Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a07397dc-3051-482a-957d-ed3a4c2859b6.roa
File:                     a07397dc-3051-482a-957d-ed3a4c2859b6.roa (raw, json)
Hash identifier:          BXiH1r3hmxOsYNNDVNKpO2VmaDceJf5UOgzgm9NPtUk=
Subject key identifier:   9A:62:F4:0D:1D:D4:FA:27:C8:CF:B8:53:A5:85:C1:61:B3:3A:1D:CA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       516F05B198939FD8F1615440D09AC31A724147CF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a07397dc-3051-482a-957d-ed3a4c2859b6.roa
Signing time:             Fri 08 May 2026 00:00:14 +0000
ROA not before:           Fri 08 May 2026 00:00:14 +0000
ROA not after:            Thu 06 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        98.80.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:6f:05:b1:98:93:9f:d8:f1:61:54:40:d0:9a:c3:1a:72:41:47:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  8 00:00:14 2026 GMT
            Not After : Aug  6 23:59:59 2026 GMT
        Subject: serialNumber=9d15a70d12eb0994aef948cf38edb819e3e0f739c7979784b7a74606d68d1353, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:56:0b:e5:88:79:44:24:0c:77:87:85:56:ff:
                    59:5a:a8:e2:42:3c:dc:c3:26:85:59:fc:1d:5e:3f:
                    da:e5:03:30:a5:ba:54:2f:06:0f:5e:b4:10:05:4b:
                    ba:9a:98:50:6d:0c:d2:5d:c0:a2:b9:28:3b:e9:bb:
                    5f:f7:73:33:63:2c:b8:8c:38:e9:23:91:5b:39:24:
                    87:b6:c7:68:2f:30:5c:cf:4a:b9:39:0c:fd:5f:aa:
                    6d:ed:4b:fb:ec:a6:78:32:92:5f:24:7e:a0:32:8b:
                    0d:fe:7e:64:d3:8f:bd:18:8d:48:9c:aa:1b:ec:76:
                    50:77:10:2c:9c:d5:ee:ab:b6:e4:37:15:9f:d8:bd:
                    26:7a:86:80:6b:f5:d6:32:7b:ef:23:19:88:1a:f0:
                    28:47:34:28:1d:44:91:74:af:e4:9f:c9:d1:20:d0:
                    6b:dd:74:dc:9a:f6:1f:85:7c:8e:5b:d2:41:f0:79:
                    06:ad:7b:1e:81:26:d0:1e:99:c5:fc:fc:03:88:b9:
                    16:49:e4:e3:bf:6c:39:87:84:68:88:5a:d3:da:9a:
                    1b:b4:2e:f4:6b:1f:d7:62:4c:51:b1:d1:9c:bc:ae:
                    77:40:8c:08:50:59:83:81:c9:f9:c3:c8:17:63:68:
                    96:80:0f:2e:42:9b:3f:6a:56:4f:77:a0:12:3d:63:
                    01:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:62:F4:0D:1D:D4:FA:27:C8:CF:B8:53:A5:85:C1:61:B3:3A:1D:CA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a07397dc-3051-482a-957d-ed3a4c2859b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.80.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         67:e7:fa:26:ce:62:fe:3d:e6:4f:28:d9:e3:fe:41:60:8d:3b:
         03:f2:a6:68:1a:2a:16:de:cd:17:53:99:08:80:12:0a:44:27:
         6f:a3:de:e4:3c:a7:5e:c8:a2:a0:c3:92:fd:e6:c4:97:89:df:
         46:cb:e2:91:89:2f:79:76:ce:f6:e9:5d:32:f4:cc:3f:85:86:
         50:f8:1f:e6:b6:f8:e7:95:cf:4c:04:e4:2e:8a:5a:63:01:32:
         ea:d3:80:aa:69:a0:42:0e:50:3e:8c:4f:2f:23:19:36:23:00:
         08:aa:0f:db:fb:08:42:2c:dc:d5:0e:a0:de:35:d6:bf:cc:70:
         a8:75:fc:9c:f7:a9:c4:19:2c:be:25:de:5f:e9:db:92:9e:ba:
         64:d6:0e:66:9a:b5:53:5b:00:fa:c6:e0:85:cf:02:a5:1c:ce:
         0d:92:13:84:09:68:e5:62:94:b3:07:15:82:50:72:94:b9:87:
         1a:79:d4:83:28:aa:6d:15:61:6b:27:4e:d6:8e:e5:f0:0f:ce:
         00:e7:12:cc:bf:f0:1b:10:0e:48:74:4b:6e:83:66:32:bf:16:
         12:03:c4:c4:02:31:2d:a7:f8:fb:72:48:20:5d:09:cd:dd:23:
         43:eb:ad:13:6a:e3:e5:c6:f1:91:ab:3d:2c:12:3d:7a:74:5a:
         c0:ed:d4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:23:19 2026 by rpki-client