Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4cbc90f-4032-4b14-8fe7-be8bbd816ffc.roa
File:                     c4cbc90f-4032-4b14-8fe7-be8bbd816ffc.roa (raw, json)
Hash identifier:          5B9trkW81s8xlacgF0a93nqNwsNu8plvYE046zzB3+g=
Subject key identifier:   B7:21:10:5D:9A:4E:30:B1:FB:DB:CC:F7:E9:1A:70:40:7C:73:73:7C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2868328592C4044C67C0DAEC4E7B0FA84D232831
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4cbc90f-4032-4b14-8fe7-be8bbd816ffc.roa
Signing time:             Thu 16 Jul 2026 19:17:12 +0000
ROA not before:           Thu 16 Jul 2026 19:17:12 +0000
ROA not after:            Wed 14 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.241.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:68:32:85:92:c4:04:4c:67:c0:da:ec:4e:7b:0f:a8:4d:23:28:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 16 19:17:12 2026 GMT
            Not After : Oct 14 23:59:59 2026 GMT
        Subject: serialNumber=9efac3bd4efc95151400ae5dc86b8a2c68d95f9ad12b8b8c2f2fadbeb68393e4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:63:9e:11:f8:e4:08:07:02:c1:ad:f4:2e:
                    4f:73:dd:c8:2d:99:33:fd:2b:60:79:7e:d8:46:d3:
                    2c:66:9c:a4:4b:61:09:18:f2:99:ea:7b:1d:7d:c9:
                    e0:90:2c:e5:75:a3:ce:ec:64:f0:77:80:54:2b:8f:
                    c9:87:b5:6c:5d:34:34:6d:ad:11:f9:03:fd:d1:01:
                    98:b2:7e:92:17:51:82:7f:e5:18:dc:1a:6e:00:9f:
                    14:ae:e4:92:ab:92:0d:be:ac:b1:fb:22:bb:84:bd:
                    ba:7a:90:f7:ea:66:51:78:16:cd:a6:11:1b:cf:58:
                    b0:cf:56:f6:5d:c6:8a:ed:06:da:bd:02:24:22:d3:
                    ad:cc:97:95:f8:b3:41:9b:1d:39:e0:7b:7f:ac:16:
                    f1:e8:60:dc:52:f0:a6:c8:aa:39:af:2f:9d:61:aa:
                    56:a8:1d:db:6b:d0:e0:d0:71:78:2b:16:41:d7:77:
                    89:1c:6a:c9:8b:02:b7:08:e7:ca:8d:20:32:95:ca:
                    ba:90:58:30:d8:0b:e7:15:8f:a5:87:10:f7:a1:4a:
                    32:06:4d:6b:5c:fc:c3:f6:30:0d:66:01:0d:88:f6:
                    3a:11:e0:e2:4d:01:fd:2c:54:bf:18:9d:9b:20:03:
                    f5:92:92:d9:ee:1f:ec:45:a5:11:25:07:0c:86:1b:
                    1d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:21:10:5D:9A:4E:30:B1:FB:DB:CC:F7:E9:1A:70:40:7C:73:73:7C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4cbc90f-4032-4b14-8fe7-be8bbd816ffc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.241.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:c7:d1:a9:c6:fe:48:d9:1c:2b:fe:39:b6:a4:03:24:f5:2f:
         d2:c6:18:72:97:40:e0:67:96:66:a2:74:f0:6b:b0:5c:ff:ff:
         a7:48:dd:10:ce:bb:97:e9:40:d5:52:43:cd:96:b4:ff:da:0d:
         1b:c0:91:14:0d:1b:fe:a4:28:9f:52:44:01:1c:ac:2e:16:29:
         b7:a7:45:02:fa:35:4b:9c:38:1f:6f:f9:f7:ff:0f:6e:e9:5b:
         ea:53:1d:f7:5c:b0:43:0f:02:cb:12:c2:e7:f5:34:c6:85:9e:
         6e:bd:d6:3d:6a:46:6e:39:67:ac:ef:7a:43:1c:5a:9c:fb:ee:
         cf:f2:77:85:32:fd:16:d8:4c:ee:da:af:49:1e:4a:76:60:b4:
         ad:d7:8c:69:85:e1:fb:5a:f9:e9:fa:f4:cb:a4:08:3e:3a:ef:
         c5:48:b9:5a:04:8f:4e:f3:42:6e:a3:12:fa:85:91:bd:d1:b4:
         06:db:9b:8b:44:ad:26:b9:af:1d:33:cc:7d:82:c0:6d:5b:de:
         9d:32:ec:12:2e:b2:a5:92:da:28:ac:a4:36:43:30:d5:70:72:
         40:f5:49:a5:f3:60:48:76:3f:a1:07:60:4b:1c:9a:a6:e4:72:
         cc:5e:be:15:04:40:18:27:96:f1:81:f4:71:f7:15:b6:c0:a7:
         31:79:b3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:30:43 2026 by rpki-client