Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b64690b-4047-48e6-9109-1756a08e1c57.roa
File:                     4b64690b-4047-48e6-9109-1756a08e1c57.roa (raw, json)
Hash identifier:          UuNh2xVtEQBZZebXjYXKW+2s/1hOGciaQ99/htiny58=
Subject key identifier:   D6:21:2F:3C:EE:81:D0:8E:4C:9C:E4:3A:75:7A:C3:BC:B4:81:10:9A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       06D3C64E5A1B093C07C3D6CA1DBBDA9B6357CBDD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b64690b-4047-48e6-9109-1756a08e1c57.roa
Signing time:             Fri 13 Feb 2026 00:20:53 +0000
ROA not before:           Fri 13 Feb 2026 00:20:53 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        13.160.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d3:c6:4e:5a:1b:09:3c:07:c3:d6:ca:1d:bb:da:9b:63:57:cb:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 13 00:20:53 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=7af14d26d05170ebcad306c933c091b93366c255aff82efbb5f1d671e50b4fd5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a1:39:68:2e:28:64:5d:b4:7f:5a:d6:d8:2b:
                    a3:71:c5:d5:64:cf:12:c1:4e:ba:4a:b9:9c:fa:93:
                    9d:d5:68:5a:9e:10:de:75:45:4d:63:a9:6f:0a:3c:
                    ac:ee:08:0b:3f:de:b4:c9:76:8f:f9:59:03:a1:b2:
                    bc:f1:b3:e8:50:95:ef:7c:60:b2:72:24:b8:82:a4:
                    84:cd:48:28:4c:63:92:a0:bc:c0:24:b5:e9:0d:62:
                    80:c0:d2:06:51:68:d0:04:b2:3a:1f:07:7b:cc:c5:
                    3a:52:5b:12:ff:80:e2:46:69:8e:ce:2a:9b:56:ee:
                    48:8a:c2:eb:e7:16:73:10:89:d8:9c:34:82:75:92:
                    52:13:79:d4:e1:bd:82:01:64:24:f2:e4:64:6f:0a:
                    dc:5c:d7:29:6b:92:2e:4c:f8:7a:56:6c:6b:9f:ee:
                    1d:4a:ef:9c:94:2b:39:d2:74:41:7d:af:c5:44:81:
                    aa:73:f2:f0:ff:18:78:91:5f:af:97:7a:05:eb:ed:
                    84:0e:47:5f:2a:d5:d9:95:e8:3e:d1:67:72:06:86:
                    af:1c:67:fd:73:13:dc:94:49:70:8b:68:27:c3:37:
                    67:ae:07:07:38:ed:27:5e:63:cc:7e:87:10:02:1a:
                    e6:d8:8c:7f:96:fb:35:aa:69:af:1d:7e:78:4c:a7:
                    e4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:21:2F:3C:EE:81:D0:8E:4C:9C:E4:3A:75:7A:C3:BC:B4:81:10:9A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b64690b-4047-48e6-9109-1756a08e1c57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.160.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3d:1f:bb:bc:a2:da:a9:27:2c:bf:18:eb:f2:7d:5d:2e:1e:ef:
         94:b7:6a:a3:dc:51:17:fc:df:53:ba:89:f5:53:93:42:09:d0:
         8e:b7:47:a1:10:02:83:b2:a1:5a:48:4b:ee:50:a7:9e:ba:6d:
         a8:5a:38:17:bd:f0:01:15:81:e5:b9:c7:10:2d:fa:46:01:f3:
         c5:b4:12:00:66:96:25:ee:3f:f1:ba:d3:d7:a0:ac:68:a3:8a:
         b6:10:11:8d:97:e6:3c:1b:13:c4:2d:f4:1c:20:17:fa:0c:cc:
         58:a0:5a:33:b2:91:d1:f3:07:55:a3:9e:85:ae:b1:f2:26:cb:
         ee:3f:c5:76:bc:ac:e2:a9:79:c2:dd:4e:6e:16:81:cc:2e:b5:
         da:ea:06:37:ad:55:fa:b5:6d:6e:89:00:c1:d0:26:5f:32:05:
         28:c7:6b:60:17:d5:31:f7:35:04:43:a2:a9:a0:d7:8d:74:13:
         8b:fe:e7:d7:09:b3:9b:a1:93:40:4f:4e:21:67:5c:65:04:43:
         16:10:1f:81:f0:09:80:71:85:7f:21:61:fc:7a:3a:c5:9b:a9:
         2f:68:24:62:5a:72:bc:ff:64:ca:7b:85:cc:e2:73:9e:d8:4f:
         21:9d:77:2f:d3:92:d7:31:4e:d7:2f:b7:ec:ac:3e:d7:ca:2a:
         34:32:e9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:37:26 2026 by rpki-client