Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d116cf97-5fa9-4951-bb85-9c31772f22e4.roa
File:                     d116cf97-5fa9-4951-bb85-9c31772f22e4.roa (raw, json)
Hash identifier:          CrsrezPta95fn6XtWD6bv58Zq7tZEBIjxKlsTjh6sg0=
Subject key identifier:   CE:E3:14:0E:B4:24:34:D1:5D:23:02:9C:DF:E6:21:FD:E9:59:CD:94
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       734B6DA133D32C6A5013DF1BE3EA100BB0081629
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d116cf97-5fa9-4951-bb85-9c31772f22e4.roa
Signing time:             Fri 17 Jul 2026 00:01:25 +0000
ROA not before:           Fri 17 Jul 2026 00:01:25 +0000
ROA not after:            Thu 15 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        16.175.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:4b:6d:a1:33:d3:2c:6a:50:13:df:1b:e3:ea:10:0b:b0:08:16:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 17 00:01:25 2026 GMT
            Not After : Oct 15 23:59:59 2026 GMT
        Subject: serialNumber=2fdc374bc658cff9d20e3d89cce3cd95bcc2de7ee198d0e2ba34e67cdff231a4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:72:a7:9a:33:dc:7e:f1:63:e5:8f:b3:90:ce:
                    96:ea:95:8b:38:08:c8:9d:b9:f6:86:5b:39:82:f0:
                    31:c3:03:8b:d8:85:f8:d7:43:8b:70:e2:6c:ab:a6:
                    98:51:bc:28:20:e6:d6:4a:4f:a0:98:17:45:a5:51:
                    05:8b:b5:95:ea:8b:a6:06:60:6f:cb:81:87:f7:2b:
                    4f:31:67:37:15:88:dd:5d:d0:94:dc:56:af:d6:a2:
                    85:cb:f7:33:ef:89:fd:59:40:42:70:29:dc:76:19:
                    29:9c:c3:76:fb:16:83:77:04:d7:c9:69:0e:db:cc:
                    14:d4:c7:59:3d:a3:77:2b:77:0a:76:6d:f3:30:e3:
                    fc:c5:ff:bf:cb:fc:92:b8:3b:d0:6d:91:cd:59:a5:
                    d9:91:31:06:06:bc:e8:3c:dc:7d:60:7a:47:d5:51:
                    64:27:dc:0d:12:47:ae:3b:02:de:be:dd:16:a1:10:
                    7d:bd:88:5b:c6:b4:e1:f9:19:13:4a:be:53:ba:d1:
                    5c:be:e6:b5:47:05:97:0c:af:c2:50:77:47:44:50:
                    30:98:cc:f3:01:5c:7a:de:2c:3e:1a:11:37:dc:72:
                    60:99:38:00:2e:5a:6e:55:fb:b4:b8:a4:2a:be:ad:
                    7d:a5:51:28:56:30:0b:36:2e:96:b7:f6:0b:33:d9:
                    aa:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E3:14:0E:B4:24:34:D1:5D:23:02:9C:DF:E6:21:FD:E9:59:CD:94
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d116cf97-5fa9-4951-bb85-9c31772f22e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.175.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         36:20:4f:79:b5:06:1a:8d:fb:5a:3d:25:7c:94:8c:61:0a:c9:
         03:17:6f:19:6a:84:15:2b:4d:22:73:1b:11:8b:04:be:b3:3a:
         bd:fb:0d:a1:d6:80:8c:e9:a8:7e:96:e4:dc:0a:89:77:76:78:
         a9:21:04:d4:ce:17:ae:bf:40:e5:10:be:ec:70:a1:df:24:b4:
         5c:57:7a:db:4b:41:81:09:dd:b6:4f:01:ba:ec:39:18:2e:26:
         ab:39:a6:bd:e2:6b:71:b0:c7:79:29:3b:b7:ec:bf:fe:9c:63:
         33:36:24:30:5d:6e:72:03:53:09:1d:63:da:9d:66:1f:65:83:
         35:35:51:cd:4c:5c:67:bd:98:f5:9e:d4:2a:74:03:14:ad:ed:
         38:bb:26:c6:09:04:cd:09:f0:6b:ea:ee:c9:07:77:d6:83:16:
         e2:ac:7f:2c:25:fd:ba:b4:cb:1a:c7:47:74:09:f0:fb:f9:b3:
         4c:5a:93:ef:51:16:5b:b6:ad:d3:84:60:07:70:40:10:af:9c:
         10:5a:eb:67:0b:57:53:09:71:1e:c4:87:cb:fa:2f:e1:d6:b3:
         ea:e6:08:61:6e:e1:0e:0e:23:f3:0a:0d:e6:eb:e8:4f:fd:bb:
         6b:39:4e:92:80:da:64:c7:a6:a1:90:3f:24:ad:70:e7:6a:79:
         99:5d:52:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:32:18 2026 by rpki-client