Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/342b16eb-59d4-444a-a8d5-604675472c36.roa
File:                     342b16eb-59d4-444a-a8d5-604675472c36.roa (raw, json)
Hash identifier:          SpDhnGYwuXuI4qCTzszzZDVhjAWrW6g0/XNajWnAZQU=
Subject key identifier:   7B:13:80:C9:37:D9:B0:AB:4B:6B:2B:13:9D:59:39:3C:76:28:E2:7B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       35BF8F8BC548D3A83E8022027E8C70511936EA6D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/342b16eb-59d4-444a-a8d5-604675472c36.roa
Signing time:             Fri 13 Feb 2026 00:00:46 +0000
ROA not before:           Fri 13 Feb 2026 00:00:46 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        13.162.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:bf:8f:8b:c5:48:d3:a8:3e:80:22:02:7e:8c:70:51:19:36:ea:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 13 00:00:46 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=01cb5dfac0af65c993dd0f344cd8200482a04ec12f8f78b5362a1287aa1548ab, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:84:dc:52:04:c0:39:75:74:e7:09:6f:bc:ed:
                    81:50:e4:4c:36:74:92:48:82:28:4e:f9:82:6d:5a:
                    fb:0b:59:b9:84:bd:66:fd:b4:eb:59:fc:f9:7a:9e:
                    99:34:cb:67:0e:f2:aa:21:3b:7d:e8:b3:42:d7:83:
                    df:8d:71:88:06:0e:86:09:d2:d7:0a:fc:e6:b6:5c:
                    95:e5:51:c3:89:53:74:36:46:40:83:40:28:3f:88:
                    7c:f2:3d:5d:37:7f:cc:f9:f1:ea:98:1b:9d:57:ac:
                    3c:3a:fa:aa:ee:f2:a7:d6:40:ba:a3:7c:70:77:f0:
                    1b:47:f7:9b:0e:68:44:5d:03:5c:65:19:e2:83:0a:
                    bb:05:85:05:99:d8:1e:36:b3:18:7d:9e:fa:b7:3b:
                    f9:57:06:67:ce:82:2f:aa:fc:4b:18:eb:af:51:49:
                    6c:75:3c:3d:38:d0:b0:c4:a0:c6:6d:69:e8:ac:02:
                    3b:62:b3:10:19:06:0c:40:45:0c:b5:c9:a0:ae:f2:
                    ad:a2:ba:d0:d6:f8:b7:fd:1c:04:bd:b8:22:e1:4e:
                    0d:c3:15:b3:13:da:9b:01:2c:c5:82:3b:7e:08:bd:
                    4e:fa:3e:ca:e1:41:c1:b6:8d:7c:a9:29:30:6f:3f:
                    36:c8:be:3d:69:69:87:42:7a:13:cd:9a:78:99:f6:
                    8d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:13:80:C9:37:D9:B0:AB:4B:6B:2B:13:9D:59:39:3C:76:28:E2:7B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/342b16eb-59d4-444a-a8d5-604675472c36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.162.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bd:81:ad:f7:ca:2b:7c:69:be:fd:67:cc:d2:d8:e2:96:e9:8e:
         10:41:7b:a5:32:d6:a9:39:af:de:32:ac:ae:66:82:66:d7:f7:
         ae:a6:50:a7:8e:a5:72:75:4c:1b:7d:4c:20:01:38:4c:8e:ff:
         a9:c6:0e:1b:87:e4:0f:a7:6e:29:7c:31:53:f5:38:22:6e:6f:
         b7:9e:96:39:99:2b:8e:bb:a2:3c:cd:f5:31:bd:fd:bd:5c:2e:
         5d:62:e5:8b:52:4f:38:1d:de:5b:dd:d4:ad:04:c1:be:1f:39:
         38:e1:f9:49:25:63:01:0c:3e:37:21:c9:f3:f7:40:49:36:66:
         b7:cd:5c:87:99:ba:18:04:d3:1f:1d:b8:e9:40:04:05:0f:1d:
         62:e0:00:50:1d:f7:61:b3:8d:e5:31:01:8b:0f:35:63:0d:25:
         9a:db:31:4a:1f:03:53:5b:d4:70:72:55:8a:0a:3a:50:e3:10:
         81:a0:d6:74:e8:14:09:9f:af:59:5b:c0:8c:a7:d7:ea:ec:44:
         d2:6c:82:79:69:39:81:66:f9:91:67:de:95:9d:ca:aa:43:a0:
         a4:05:f1:68:7a:42:cb:a1:ae:11:c1:6c:ca:6b:31:a2:8d:46:
         85:ca:77:d8:79:30:6f:6c:2c:05:ad:2b:dc:50:5b:25:f9:8d:
         11:66:67:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:26:43 2026 by rpki-client