Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05c4765b-4799-4565-ad48-4904ecc48754.roa
File:                     05c4765b-4799-4565-ad48-4904ecc48754.roa (raw, json)
Hash identifier:          2eZKqztCDkHxOKpfS4u289frVEfCn9cfAni9tG6OzYM=
Subject key identifier:   94:16:59:B8:97:EC:74:FB:93:58:F0:6D:06:D3:F0:14:8E:EB:51:76
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F77695ADCE609DA5F54ED75679B557D2A256AD0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05c4765b-4799-4565-ad48-4904ecc48754.roa
Signing time:             Tue 28 Jul 2026 00:10:08 +0000
ROA not before:           Tue 28 Jul 2026 00:10:08 +0000
ROA not after:            Mon 26 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.87.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:77:69:5a:dc:e6:09:da:5f:54:ed:75:67:9b:55:7d:2a:25:6a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 28 00:10:08 2026 GMT
            Not After : Oct 26 23:59:59 2026 GMT
        Subject: serialNumber=38ba8210c5ae0e00f3beb2df0a7f521b7943dfb91586bc2861d3d01ba8172ea4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:56:8c:10:57:c2:90:25:c5:aa:75:55:45:11:
                    c5:09:a6:96:96:bb:f6:e8:04:97:da:41:4b:61:57:
                    d9:5d:9b:af:c5:33:be:fe:a0:7c:e0:cb:83:8b:8f:
                    7c:d5:b5:ea:5a:d9:01:64:50:6d:ca:69:3b:98:1d:
                    8d:f0:87:7f:e3:b5:40:ca:fa:01:22:79:e9:2e:6a:
                    f8:d0:2a:6c:16:c6:bd:47:84:51:21:50:51:31:ca:
                    24:66:f2:5e:e3:f5:95:bc:ca:c5:9c:a2:fa:be:ea:
                    1c:6d:3e:5b:cb:77:34:25:ee:eb:78:8f:d6:50:5d:
                    52:78:9d:9e:b4:89:12:7e:3b:28:ac:b3:74:36:28:
                    bb:dc:f7:9f:41:d7:ec:d9:cd:05:31:67:d3:da:94:
                    ae:ad:51:de:1b:9a:ca:0d:67:df:12:04:6f:43:af:
                    87:58:fc:e9:2c:80:f6:51:7d:ab:fc:bc:0b:9c:02:
                    62:81:9b:69:f2:05:6d:af:d3:d9:75:16:e7:3b:df:
                    e7:d3:63:16:82:2e:51:7b:31:93:cd:07:24:b0:7b:
                    30:57:05:d6:19:95:ad:00:56:ac:cd:18:33:0c:e0:
                    66:43:42:b8:ca:7a:4a:c3:c8:b2:ad:a4:d7:e6:e5:
                    b6:c3:53:5b:b4:fb:68:99:cf:12:8b:17:7b:08:fc:
                    a7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:16:59:B8:97:EC:74:FB:93:58:F0:6D:06:D3:F0:14:8E:EB:51:76
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05c4765b-4799-4565-ad48-4904ecc48754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:ab:dd:8d:1e:f9:b2:45:d8:ab:58:c0:16:e0:fd:81:96:32:
         aa:9b:1b:51:a3:35:aa:5d:2b:14:89:37:2c:4e:6a:b6:03:2e:
         65:ed:68:da:70:16:2f:a0:54:fb:4b:a4:bf:5f:c4:7c:b2:11:
         66:e8:81:41:34:32:89:16:38:a3:c7:0e:23:28:3b:66:a6:26:
         b7:25:51:0c:9c:96:3b:2d:72:72:d1:59:01:8b:e0:6a:a2:17:
         0c:f3:78:ce:e5:fb:ee:1a:6e:8c:2c:8c:8e:6a:4b:6a:d3:63:
         62:44:c0:7b:37:28:0f:83:7a:9b:7d:59:66:e3:56:ef:a6:94:
         c2:92:e7:2e:d5:ec:16:05:91:cb:da:96:00:d4:0b:a2:89:3b:
         47:72:72:5a:55:ea:61:9e:30:1f:e3:22:ff:9a:26:45:ec:05:
         f2:4c:a6:81:45:df:62:b1:7f:88:51:7a:9e:67:43:8c:c9:31:
         ea:6c:89:38:33:d3:9f:6a:43:d6:43:90:71:4b:a2:67:33:bd:
         2c:9b:7b:9c:b8:9c:12:8a:9d:a8:02:1d:5d:be:3c:87:53:02:
         45:86:65:da:e2:b2:bb:68:5a:c6:35:ed:b3:67:45:59:f1:c0:
         ee:df:78:b1:10:1f:76:2c:37:16:bd:7d:16:c6:ab:9b:74:23:
         34:5c:55:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:53:02 2026 by rpki-client