Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50fdc9e9-13a2-4502-bdca-29722b139c97.roa
File:                     50fdc9e9-13a2-4502-bdca-29722b139c97.roa (raw, json)
Hash identifier:          68gKolipXuSiNNtXh8z8aWVYxvIavqJH2Py1rpgy4Zo=
Subject key identifier:   4D:2F:19:4B:4E:1E:09:61:8F:36:28:93:08:DF:E4:05:08:81:34:AA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       205C16A95CB71F929DD781122756E26DB4296D19
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50fdc9e9-13a2-4502-bdca-29722b139c97.roa
Signing time:             Sat 09 May 2026 00:21:31 +0000
ROA not before:           Sat 09 May 2026 00:21:31 +0000
ROA not after:            Fri 07 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.198.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:5c:16:a9:5c:b7:1f:92:9d:d7:81:12:27:56:e2:6d:b4:29:6d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  9 00:21:31 2026 GMT
            Not After : Aug  7 23:59:59 2026 GMT
        Subject: serialNumber=c0b3b747016a1f91b0229a6a13c0845b057feadcd40cdc03a1d353f79243db92, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e6:5c:52:ab:97:9d:8e:46:a7:14:f7:1c:01:
                    62:7f:e1:4c:ce:db:53:28:77:1a:b8:67:cc:0c:53:
                    07:ba:db:7c:60:49:b7:49:d2:12:c8:be:96:d1:44:
                    f5:cb:78:22:7a:ae:2b:8d:e6:58:b9:f6:2d:3e:71:
                    75:c3:3c:42:26:d4:32:19:40:4d:05:39:f1:08:c0:
                    5e:d1:65:0a:dd:e6:d7:6f:d2:f5:23:96:e3:4c:25:
                    ad:fa:ac:e3:67:7c:56:6b:b9:15:50:07:70:f0:d6:
                    8c:73:18:4b:d5:49:36:cd:2b:78:f0:f8:1a:99:16:
                    cb:b3:d5:4e:97:19:46:2d:c5:9c:21:f3:26:e3:d5:
                    3b:68:fc:40:32:23:8c:6e:a7:d1:35:65:71:4d:33:
                    b5:90:22:d3:36:71:05:6b:5b:aa:83:dd:39:1c:35:
                    a5:cf:ba:4e:c1:86:03:cf:79:b1:4e:98:2f:c0:5e:
                    cd:6b:9d:b3:7b:2a:8b:0e:f1:52:8a:71:4a:14:a9:
                    d0:fd:26:cf:0e:b2:47:41:ec:79:4f:3b:19:fa:3f:
                    c2:6f:71:47:42:1e:30:d9:3a:ec:79:c1:ed:c5:a9:
                    12:2c:5e:99:62:11:7e:0c:f0:27:2d:3e:05:59:a3:
                    fc:6f:06:28:86:2a:f2:c5:61:b7:8d:c5:54:51:e6:
                    b5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2F:19:4B:4E:1E:09:61:8F:36:28:93:08:DF:E4:05:08:81:34:AA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50fdc9e9-13a2-4502-bdca-29722b139c97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.198.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:97:ca:bf:21:2d:86:8a:c5:0e:ad:22:0a:75:e3:94:0b:dc:
         4a:c7:89:89:c9:83:41:45:a4:68:81:0e:93:a1:69:1f:e8:ee:
         d1:8b:0f:83:af:ba:68:75:2f:2b:2c:96:5d:d2:00:0f:0d:70:
         a9:9a:87:06:ca:98:75:74:ae:e6:af:4f:47:d1:ab:b4:a2:2b:
         13:00:8c:3c:89:23:13:e7:16:05:1e:ec:82:f1:42:3d:e4:0c:
         4b:06:b4:f6:84:b1:5e:6d:8f:7e:22:25:4d:34:a2:ce:74:53:
         02:b7:f4:74:8a:dc:31:8b:f9:9b:8c:a1:dd:9f:bc:8b:1b:73:
         3d:a6:a3:8c:5e:25:bc:24:14:61:7e:e4:f2:c0:8c:40:20:7f:
         04:d3:2b:c4:49:f2:7a:58:d3:01:ba:fb:aa:6c:17:d1:85:2a:
         af:34:ce:51:8a:03:8e:0f:4d:44:e9:f3:76:9e:cb:81:10:5b:
         f6:ac:69:52:b9:98:60:0f:98:b3:d0:da:30:61:1c:79:cd:29:
         97:70:be:b2:4e:38:89:21:95:1f:99:b2:2a:5e:1a:2f:5e:e5:
         2b:a1:f5:6d:ad:4b:df:85:14:2e:90:d0:28:85:5c:af:68:9e:
         a1:02:fa:02:c9:51:67:ad:c9:b4:98:73:05:5d:db:0d:b3:c1:
         64:25:41:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:23:22 2026 by rpki-client