Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b64690b-4047-48e6-9109-1756a08e1c57.roa
File:                     4b64690b-4047-48e6-9109-1756a08e1c57.roa (raw, json)
Hash identifier:          ZZi1wfTY9H5V4bNFYIhHhc1+L+URWog8ESbBqzmvZ7I=
Subject key identifier:   9B:73:EA:79:03:A9:DF:89:BF:F1:25:5B:49:7C:61:9E:2D:F7:2F:8F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       69112A2ACC5535DC3C9349D44FA9637FB89DAD80
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b64690b-4047-48e6-9109-1756a08e1c57.roa
Signing time:             Thu 23 Jul 2026 00:21:18 +0000
ROA not before:           Thu 23 Jul 2026 00:21:18 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        13.160.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:11:2a:2a:cc:55:35:dc:3c:93:49:d4:4f:a9:63:7f:b8:9d:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 23 00:21:18 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=386d29be378751b0c310f83b28b922ecd1a770be5d15ed379c54bbd420f66735, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:82:cb:3b:8c:55:ce:96:6a:04:89:f2:60:
                    6d:8f:de:03:65:ff:66:ce:b4:8a:42:8f:ee:6a:b3:
                    b9:99:ba:72:c3:10:2a:6b:69:65:99:38:e6:5d:c7:
                    3f:c0:29:17:b5:8b:b0:c0:e3:e6:2f:99:fe:9e:6b:
                    eb:5c:a8:5b:13:9a:6c:72:01:51:ed:08:c0:e9:46:
                    18:8b:45:5d:40:57:cf:4c:59:dd:4a:f0:66:56:0a:
                    84:13:56:7e:a3:4d:fe:13:3a:c0:a2:cd:27:ce:51:
                    05:71:7e:fb:0f:87:48:c5:bf:d8:8e:8b:0e:b1:7c:
                    f1:f3:86:56:25:22:a3:7a:1a:ea:5f:a1:8a:8d:98:
                    5a:7e:07:24:65:70:dd:d3:12:42:e8:af:28:41:54:
                    b2:f3:7b:83:21:a9:01:f8:bb:10:c5:d4:64:74:2f:
                    35:0b:04:6a:b2:94:a4:18:d0:13:ce:6b:25:ec:2e:
                    3e:d2:4f:ba:cb:4e:69:d8:8b:7f:aa:6c:1c:a8:35:
                    88:2e:c9:9f:cf:d3:36:dc:69:f4:16:b9:77:45:24:
                    6f:59:65:0a:96:c6:30:e3:e0:2d:b7:34:ce:70:9f:
                    79:25:ff:0a:6a:7b:3f:b9:0f:07:77:ce:d9:11:2d:
                    c9:29:2c:3c:84:91:e3:05:3e:56:76:92:49:46:e9:
                    44:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:73:EA:79:03:A9:DF:89:BF:F1:25:5B:49:7C:61:9E:2D:F7:2F:8F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b64690b-4047-48e6-9109-1756a08e1c57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.160.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         61:d1:b8:d1:f0:9a:ac:ac:d1:c7:54:c3:ce:89:3b:24:9e:c3:
         a8:18:90:66:95:00:9c:61:cb:e8:8d:52:83:48:3e:ca:3f:30:
         75:43:35:72:7e:0c:9f:7d:3d:93:4f:60:41:59:be:e6:3e:cc:
         df:ef:98:dc:c6:c2:96:9f:52:b9:fd:99:a7:7f:33:14:0a:88:
         69:cb:6d:5a:26:77:cf:f9:02:78:cd:e2:4b:b9:ef:ee:21:b6:
         cc:d1:4f:b6:2c:d1:13:24:33:b2:a1:43:5c:81:28:fd:5f:5f:
         e7:df:69:19:38:b4:68:a1:22:80:cd:c5:93:9a:56:f2:40:c1:
         02:ac:32:27:f8:17:18:cd:6b:3c:4e:e7:51:15:6f:7a:48:b4:
         b2:26:db:e2:f2:79:00:35:8c:40:ca:b7:37:bc:ad:6e:33:b1:
         7b:f0:73:73:b0:0c:97:30:1e:60:82:06:64:2e:60:a1:22:83:
         92:0e:ea:27:71:90:a2:22:e1:2f:2f:6e:5e:e0:db:51:0c:77:
         c1:dd:6f:c5:61:14:6b:e5:31:d9:d1:e6:34:b7:4d:64:04:fb:
         ba:29:45:39:07:f5:aa:2f:06:aa:31:fd:1d:14:0a:8e:2d:e4:
         ec:fa:22:6a:ac:97:35:c0:81:21:90:8d:1a:7f:6f:52:eb:46:
         e6:a2:9b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:35 2026 by rpki-client