Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f71dae1-9f28-4da4-a716-ff71375425eb.roa
File:                     9f71dae1-9f28-4da4-a716-ff71375425eb.roa (raw, json)
Hash identifier:          LHSfIhaglOvK7pJe5jOkjMRDVtm5pYLcJdYWBMa/qyM=
Subject key identifier:   1A:69:EC:EB:56:36:18:9E:8A:11:EF:54:2D:45:0E:E5:3B:ED:4F:A5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7C921304F6EEA71B1DD372F449B9A7AF42B8263A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f71dae1-9f28-4da4-a716-ff71375425eb.roa
Signing time:             Sun 12 Jul 2026 00:00:07 +0000
ROA not before:           Sun 12 Jul 2026 00:00:07 +0000
ROA not after:            Sat 10 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.61.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:92:13:04:f6:ee:a7:1b:1d:d3:72:f4:49:b9:a7:af:42:b8:26:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 12 00:00:07 2026 GMT
            Not After : Oct 10 23:59:59 2026 GMT
        Subject: serialNumber=a9e6c155ea698c9c7dde12037501aa8f7648f875c6b1e1142b2a9a4958f666b6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:39:66:06:26:63:2a:fc:e1:74:c4:ae:8e:93:
                    80:26:9b:5d:69:b6:71:30:7b:e3:56:53:7a:63:90:
                    e0:87:94:18:50:25:5c:7b:7e:6c:71:c8:9d:83:a1:
                    9b:e1:c9:65:f5:93:a3:d8:d7:3d:d5:23:2f:cc:1e:
                    14:7a:7a:e8:b1:5e:33:c1:11:05:2e:54:ad:8e:e3:
                    dd:14:fe:de:5f:3c:4d:da:c6:1d:e1:2f:a8:41:44:
                    5b:a7:12:d9:c3:40:0c:4b:e2:c8:e4:b9:b4:2a:52:
                    be:ac:3d:5c:44:ff:26:76:37:81:c5:e2:9d:32:6c:
                    c9:40:8c:46:0c:48:2f:b4:a6:5d:a7:0d:4d:39:71:
                    54:24:b7:03:ca:11:71:ca:2b:d9:8c:dc:fb:82:2c:
                    ff:b4:de:93:02:6f:44:e1:b0:65:92:a9:f1:1d:21:
                    a6:2c:36:5a:ca:0c:b6:ed:cc:8b:e2:aa:27:3b:db:
                    3e:6d:fa:39:d6:af:dd:e4:78:1e:65:58:b7:4f:32:
                    4b:f0:1f:97:b5:6f:a1:f3:c8:a2:6c:46:44:3d:3b:
                    cd:93:5b:96:68:46:16:55:3c:de:1b:b9:eb:be:c5:
                    cf:ef:8d:b7:7b:fd:bc:ee:ff:09:b8:8b:e4:55:fc:
                    7b:d1:bf:c9:ca:dc:14:26:bc:8d:ed:59:3f:fe:8a:
                    88:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:69:EC:EB:56:36:18:9E:8A:11:EF:54:2D:45:0E:E5:3B:ED:4F:A5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f71dae1-9f28-4da4-a716-ff71375425eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.61.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:9f:03:e5:a1:98:77:a2:ae:aa:d2:9f:91:d3:d3:2b:ee:1c:
         44:59:fa:9f:2c:cb:ec:59:84:4d:db:f3:ed:3d:a6:dc:81:53:
         90:bc:63:e9:c0:40:4e:b6:1d:9a:c9:36:31:c3:b2:84:d7:79:
         bb:4e:87:ed:59:65:c7:0a:84:61:5e:e9:9b:84:b2:00:5a:0c:
         68:18:c1:7a:03:e9:19:01:89:61:fa:1a:15:ed:03:7e:15:65:
         be:cf:6e:bb:a7:ec:8a:dd:38:55:b8:ca:77:86:20:f5:1d:05:
         03:b6:5c:35:c8:ce:72:74:21:df:24:ec:48:85:00:3a:d6:e0:
         56:cf:d4:c8:a6:8f:2d:0a:81:16:2b:24:3b:fa:9a:c8:3d:04:
         39:df:2a:90:2d:52:86:df:21:0e:1b:8e:a9:cd:72:82:1d:8a:
         b5:91:fd:b0:2a:ff:dc:ce:5e:b8:d0:9a:66:93:c1:51:75:bf:
         57:63:8d:8d:4b:26:27:33:44:54:cd:bd:ce:06:58:82:1c:55:
         91:69:44:49:b3:11:4a:4c:00:d1:db:27:a7:17:92:81:83:5d:
         80:59:48:0a:b0:f3:0c:54:4e:d6:47:aa:42:c0:0b:5e:c6:80:
         fd:ac:1d:7d:3f:b7:a1:ca:84:c0:e1:39:e3:d4:2f:f2:42:c1:
         15:0f:44:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:22 2026 by rpki-client