Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f98c6682-15ea-4f71-9c0e-97127590dea1.roa
File:                     f98c6682-15ea-4f71-9c0e-97127590dea1.roa (raw, json)
Hash identifier:          mJ2zMtj2T/KQvh87Z/mqwgoNtbtdrHKThvCilMzWyxM=
Subject key identifier:   5A:C4:C2:B8:9E:D9:74:35:8A:0F:DE:A1:8C:89:CF:24:5E:61:C9:B2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       60A27878D58629B531FFE2287D6769A90C7EBE8F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f98c6682-15ea-4f71-9c0e-97127590dea1.roa
Signing time:             Mon 20 Jul 2026 00:42:05 +0000
ROA not before:           Mon 20 Jul 2026 00:42:05 +0000
ROA not after:            Sun 18 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        63.176.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a2:78:78:d5:86:29:b5:31:ff:e2:28:7d:67:69:a9:0c:7e:be:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 20 00:42:05 2026 GMT
            Not After : Oct 18 23:59:59 2026 GMT
        Subject: serialNumber=4a31ab0bc8822f260a2e000e8b1fd68ad3065329f25900372c041eb2afddba00, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:49:fe:4b:7c:3a:d1:90:a1:17:02:a5:7f:f0:
                    17:b1:39:3f:8f:44:e2:80:be:c9:72:29:ed:f6:b5:
                    f0:bd:f2:3d:80:4a:0e:86:ca:ba:3c:ff:94:41:57:
                    a9:80:6e:e1:66:fb:21:4f:80:b3:d9:66:0c:60:a2:
                    e8:a5:dd:9d:3a:ba:3c:01:10:98:56:b7:90:0a:56:
                    cc:5f:c7:24:5f:6b:ff:95:be:90:50:a7:99:ae:03:
                    eb:9f:40:ae:2d:e8:f2:17:66:79:84:e4:9a:82:26:
                    f9:70:ea:ad:c7:69:01:90:8b:a1:38:eb:91:8a:89:
                    2f:14:5e:4f:af:fe:59:de:6e:a3:af:ff:15:37:89:
                    a2:c5:70:93:cf:a4:19:fd:ae:cd:b4:43:32:df:e3:
                    4a:b9:f4:72:9a:b6:36:34:4f:1b:e4:e8:e9:80:91:
                    12:c5:bb:dd:6f:f4:04:44:ca:a0:1f:74:69:b5:d2:
                    f4:83:dc:9c:ba:f5:6d:09:d2:a3:5f:86:98:36:60:
                    6d:10:24:d8:d6:a3:7c:4f:41:a9:b2:27:9f:07:0d:
                    c6:02:3d:59:72:cb:39:7f:94:90:da:a9:ff:39:7c:
                    fe:40:e7:ee:24:85:87:bd:d8:df:58:dc:c7:44:ab:
                    71:53:6b:7c:a1:e4:a2:08:d9:aa:ba:c2:51:f7:4b:
                    28:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C4:C2:B8:9E:D9:74:35:8A:0F:DE:A1:8C:89:CF:24:5E:61:C9:B2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f98c6682-15ea-4f71-9c0e-97127590dea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.176.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         93:ca:0f:f3:cf:fe:e2:02:d5:fa:9c:2e:82:13:e0:56:93:5c:
         8f:ef:49:74:21:17:5d:00:a6:6a:43:29:38:4c:3f:65:a7:df:
         c2:0c:44:cb:db:b9:e3:72:39:21:98:07:da:72:18:c8:77:a7:
         84:2f:4d:bb:4d:75:00:91:0a:4e:75:12:52:4b:60:20:47:ea:
         e2:19:9e:c3:1d:90:4c:0f:70:72:4f:76:19:61:27:86:f8:a8:
         7e:a7:ff:11:12:ec:05:10:45:bc:89:f6:d0:42:19:3b:b9:6e:
         c3:a7:4f:7f:92:49:e0:40:5d:14:a5:a8:ab:45:ff:7b:78:e6:
         f6:b6:7b:db:e2:a8:f6:82:4c:d0:c5:34:a6:f8:ef:29:66:10:
         be:5a:93:4f:2e:aa:94:99:96:1c:ed:38:9f:57:72:3d:43:5e:
         1c:36:ec:dd:5a:93:3c:1c:a6:d4:bb:9b:00:4f:d5:63:86:43:
         d4:fa:59:79:9c:ee:d3:de:11:f4:86:f2:a6:7d:84:f7:65:47:
         4c:ac:81:ce:b6:6f:1c:d8:b6:74:de:29:b9:35:e6:27:5c:f9:
         f9:04:e2:07:13:83:36:c3:fa:05:f1:e3:fd:e1:ec:3b:21:7a:
         23:9f:2c:c8:78:2c:e2:3d:90:b3:26:d2:77:69:47:ed:c4:d7:
         9b:fc:8c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:57 2026 by rpki-client