Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6263649d-0385-48a2-aed8-fbedb2b248b2.roa
File:                     6263649d-0385-48a2-aed8-fbedb2b248b2.roa (raw, json)
Hash identifier:          jv9DQSD2pTVk8xHTyDWf6v3jv1lNj4t34QU41b7d2cY=
Subject key identifier:   78:A4:E5:DF:12:25:F4:50:76:3B:3A:4D:54:E9:CB:89:F0:6B:A8:2E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       261FE301953A1D0693D5B74F14CBA4EF63B54BC3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6263649d-0385-48a2-aed8-fbedb2b248b2.roa
Signing time:             Sat 18 Jul 2026 00:40:11 +0000
ROA not before:           Sat 18 Jul 2026 00:40:11 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.198.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:1f:e3:01:95:3a:1d:06:93:d5:b7:4f:14:cb:a4:ef:63:b5:4b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:40:11 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=553024bd0bb6ef82a13f1a7e7c914982f9efe83fe8630666965238a3f87ec8b2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d0:0a:d5:d3:9e:20:5c:59:09:b2:e0:49:c1:
                    7e:f5:9d:ad:97:d7:06:c9:3b:e1:5b:f7:4b:44:a1:
                    4a:85:0b:9d:1b:60:ea:0f:12:6a:75:0b:80:90:92:
                    45:7a:62:f6:64:43:7d:e5:11:f6:bb:26:03:0c:8f:
                    bb:c2:41:68:15:fa:4b:bf:9b:09:ad:9f:a6:31:af:
                    32:17:27:01:1f:3f:be:55:d5:60:71:90:d4:b6:ac:
                    0d:40:28:40:07:6c:e8:1f:81:24:eb:bd:07:4d:2c:
                    a2:26:d4:cc:5c:99:7a:05:0a:21:76:56:3b:79:cd:
                    a2:b2:57:6f:f8:bb:4f:b2:56:26:d7:a6:44:4e:34:
                    24:74:f4:88:72:64:43:04:42:4c:0a:de:00:e3:22:
                    f8:30:f7:de:1f:72:7a:2d:11:8b:9f:f0:13:0c:3d:
                    f6:6e:fe:68:0d:50:d7:96:1f:f3:d6:5f:ef:78:89:
                    37:73:d7:87:a3:a4:be:57:30:13:b8:dc:5e:19:6f:
                    20:21:ee:e5:66:9d:19:78:92:27:df:05:97:a0:cf:
                    c6:4c:92:2f:bc:7f:1d:98:ed:18:6f:b0:9b:8c:7c:
                    b4:33:3c:bd:90:fc:a9:15:e0:c1:76:7e:6c:17:75:
                    24:7f:e9:12:61:ad:21:c7:50:97:48:ca:c0:6b:48:
                    b5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A4:E5:DF:12:25:F4:50:76:3B:3A:4D:54:E9:CB:89:F0:6B:A8:2E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6263649d-0385-48a2-aed8-fbedb2b248b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.198.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         19:a5:39:db:0c:12:a0:87:07:ea:d9:8b:4e:f4:e0:54:ab:00:
         d3:4f:1b:77:08:02:88:6a:0a:37:31:b3:ea:76:98:12:97:4e:
         ca:70:15:c1:44:64:08:73:58:42:28:e1:ae:d7:d0:90:a9:69:
         e0:13:57:28:8f:84:ab:d8:80:4b:23:fa:b7:5c:dd:af:9c:f9:
         0d:9e:fa:e2:dd:28:cb:60:da:d5:5f:cb:29:2d:64:68:78:1a:
         26:48:3f:8b:49:e0:7a:54:f0:15:29:c6:d2:95:99:3e:86:2e:
         4d:e4:8b:74:d3:55:eb:33:10:ca:aa:eb:25:84:3a:e1:6c:cc:
         2d:24:5e:82:fa:6a:b3:52:07:37:45:60:a5:35:97:93:30:5a:
         58:ce:94:26:71:ed:17:dc:76:e3:83:8c:fe:29:66:d9:e9:e5:
         5c:d5:a4:b9:fa:0f:01:ee:b3:c1:71:09:5e:ea:37:ea:fe:0f:
         90:1d:b1:de:c4:b8:0a:04:c1:d7:12:3b:cf:59:2b:38:29:9a:
         a2:6e:a8:cd:a4:dc:76:3f:9b:6e:97:2f:d5:dc:38:f2:7a:a2:
         10:9b:4a:cb:fa:d4:25:5b:fe:d0:34:9f:4e:6b:d3:d2:e1:2a:
         bb:87:0a:93:dd:2a:1a:68:83:1f:63:0b:bc:35:ef:27:96:71:
         ee:c0:50:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:25 2026 by rpki-client