Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a9db74d-2685-478a-8752-9a852c0bc6fc.roa
File:                     9a9db74d-2685-478a-8752-9a852c0bc6fc.roa (raw, json)
Hash identifier:          /hNo1nnTlwehxRYm383ZbDAPktchTrJMKuC7cLOG6UY=
Subject key identifier:   01:EA:19:D1:A9:BF:62:2B:91:64:9E:AE:A4:B6:9B:85:8E:47:A6:E8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3DCA512910A9DD0D894C0C363EE338253E834060
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a9db74d-2685-478a-8752-9a852c0bc6fc.roa
Signing time:             Thu 23 Jul 2026 00:11:12 +0000
ROA not before:           Thu 23 Jul 2026 00:11:12 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        50.16.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ca:51:29:10:a9:dd:0d:89:4c:0c:36:3e:e3:38:25:3e:83:40:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 23 00:11:12 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=552c832f103404a7fa76a90ad44f1f3c4f4b92930fd6357eb1ba9439d665e4fe, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ac:4d:25:f0:4c:35:30:0b:31:8a:9b:47:6f:
                    2d:05:eb:bb:4e:02:9a:ce:8a:f1:04:9f:9d:d5:d2:
                    e9:21:fa:4c:f0:83:a1:46:ef:44:80:2a:2f:8e:65:
                    c9:4d:53:2e:c2:7e:a6:b1:b9:f7:cc:a1:d4:1e:28:
                    8f:16:0b:15:1c:ab:46:0e:b9:80:d7:b3:01:cd:2c:
                    09:db:d3:96:f2:df:7d:f0:47:e6:3a:60:8c:15:11:
                    19:82:2c:3f:a8:c0:ca:3a:9d:4a:16:3d:d0:bc:f7:
                    6f:b8:96:65:06:3c:21:11:85:c6:d4:80:05:02:48:
                    00:af:d2:0e:79:08:d3:2f:d0:11:28:4a:0b:d3:08:
                    8c:56:05:3e:d5:38:dc:9b:94:fe:df:19:52:db:c0:
                    ec:35:a6:e4:60:17:06:3c:8d:fe:d7:d8:c2:91:26:
                    4c:c0:6b:09:14:26:e4:c1:2e:7a:8b:2e:d7:fc:27:
                    6c:97:a3:c3:0f:f0:1e:ac:7a:a3:c0:76:38:39:34:
                    34:fb:e9:ef:72:d5:fd:ae:78:2d:a0:f4:67:42:0b:
                    f4:c2:75:a4:63:e2:71:6a:17:e0:27:90:0a:04:68:
                    54:14:07:b8:8c:c5:ef:87:cc:d9:2e:f6:5b:d1:dd:
                    71:e6:68:f9:1f:b4:5a:36:87:72:f8:36:72:78:ad:
                    9f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EA:19:D1:A9:BF:62:2B:91:64:9E:AE:A4:B6:9B:85:8E:47:A6:E8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a9db74d-2685-478a-8752-9a852c0bc6fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.16.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1e:30:f8:c1:85:15:20:98:73:4d:51:4c:11:a0:b7:51:85:56:
         1b:f3:19:73:b5:38:98:3a:50:a5:8d:2f:ef:f8:69:52:4a:04:
         fe:ec:cf:3f:d6:ba:1d:8e:fb:bc:5d:eb:2e:20:7d:08:b9:11:
         5a:84:86:af:c1:c3:7a:24:08:db:32:e5:ae:39:54:1d:fe:ca:
         32:6a:7b:37:a1:27:32:4a:42:e8:55:e2:44:4a:17:ce:b1:2c:
         50:11:c8:44:ff:f9:52:27:cf:b5:ac:bd:4f:49:23:91:31:0c:
         6c:07:d0:c7:9d:cf:36:ef:ca:45:87:03:15:f5:9d:6b:86:ec:
         61:fb:f1:8f:2a:39:b4:f3:f5:57:f7:83:93:91:6d:1d:fd:fd:
         e2:b1:7e:7e:27:98:a7:ca:69:bb:8a:7e:bd:60:1e:ac:c1:58:
         7d:c6:34:ad:41:55:5b:93:31:2c:5f:57:49:76:3d:21:7b:31:
         5c:c9:7f:b1:93:ec:bc:4a:e3:9d:1a:44:5f:98:17:56:de:0c:
         cc:1f:12:4d:25:66:e9:df:08:1a:c2:64:fc:9f:83:62:cf:18:
         75:a2:c6:fb:e5:72:f1:dd:28:55:85:24:4d:6b:8f:62:58:75:
         09:45:81:ba:9d:53:87:ee:01:9f:52:45:d2:c3:9b:35:d5:04:
         ec:db:8e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:43:57 2026 by rpki-client