f1-40da-8ebc-27801bd5f757.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.95.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         26:0b:b5:71:5d:25:78:cb:f4:26:34:69:3e:8a:5e:89:69:a0:
         68:91:5e:9e:b9:84:ca:88:1a:e5:58:a5:c2:87:b5:02:ed:ba:
         2e:16:47:f4:8e:e1:74:e2:04:fa:fe:cc:57:49:d9:42:22:0a:
         ce:e5:61:cc:f0:16:23:4f:c6:a5:5d:f4:62:2c:2a:1c:a1:f8:
         a8:77:79:bc:5e:e9:fc:22:0d:10:4f:5a:45:7f:60:ef:51:17:
         78:68:0f:89:fd:40:d5:df:14:46:99:ab:81:92:c2:cf:45:ea:
         27:1d:76:d6:91:89:34:2e:e6:6e:55:40:af:ea:5b:86:17:47:
         59:25:9d:9b:ed:ad:04:c1:d0:56:69:c9:24:79:2a:20:ab:28:
         7a:52:bc:aa:bf:47:6e:05:b5:15:a4:e9:33:17:de:26:de:a6:
         97:4d:14:17:a9:51:0f:5a:8c:47:2e:d0:b8:11:8a:6f:13:3c:
         a9:61:dc:5e:1c:ba:0c:4c:97:42:97:30:88:3e:e7:08:21:69:
         53:2b:64:d4:aa:29:c6:be:8f:3f:c4:2f:0d:04:e7:87:db:da:
         12:ea:94:70:08:a2:08:5d:73:42:ef:b6:f6:01:0e:e3:f3:ca:
         68:9e:16:4f:ff:e4:ee:34:6f:f8:b1:9d:a3:e9:a7:42:96:4f:
         01:63:0b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:44:35 2026 by rpki-client