Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fbcb60b-a5ea-46f5-9918-7ad443253fcf.roa
File:                     0fbcb60b-a5ea-46f5-9918-7ad443253fcf.roa (raw, json)
Hash identifier:          ccqkIJJvbqXyNJCqHEmo2tZrPJDgmyQd/n/OvMD+MgI=
Subject key identifier:   C1:FF:92:72:21:AD:C3:3C:20:43:BC:A1:64:BE:6B:AD:96:ED:F5:7B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       65C8C8A86565306F44D55C4511159C75E034AC9E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fbcb60b-a5ea-46f5-9918-7ad443253fcf.roa
Signing time:             Fri 15 May 2026 01:00:08 +0000
ROA not before:           Fri 15 May 2026 01:00:08 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        107.160.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c8:c8:a8:65:65:30:6f:44:d5:5c:45:11:15:9c:75:e0:34:ac:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 01:00:08 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=d4008e95c1c94afcb003ce2394f8ac49b40a6df5fa0715462a18b9a8ea486ccf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:14:1c:1e:46:2f:31:35:e7:2d:45:04:9c:3c:
                    61:13:46:0e:ec:d5:41:b4:76:7f:f1:f2:e3:61:12:
                    23:5d:69:44:7c:af:fe:f9:c9:78:5b:8d:f1:44:ee:
                    e5:0c:e4:9a:8b:00:9a:33:72:f3:f5:96:04:1a:0d:
                    ff:f3:9a:9b:7c:a5:39:3f:91:75:60:91:f0:a8:91:
                    4d:cf:15:b4:1e:6b:88:98:89:0f:3b:f4:0d:e7:36:
                    c4:29:27:a4:ae:2e:b9:13:dc:80:d3:e1:73:f4:a6:
                    8e:ee:f7:5a:d5:54:59:d2:02:15:99:ce:ac:48:df:
                    68:1c:12:29:3b:b0:66:62:c0:88:e7:9c:cd:f1:b1:
                    e3:db:fb:09:04:0f:39:80:b9:f6:b8:bb:05:66:76:
                    b7:76:8b:a7:23:3c:3a:18:2f:dc:58:4c:ee:7d:da:
                    f1:c7:01:60:93:04:25:92:b5:97:22:f7:e1:fd:ba:
                    3a:9f:e2:c7:44:66:92:75:c1:b2:a4:53:f7:35:fa:
                    66:0b:34:d6:21:69:00:c0:cf:8b:09:29:6b:7d:e0:
                    76:a8:c2:36:66:b7:e9:f4:e2:29:d5:c3:12:b0:95:
                    12:c5:bd:0f:e6:32:42:9c:dd:f0:ef:27:03:23:12:
                    38:d6:ee:07:04:f4:28:a7:fb:c8:f7:6a:44:40:bb:
                    cb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FF:92:72:21:AD:C3:3C:20:43:BC:A1:64:BE:6B:AD:96:ED:F5:7B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fbcb60b-a5ea-46f5-9918-7ad443253fcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.160.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8c:c5:cb:61:0e:83:ef:11:87:12:eb:92:ca:a6:67:60:b0:8e:
         3d:59:dd:41:7f:db:12:cc:92:09:11:81:52:64:d6:a4:b8:0c:
         81:ef:c4:a2:b7:ca:64:38:56:3e:92:3b:b1:15:c2:6a:73:69:
         34:d1:d5:26:f0:32:e5:0f:ad:35:70:b0:a2:38:24:ea:90:05:
         87:15:05:e4:e3:4e:ba:c9:89:52:e0:1a:25:90:4b:4b:5d:72:
         76:b8:40:fb:8a:79:b2:c4:88:1e:66:6b:3a:dd:71:72:dc:ce:
         8a:e7:31:22:1c:b9:3a:3f:66:f9:88:25:e9:fb:50:32:95:6d:
         9b:08:c2:2a:75:27:49:d1:8a:be:12:ad:51:9e:12:ff:86:6b:
         5d:f9:6d:5c:df:3b:a1:9f:de:58:b6:31:eb:33:8c:b6:6b:b2:
         f7:ee:2b:67:88:7d:4f:45:1b:db:f6:ca:93:2b:03:5e:7f:27:
         14:be:ea:49:2e:98:ae:2c:36:fc:1b:5b:6c:64:ba:23:ec:fa:
         9b:fb:7b:42:a9:48:5a:81:37:b4:4e:8f:db:f2:fe:94:a1:20:
         37:67:cb:69:89:bd:67:db:56:c2:29:c2:3b:0e:21:9d:75:b9:
         79:7a:4a:be:5e:2f:e4:7f:46:6c:65:40:63:8d:03:b4:55:d0:
         44:54:aa:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:06:21 2026 by rpki-client