Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb3e6beb-1c9c-46d5-8470-7b4c68ce9af7.roa
File:                     fb3e6beb-1c9c-46d5-8470-7b4c68ce9af7.roa (raw, json)
Hash identifier:          F3L3OXlWwpM4b+c1YAGItS1FJF2e0tcBDDYL5g5IQQM=
Subject key identifier:   2E:DE:F5:BC:54:FB:BF:04:1D:18:A5:60:6F:A9:27:14:B2:81:88:35
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       41CCC36B60676E9B13CFEEFDA61D52DB736437B8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb3e6beb-1c9c-46d5-8470-7b4c68ce9af7.roa
Signing time:             Thu 23 Jul 2026 01:00:41 +0000
ROA not before:           Thu 23 Jul 2026 01:00:41 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        13.130.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:cc:c3:6b:60:67:6e:9b:13:cf:ee:fd:a6:1d:52:db:73:64:37:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 23 01:00:41 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=c544d62f32f5a55ae45f7b4ff16272a99341890409445d98636f4fda1de237ca, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:45:53:c6:7e:35:3d:43:83:bf:f7:a8:3f:20:
                    89:33:e0:25:97:d3:9f:ac:85:77:b0:5e:6c:62:8a:
                    b7:5c:22:f4:d1:15:b6:d2:75:6f:6d:72:ba:75:9c:
                    db:6b:fa:96:41:8c:1a:31:65:03:a1:d9:e7:10:29:
                    fa:71:2f:e2:4b:d4:ea:7a:09:3c:91:8b:27:71:14:
                    89:48:04:04:a8:b1:69:83:e9:82:d9:33:c1:c4:95:
                    e1:3e:d9:65:6f:61:6b:04:9e:66:f2:a7:b1:88:a2:
                    71:8c:7e:cf:6b:8d:86:53:32:11:13:38:71:6e:80:
                    da:5d:f3:a1:b7:e7:d1:53:6d:1f:2c:37:73:24:ee:
                    b6:b1:6e:13:4c:ff:38:54:4a:7e:97:f9:4d:9d:84:
                    0f:cc:2b:58:f1:32:4e:fb:3c:48:8a:82:aa:9a:c6:
                    22:07:c3:36:af:ad:8c:26:c5:65:0c:f8:c5:78:4f:
                    85:85:6a:f6:c7:f5:4c:f7:a7:92:ec:fc:68:20:3d:
                    c0:c0:30:1d:e5:c0:36:72:1b:0a:b7:8a:c4:e3:81:
                    c5:c8:96:a3:0e:ac:96:9b:8c:bb:c4:e1:af:97:79:
                    fc:3b:65:ce:b8:5c:d5:2e:82:d2:8c:1c:5a:90:79:
                    9e:b3:5b:76:e3:c8:cc:33:10:55:b6:8e:67:35:4e:
                    1d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DE:F5:BC:54:FB:BF:04:1D:18:A5:60:6F:A9:27:14:B2:81:88:35
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb3e6beb-1c9c-46d5-8470-7b4c68ce9af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.130.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         07:00:66:a8:8b:7b:29:9e:8a:57:cb:aa:62:6a:05:2e:df:d4:
         aa:73:15:f3:a6:35:10:64:d2:b4:fd:cf:e4:1b:63:3e:d1:22:
         8f:57:37:3c:c6:36:74:15:9a:2f:5e:7c:92:08:9a:20:cc:91:
         6e:59:69:34:39:54:63:69:63:fd:45:f8:fb:b2:f9:cf:6b:d7:
         f5:d6:e9:f1:f1:66:b6:52:2c:f3:78:d5:aa:fb:e0:0d:6b:f3:
         71:85:62:72:9d:ec:e6:57:9d:21:5f:89:e8:e3:59:82:f5:84:
         37:0f:08:4b:a3:ed:78:44:5a:3e:5c:88:b8:03:35:b0:6b:fc:
         67:5d:c7:9e:ca:86:dc:71:42:2f:04:cb:54:b6:f1:a3:92:28:
         15:54:3b:fc:c0:c0:5d:b2:e6:e1:c2:88:4c:28:78:ed:8b:c1:
         aa:dc:7c:14:88:b5:7c:5f:0c:cd:c2:d7:e1:ba:03:9a:f2:19:
         be:45:c6:3a:ee:7d:e5:19:54:05:9f:c2:2f:41:5b:17:45:e0:
         f6:c6:f2:d7:1d:db:4f:85:2b:d2:c7:1b:ad:de:fa:e5:aa:0d:
         e7:28:67:37:de:ec:45:1f:81:fb:6e:43:38:63:57:3f:56:42:
         15:ef:ce:61:b7:21:a2:5d:19:6b:2b:84:c6:78:a0:c3:b5:92:
         a4:a3:96:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:32:52 2026 by rpki-client