Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7073cbe6-4ffa-4093-bf1d-ff430563dd30.roa
File:                     7073cbe6-4ffa-4093-bf1d-ff430563dd30.roa (raw, json)
Hash identifier:          p7N050mLc3dKieG3INCsNqkLnxjsYW9K8wEpnN5Vi68=
Subject key identifier:   0B:9B:F8:E7:78:53:9D:CB:70:97:ED:9F:9B:24:73:3B:0C:9D:2B:FD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7A8D6A2C2D9526B7743B2CB329E4486001E33148
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7073cbe6-4ffa-4093-bf1d-ff430563dd30.roa
Signing time:             Wed 01 Jul 2026 00:00:05 +0000
ROA not before:           Wed 01 Jul 2026 00:00:05 +0000
ROA not after:            Tue 29 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        83.162.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:8d:6a:2c:2d:95:26:b7:74:3b:2c:b3:29:e4:48:60:01:e3:31:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  1 00:00:05 2026 GMT
            Not After : Sep 29 23:59:59 2026 GMT
        Subject: serialNumber=513f40536a7efafbd0122146dcceb723383b60add859e1fa86ac4614a5407dcc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4a:22:5d:86:05:8a:1b:c1:de:7a:cc:89:c1:
                    f8:1f:97:b1:a9:2f:cb:dd:d2:6d:a7:ad:c3:c2:7c:
                    d5:c9:ab:9c:78:61:73:53:8d:5d:58:5c:ff:b4:6e:
                    7d:3e:fe:6f:51:92:70:08:41:b0:6a:a6:38:d5:41:
                    ae:9f:f0:8e:9b:17:a8:0b:f8:3f:46:2d:ff:43:46:
                    2f:51:e5:15:ba:75:db:5b:85:59:18:18:30:cc:58:
                    20:e1:8e:27:13:c2:e3:6c:97:f5:22:8e:bc:0d:66:
                    b7:36:9e:fa:45:24:9c:57:20:20:c4:ca:b7:f3:56:
                    16:46:01:ef:cc:5c:06:71:89:a6:2d:30:f9:06:fe:
                    95:ce:df:8a:28:62:62:ff:ab:03:91:ed:38:63:45:
                    2c:09:d5:bc:40:71:6e:b9:b1:82:8b:92:17:ef:70:
                    6a:db:9c:cf:16:64:1b:06:a4:bd:2d:10:65:06:81:
                    51:c0:a6:68:ff:67:c3:d5:81:dc:9e:53:ea:91:05:
                    c5:37:33:77:17:ca:00:e8:bc:85:9f:4c:10:6d:fc:
                    d6:2e:ef:5f:46:33:c0:3e:5f:93:e7:45:be:73:06:
                    ce:46:d5:cb:f7:6f:6b:6d:db:e3:36:b9:47:24:4f:
                    ec:8b:d8:96:c4:47:5a:10:93:f6:d7:d8:e3:16:ad:
                    ca:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9B:F8:E7:78:53:9D:CB:70:97:ED:9F:9B:24:73:3B:0C:9D:2B:FD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7073cbe6-4ffa-4093-bf1d-ff430563dd30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.162.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         4f:26:44:05:97:46:fe:64:18:2c:58:b0:35:9d:cd:ca:87:35:
         a8:ff:a6:dd:af:b1:4a:c0:97:e7:c5:27:1c:0c:e4:2b:6e:ac:
         6a:bd:fe:24:b9:0e:c1:c8:6a:ca:f0:5a:16:e3:9e:71:bc:2a:
         79:8b:26:e5:3e:0b:d1:65:da:d2:a0:1c:cb:c0:4b:f1:a2:c2:
         9d:4e:6b:49:21:c3:3e:0d:32:01:e8:94:1b:85:c7:26:4d:48:
         fb:d9:2b:aa:2d:00:c6:73:b3:da:41:f3:d0:b2:64:5e:3e:9b:
         f5:db:41:3e:de:4c:ae:97:ca:8f:39:ab:a7:59:05:89:ec:0c:
         51:10:35:f2:38:a7:d6:c8:52:01:a9:4b:0b:c8:b3:ca:cb:d0:
         c2:19:a4:d7:c1:ed:57:9b:e6:60:cc:3f:f0:2a:e8:ba:b1:0e:
         e2:df:be:7b:28:04:10:b6:67:61:31:67:fe:7d:cf:00:ff:55:
         96:3e:82:b5:df:4f:02:ed:c2:7d:08:aa:9d:f2:33:e1:ca:cf:
         ad:dd:e6:cd:53:da:b2:dc:b9:7f:0b:31:eb:f2:90:8a:55:da:
         7e:ff:65:6f:f9:3c:5e:a6:fe:c3:a8:f4:9d:3e:03:f4:9e:f3:
         da:5f:a7:f8:c3:ab:a3:4a:01:1b:62:ef:12:ad:9d:51:64:42:
         c9:71:88:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:32:25 2026 by rpki-client