Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f21d4e9-f7b8-42c4-aca7-72a838e78ac6.roa
File:                     4f21d4e9-f7b8-42c4-aca7-72a838e78ac6.roa (raw, json)
Hash identifier:          bZyZBwbn3PrgsNahOX8y+r7oLV1xfPmX92DkwML93fw=
Subject key identifier:   56:31:AE:6D:1C:73:E0:26:B2:52:26:D8:5F:25:D7:8A:2C:A8:0B:4A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7A131A1B2FEE2A193D40BD7605E7261EAB5E2EE1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f21d4e9-f7b8-42c4-aca7-72a838e78ac6.roa
Signing time:             Fri 15 May 2026 00:40:44 +0000
ROA not before:           Fri 15 May 2026 00:40:44 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        161.178.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:13:1a:1b:2f:ee:2a:19:3d:40:bd:76:05:e7:26:1e:ab:5e:2e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 00:40:44 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=283d956b6ece84264af67585471c35a493f666fcf0fe50fa569dad17b885d09f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4c:41:0c:83:b2:5e:b7:7c:26:72:43:65:22:
                    4f:94:d6:5a:93:93:a6:48:b3:b0:f0:9f:1a:f2:82:
                    7b:31:34:be:44:26:f5:f1:aa:7f:d7:45:ce:01:7b:
                    e7:e2:43:c8:2d:4d:c4:08:31:ae:55:38:d0:b4:af:
                    cd:40:fb:e5:0e:af:d5:e3:57:57:4b:e7:85:0f:9b:
                    a7:fc:32:42:73:09:c5:20:b8:e1:a0:13:7f:0e:d6:
                    fa:49:e7:08:28:88:57:7c:1c:54:7a:11:14:e9:4e:
                    57:07:e8:ad:02:27:16:b3:5a:6a:42:1c:5b:a7:86:
                    77:5b:ec:8a:1d:4a:71:fe:ea:85:62:6a:e2:08:6a:
                    3b:9c:4c:00:e6:94:6a:0d:64:3e:d5:7a:ee:47:d8:
                    da:69:9b:94:00:54:e5:ad:cf:a5:36:82:6a:77:32:
                    80:35:f7:ba:5e:9e:13:9b:f0:57:32:94:c7:ad:bc:
                    1e:a2:ed:6d:10:c1:22:fd:77:f7:09:ca:c4:b7:bb:
                    fd:34:ae:e8:82:a3:9d:a2:32:45:0c:19:ff:8a:a3:
                    e5:3e:f5:eb:14:e8:36:d1:a2:0d:06:b3:f4:5d:4e:
                    c4:4f:4f:53:69:94:fb:c5:60:5a:0d:68:f7:0a:57:
                    a6:03:69:03:7c:fb:2c:77:75:71:46:ea:f9:76:6a:
                    c3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:31:AE:6D:1C:73:E0:26:B2:52:26:D8:5F:25:D7:8A:2C:A8:0B:4A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f21d4e9-f7b8-42c4-aca7-72a838e78ac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.178.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         af:dc:ee:45:a3:99:10:49:7a:a9:dc:c1:c2:46:57:e0:e6:1d:
         4d:8a:48:d3:f7:36:50:72:ef:19:ab:02:ae:63:e7:a1:54:b9:
         97:72:29:25:4c:ff:d5:eb:d2:64:a6:89:6a:85:e8:b7:1d:86:
         5e:18:ff:d3:bf:a9:7a:04:f1:66:fd:e6:ea:f0:49:39:53:ca:
         80:24:49:3d:48:a8:4a:f0:49:ef:2b:1c:eb:5c:ca:5b:d8:ad:
         39:46:3c:19:40:6a:c8:bc:03:77:f6:d7:ba:93:ab:0f:3c:a1:
         6d:e6:3a:45:09:0e:b4:88:cb:12:55:fc:b9:91:88:b5:93:de:
         6c:fd:a2:01:0a:6e:d8:10:e4:2b:5b:50:e8:de:5a:38:c3:44:
         e6:91:d6:b5:2e:54:10:53:e6:a2:9f:05:4c:39:e0:e9:20:ab:
         00:c8:d5:a6:8f:fa:2d:ac:79:a3:eb:33:64:6b:ed:e2:dc:76:
         6f:f7:26:b1:a9:7b:d7:19:e0:c1:02:5e:8c:66:1c:af:b5:e2:
         fc:ba:be:4d:ff:c8:d9:9f:9b:0f:ab:a5:9d:c0:6b:b4:9f:62:
         2e:37:75:00:5b:2e:ac:4e:68:ce:bc:31:10:5c:6b:07:83:15:
         19:a2:81:22:09:20:bc:5b:0d:0b:6e:07:80:39:d6:af:48:65:
         79:be:c5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:12:06 2026 by rpki-client