Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a1b4bae-6754-4fd0-b979-b0b9b29bbdb0.roa
File:                     4a1b4bae-6754-4fd0-b979-b0b9b29bbdb0.roa (raw, json)
Hash identifier:          sCmjPK32JtTFS738qkb0z85q7VQFqyL9SX7iXw1C3M4=
Subject key identifier:   DA:92:FD:FB:78:EC:E9:57:52:D0:D1:6D:41:8C:12:D6:8D:EA:FF:42
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6B4BBD661011D7B65A7CB231CD93D3BF62E10E98
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a1b4bae-6754-4fd0-b979-b0b9b29bbdb0.roa
Signing time:             Mon 06 Jul 2026 00:00:42 +0000
ROA not before:           Mon 06 Jul 2026 00:00:42 +0000
ROA not after:            Sun 04 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        205.185.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4b:bd:66:10:11:d7:b6:5a:7c:b2:31:cd:93:d3:bf:62:e1:0e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  6 00:00:42 2026 GMT
            Not After : Oct  4 23:59:59 2026 GMT
        Subject: serialNumber=cbe8835239abf0fc0343b2f26a10b904d3f6b2d0e82934bbdd7cba2941ce1163, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:99:ac:c3:b1:86:ce:f7:73:91:a7:35:3b:12:
                    3b:db:74:d4:7a:14:6d:3f:d3:86:8f:d0:e8:1b:bd:
                    95:5a:f2:15:c7:d3:80:b6:89:73:24:86:48:37:5d:
                    d9:e5:5a:96:b4:da:50:7e:4d:66:23:6d:6f:3f:c7:
                    d2:75:14:d9:54:49:87:23:71:15:44:c4:64:e7:31:
                    1d:61:2c:67:5a:9a:c9:ad:fc:1d:b8:14:24:bc:2d:
                    7c:96:59:04:2e:2f:51:3d:1a:0c:fc:dd:fa:ea:4b:
                    c5:d2:d5:69:09:ff:3f:25:fa:e9:78:6c:fd:65:24:
                    1c:a8:61:50:f3:6b:a1:f9:1a:38:66:41:c4:61:41:
                    e1:6c:b0:fc:40:5a:7f:68:b5:e6:1e:ec:d9:dc:a4:
                    9d:7e:31:a5:23:18:64:93:18:53:79:db:10:1f:2a:
                    ac:64:de:4b:db:3a:57:a0:ec:71:10:4f:d4:cb:ae:
                    6d:0d:77:3b:a6:0a:d8:dd:a9:b0:3e:9e:9c:3a:76:
                    81:78:41:00:d8:53:0a:ab:7e:dc:95:63:1f:d4:d7:
                    44:f2:7b:8e:74:86:39:a3:c2:19:56:34:52:48:6a:
                    1b:49:19:c8:4e:ac:48:02:ad:cd:0c:d0:52:da:e9:
                    0a:df:6f:f0:7d:df:7c:7c:6e:68:a9:23:20:7c:94:
                    a8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:92:FD:FB:78:EC:E9:57:52:D0:D1:6D:41:8C:12:D6:8D:EA:FF:42
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a1b4bae-6754-4fd0-b979-b0b9b29bbdb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.185.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:5f:f9:30:45:01:0e:c1:21:e1:d3:87:2a:37:50:98:e1:f4:
         ec:71:af:e4:76:3d:3d:89:82:ad:91:65:ab:9e:28:5e:9c:3a:
         4b:f4:d7:49:9e:c6:da:99:12:77:65:0b:31:aa:b5:92:4f:e3:
         f4:ba:d5:da:33:61:3f:ac:a4:6f:89:69:56:bc:c5:76:fc:25:
         3c:18:a7:5d:27:5d:bc:5b:b4:9b:c5:ad:5f:c1:4a:a7:b9:1f:
         56:a3:2b:82:0a:c3:f6:d0:a6:b4:ab:ab:21:8a:2b:a6:68:dd:
         a5:a2:2d:bd:75:56:3a:73:65:35:35:b5:b4:61:3a:92:33:22:
         61:51:dd:e9:aa:c0:ed:f3:c4:2c:f8:9c:fe:0f:9b:65:03:d0:
         25:6d:db:8c:f4:39:77:d8:c2:d9:36:ca:56:35:30:46:8b:9e:
         f5:f4:c2:98:90:2c:7a:4d:6e:2c:01:20:8c:7a:55:c3:90:72:
         f1:1d:9e:98:2b:fb:c7:f9:c0:9a:25:77:42:84:fd:fc:62:45:
         45:8d:81:c7:63:b7:96:9e:62:4e:1e:40:90:51:2e:e7:90:20:
         02:4f:fd:b2:81:a2:70:26:f0:d1:f5:ec:6b:ac:85:23:c5:87:
         a4:7c:67:6c:3a:34:71:1d:d6:7d:23:b2:17:e6:5f:83:0d:f6:
         dd:16:d9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:57 2026 by rpki-client