Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eac672f7-9965-4a49-bc3b-231aecd7767e.roa
File:                     eac672f7-9965-4a49-bc3b-231aecd7767e.roa (raw, json)
Hash identifier:          Jqcet7V6Gb8BpCJ3ZjwpzcK5hsLJFpTD2bJBz04h4ao=
Subject key identifier:   8D:ED:51:77:F5:A8:D5:21:07:48:0B:7C:71:10:0C:F6:B0:A4:3F:47
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       28E6B6A3EDECE04F9A125E2E0C9DD315984AC287
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eac672f7-9965-4a49-bc3b-231aecd7767e.roa
Signing time:             Fri 17 Jul 2026 00:20:46 +0000
ROA not before:           Fri 17 Jul 2026 00:20:46 +0000
ROA not after:            Thu 15 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        164.178.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e6:b6:a3:ed:ec:e0:4f:9a:12:5e:2e:0c:9d:d3:15:98:4a:c2:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 17 00:20:46 2026 GMT
            Not After : Oct 15 23:59:59 2026 GMT
        Subject: serialNumber=4a7d6c47265ee6a9d6ec1faf569d89b0755b4e20aba4b524a15dfb4fd9a75a6d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ac:9b:fd:4b:07:e4:d6:37:4b:59:af:ed:19:
                    b8:b8:53:58:ef:eb:43:73:52:dd:d2:88:3f:18:20:
                    e2:61:46:30:35:e5:cf:f8:5c:33:3a:28:c7:f4:d6:
                    a7:e0:89:bd:09:c6:02:58:a5:ea:74:68:7d:70:c0:
                    76:2b:8d:fb:70:4e:82:a5:f5:94:23:aa:5a:9b:a3:
                    2c:d9:26:08:13:7e:2f:4e:2d:1d:fd:4b:4f:08:ae:
                    88:50:45:57:61:de:00:2e:52:9c:56:94:99:53:a9:
                    f5:1f:62:b6:4a:65:5f:41:dd:4d:9c:0d:c3:5e:57:
                    ce:6f:bc:03:95:1c:4e:00:95:af:f5:c0:4b:f7:e0:
                    be:9a:11:7e:b0:10:65:eb:2d:78:23:f5:07:aa:be:
                    09:e0:a6:51:35:4b:c3:59:6e:b3:1c:aa:39:4e:59:
                    a0:a7:ad:55:61:75:1d:01:0d:04:a8:e4:8c:09:e4:
                    67:87:13:30:a2:d2:c5:f0:ed:c7:ef:c7:fe:62:61:
                    34:f9:52:9c:d4:96:38:9d:30:da:5e:a9:1b:4c:a4:
                    8a:51:7d:f1:b8:35:05:7f:96:4e:29:f2:f2:68:12:
                    3a:9b:4d:46:c3:3c:32:32:c6:32:01:b6:65:2c:9a:
                    82:a0:a2:99:b2:a5:23:f4:6b:ea:e3:4d:19:55:c6:
                    30:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:ED:51:77:F5:A8:D5:21:07:48:0B:7C:71:10:0C:F6:B0:A4:3F:47
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eac672f7-9965-4a49-bc3b-231aecd7767e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.178.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         61:4f:ef:09:47:a3:18:25:23:c4:4d:c3:1a:e9:65:46:93:52:
         ea:2b:b8:0e:fa:95:53:a9:d6:81:f7:e3:31:54:e8:a3:eb:b2:
         59:0f:3b:75:a0:b4:89:f5:70:d4:e2:62:df:e1:b3:7f:44:39:
         2a:32:13:b5:41:93:32:58:e3:48:6c:5d:69:e0:3c:76:c2:c0:
         f5:14:af:1a:34:3a:b1:74:bd:4b:b1:8e:28:e9:43:b2:d0:af:
         c6:a8:cd:41:b3:2e:e5:ed:7b:c5:e3:5c:13:42:b5:9a:f9:b9:
         d3:d1:61:3d:4c:fe:9d:83:b8:6b:8f:be:c2:6d:af:11:b7:47:
         99:27:58:27:04:8b:08:52:1b:89:0f:c5:00:f2:94:8a:b7:3a:
         c9:11:41:f5:f6:47:b5:03:ec:15:20:49:18:3c:d2:7f:92:58:
         a9:cf:b5:22:05:71:5e:9a:b5:f5:0e:33:1d:33:c8:c4:65:1c:
         91:73:4a:53:75:33:0b:37:a0:71:6b:dc:e4:53:6a:90:00:b6:
         f4:6d:a6:53:4e:cf:50:f0:57:73:ed:4d:27:54:25:87:2e:c7:
         5d:f6:42:0f:44:1d:7c:f5:9b:4b:61:96:df:cf:41:39:8a:10:
         89:be:b0:a8:17:b9:68:78:1f:d7:69:2d:97:20:28:88:c9:25:
         22:c0:e8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:34:55 2026 by rpki-client