Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/630b64f9-b9e9-46e7-b8e4-8ea7c44a1a15.roa
File:                     630b64f9-b9e9-46e7-b8e4-8ea7c44a1a15.roa (raw, json)
Hash identifier:          tDqptio4eQ4OP8cTPY5jdn3fLGr6Cb18rnVT+kawq5g=
Subject key identifier:   1E:C5:4B:E1:0E:54:40:6D:BF:6B:43:A8:FC:09:95:F4:41:26:88:74
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       42A2C4C784A479E1E2CA0AC62EB296B6135329C1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/630b64f9-b9e9-46e7-b8e4-8ea7c44a1a15.roa
Signing time:             Fri 17 Jul 2026 00:30:42 +0000
ROA not before:           Fri 17 Jul 2026 00:30:42 +0000
ROA not after:            Thu 15 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.87.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a2:c4:c7:84:a4:79:e1:e2:ca:0a:c6:2e:b2:96:b6:13:53:29:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 17 00:30:42 2026 GMT
            Not After : Oct 15 23:59:59 2026 GMT
        Subject: serialNumber=79beddb60debdab5c43759f9babe1da24e875c78decdc221657c91fbebe77c10, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a9:53:37:e3:13:b7:98:1c:03:e2:d8:36:06:
                    f8:4c:ad:8b:10:70:54:e8:10:66:8e:f5:d3:4c:c1:
                    6f:48:dc:e6:09:93:94:96:36:a4:c6:27:21:be:70:
                    49:df:b6:c7:51:fb:3f:1b:e5:0b:fe:0c:1b:a1:dc:
                    23:97:2a:46:7e:47:e7:51:0c:93:df:a4:ee:82:84:
                    f9:95:b0:95:6e:1d:0e:7d:e1:48:83:e1:a7:47:aa:
                    46:aa:ed:d0:2f:e1:79:fa:86:68:8b:6a:ec:2b:22:
                    3c:e5:50:6e:67:f5:e0:c4:96:25:a2:72:2f:52:49:
                    72:b0:4d:2f:ee:8c:94:05:c1:b5:fb:75:aa:aa:06:
                    4b:14:fc:fd:f1:c3:fd:a6:cd:45:09:c6:27:03:77:
                    ca:d8:c0:35:34:a0:df:28:19:dc:e5:a3:cd:ee:c1:
                    79:75:94:d9:0d:9b:4f:5b:ab:c8:64:5b:e1:eb:05:
                    25:3a:ce:36:bf:f2:ba:8d:0c:a0:82:47:74:12:2d:
                    15:79:7a:8f:08:1e:1e:e3:63:d6:9f:a9:90:e3:ae:
                    e1:1e:19:6c:c0:44:53:db:f4:54:03:d6:03:48:4e:
                    8f:ef:ae:36:c6:13:a5:24:af:34:79:68:e2:0b:77:
                    1b:3d:ea:c6:09:88:d2:bc:60:14:94:01:51:df:7f:
                    88:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C5:4B:E1:0E:54:40:6D:BF:6B:43:A8:FC:09:95:F4:41:26:88:74
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/630b64f9-b9e9-46e7-b8e4-8ea7c44a1a15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.87.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c3:ed:e6:61:7d:fe:e9:87:c1:16:87:17:12:ab:d8:29:49:14:
         e9:06:f9:74:f9:b8:08:c8:99:5f:af:28:13:01:ab:68:72:28:
         7a:95:a7:a5:31:f0:8c:60:ef:10:95:20:c1:6c:d0:07:fc:55:
         ec:49:6d:4b:e1:0e:d6:67:02:ea:4f:04:3d:a9:1e:e5:f1:4b:
         2b:8c:f1:e3:9c:e2:ec:32:b1:96:33:dd:fa:c7:3c:a7:67:52:
         54:57:2b:69:fb:23:bb:03:18:1d:ca:86:92:6a:18:06:80:96:
         0d:84:33:6b:77:f5:6a:3a:18:3c:01:b5:67:f0:d9:48:af:a0:
         51:99:a5:12:62:94:a0:e4:88:73:6c:1c:5e:5d:72:62:33:68:
         07:2f:52:e6:5e:0e:3e:24:13:28:63:a5:1f:b9:bd:85:1e:d3:
         c8:ef:87:ee:d8:06:52:b7:6c:5f:19:de:d6:aa:10:4e:1e:96:
         da:81:0f:3e:bd:5a:0f:ac:45:82:be:1a:f3:36:f5:98:5d:5c:
         b2:d5:74:23:da:4f:2a:ec:a8:ac:45:47:91:d8:c0:34:2d:d2:
         2d:01:60:94:23:b2:1d:73:6b:cc:79:bc:a2:13:2b:55:fe:6c:
         8a:f1:67:a4:df:49:ba:55:90:d0:e7:af:69:49:cb:78:26:62:
         ce:eb:99:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:33:05 2026 by rpki-client