Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e4bae46-b367-48d0-8831-12876cafbdbd.roa
File:                     6e4bae46-b367-48d0-8831-12876cafbdbd.roa (raw, json)
Hash identifier:          xpPi7vn6POVarKsHjCSWNFrZ8shSZIBoB7dS9awJ1Bc=
Subject key identifier:   EF:B8:60:46:31:91:AD:65:53:AE:10:2D:8B:23:52:51:D2:B3:F9:23
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       18D6997A8164DF1FE8C2118D3AE8A0FEFD136C37
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e4bae46-b367-48d0-8831-12876cafbdbd.roa
Signing time:             Sat 09 May 2026 00:10:49 +0000
ROA not before:           Sat 09 May 2026 00:10:49 +0000
ROA not after:            Fri 07 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.64.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d6:99:7a:81:64:df:1f:e8:c2:11:8d:3a:e8:a0:fe:fd:13:6c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  9 00:10:49 2026 GMT
            Not After : Aug  7 23:59:59 2026 GMT
        Subject: serialNumber=ba3d630a08fdf0b9e4ff89b0f1864aa1e3c02876f799a759916ced3a430f99f3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9c:65:ac:39:88:4b:c8:7e:9a:e0:a2:f4:61:
                    91:78:0b:1e:39:47:4e:53:90:5b:0a:21:40:8a:83:
                    f8:74:cd:06:3b:99:3b:11:b8:14:91:87:99:9f:07:
                    88:bf:2d:f0:5e:aa:e4:00:1b:b6:17:59:a6:a9:62:
                    07:20:3b:48:a1:e7:0f:9a:55:8b:30:0e:04:3f:05:
                    26:fb:12:ac:65:a4:35:e3:13:77:15:56:b2:ee:54:
                    fc:17:fa:c0:8f:7e:ee:e9:47:fc:17:af:d2:f3:c2:
                    c7:f2:ba:66:6f:cb:da:ba:8d:25:d7:07:23:eb:b1:
                    ee:92:c7:60:e3:ef:7e:52:bf:4c:af:11:11:4b:b3:
                    c9:e9:1d:4e:cc:87:e5:1c:3f:26:04:54:ff:1b:ec:
                    cf:8f:5d:b3:ba:5b:b1:d3:b3:01:df:7f:eb:14:e7:
                    21:f0:e6:a2:16:d4:02:aa:41:11:87:e3:e3:fa:22:
                    06:16:22:96:b0:b8:ed:1a:c8:95:9f:3a:28:f2:6f:
                    ba:12:ba:f9:0f:ea:9d:c7:59:59:e7:99:61:c0:1f:
                    37:c4:8b:8a:cc:36:a6:cb:ef:19:e8:0e:37:1f:48:
                    6c:c6:1d:9d:f7:c9:ac:94:ba:bf:5e:c8:92:fa:6d:
                    5c:0f:48:43:f0:06:40:3f:e9:dc:be:9e:43:e3:11:
                    ca:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B8:60:46:31:91:AD:65:53:AE:10:2D:8B:23:52:51:D2:B3:F9:23
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e4bae46-b367-48d0-8831-12876cafbdbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.64.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         91:8c:e8:76:a3:08:12:7d:53:54:5c:a8:67:7f:b3:63:9b:20:
         2a:e9:4b:09:f0:53:83:50:93:28:63:e0:a4:7b:9b:e9:35:9c:
         db:df:f5:13:3d:6f:59:0c:69:45:3b:5c:13:ad:ec:d4:b0:7e:
         ae:27:36:a2:90:26:9b:b4:39:43:36:03:8b:a9:76:28:c5:3a:
         87:d5:34:a4:35:84:8f:34:ca:0c:26:22:26:40:ae:52:f0:02:
         2e:5c:01:d7:62:19:8e:e1:c5:7b:2b:68:fa:2c:92:27:be:97:
         af:a7:98:4e:83:0c:93:99:84:4e:35:31:ee:56:f5:24:2e:74:
         a8:a9:12:fd:27:64:5c:41:94:39:3b:65:01:e9:70:67:4c:db:
         06:5b:b9:72:39:6c:3d:3f:8f:23:52:4e:0e:29:ee:1b:1d:bc:
         25:00:da:cc:a9:63:4b:ca:48:07:f9:f5:87:39:fb:fa:24:32:
         43:c1:95:ea:60:bc:c6:0c:0b:9f:71:86:8e:c2:be:5b:f5:c1:
         0d:f6:cc:ed:d2:05:19:4b:0d:05:2d:9c:b2:9a:dc:7f:c2:ba:
         d1:ca:83:b1:86:07:6f:7d:6d:6a:68:93:7f:f7:ed:7d:91:ed:
         22:b2:aa:c0:57:cd:85:8c:7f:4a:4c:3e:83:d0:71:82:3e:72:
         8d:2c:8c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:23:40 2026 by rpki-client