Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5209f90d-f864-4360-9098-1efc9882f862.roa
File:                     5209f90d-f864-4360-9098-1efc9882f862.roa (raw, json)
Hash identifier:          6wa3uantBQJugQP+Bj0kbkuFV03GDf7SkLlZI6oCc7Q=
Subject key identifier:   4D:99:D3:B5:17:7B:BC:04:2B:8A:4B:62:67:1B:F7:FD:E4:E8:12:D5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       61B532AB2A6FFFDBC88EDB4D9486BEE2D1972EC9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5209f90d-f864-4360-9098-1efc9882f862.roa
Signing time:             Sat 16 May 2026 02:21:12 +0000
ROA not before:           Sat 16 May 2026 02:21:12 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        161.178.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b5:32:ab:2a:6f:ff:db:c8:8e:db:4d:94:86:be:e2:d1:97:2e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 02:21:12 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=ba7270dc4a6049e3b8cf9508cf60340f72164c8d6bc442a4aeda38b5f36dafdc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f1:69:82:5e:56:f8:a7:be:a0:7d:13:af:dc:
                    f8:44:af:f7:83:68:f6:75:56:6a:c5:80:e5:d7:df:
                    46:4d:78:f7:93:d8:84:f6:0c:1c:8b:81:70:15:29:
                    35:6f:de:21:79:da:bd:f6:c5:e0:0d:90:b5:f8:8b:
                    81:a4:36:e6:89:81:bc:d3:db:97:af:fb:87:70:f7:
                    b8:4a:73:36:bf:a3:47:4d:2b:3c:a6:aa:ca:09:70:
                    d7:cb:80:30:52:19:8d:36:bd:66:a4:74:2c:86:ea:
                    25:9f:7d:9d:55:2e:70:15:4d:27:0c:28:72:12:90:
                    5d:df:7d:98:55:0c:a5:4b:8e:bf:ac:a1:94:ec:40:
                    ad:15:30:85:ce:63:e4:ab:3b:ac:bc:e0:32:72:25:
                    81:a1:7e:89:9f:a4:11:5f:30:3d:c3:aa:92:05:40:
                    76:37:7e:cc:12:09:53:26:6f:68:9e:9b:f0:f4:14:
                    88:7c:8f:a9:e5:b4:4d:ec:a6:5e:98:1d:d7:18:91:
                    85:26:20:75:fa:db:91:3c:b8:a6:54:cc:86:97:23:
                    64:35:d7:eb:c8:32:42:43:c6:6d:74:f9:c2:d6:fc:
                    67:23:a8:41:8c:56:2a:4e:33:63:8b:f0:68:2f:d7:
                    ce:f5:40:04:88:be:4b:30:e9:a2:86:74:e1:cb:57:
                    eb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:99:D3:B5:17:7B:BC:04:2B:8A:4B:62:67:1B:F7:FD:E4:E8:12:D5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5209f90d-f864-4360-9098-1efc9882f862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.178.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         24:c0:99:40:7e:75:3d:cf:ed:24:9d:67:ec:2b:65:12:34:4c:
         f6:f6:05:d0:3b:78:48:32:de:20:98:ed:b8:84:39:2f:f7:9a:
         e0:e1:10:3a:0e:aa:ed:63:81:79:6a:9c:18:9e:bd:bf:61:b8:
         a0:23:fa:c1:84:12:2d:b9:66:c8:2a:d1:f4:c5:e9:ba:9a:75:
         2d:a4:8f:85:e8:0b:fc:7b:0d:47:9b:53:83:02:1a:0a:6d:9c:
         37:56:c9:64:83:e6:85:1d:cb:84:50:88:66:a1:b7:d2:82:51:
         87:15:e4:96:51:a6:89:54:f7:d6:0f:18:ff:1d:5a:8c:85:2e:
         35:7f:cd:17:64:1d:f9:75:ae:ad:91:e5:01:33:9a:8f:d8:99:
         3e:a0:8f:a5:9b:59:c0:ce:41:c7:40:3f:06:a1:20:ef:f2:fe:
         68:7d:3b:0e:2e:03:b8:ce:85:67:2b:95:59:d1:b6:20:ed:aa:
         c7:24:d8:59:95:16:9e:15:9d:fc:6e:6c:da:44:06:57:c9:1f:
         8f:ac:c1:e3:76:aa:c4:a7:10:05:7d:fb:61:2f:33:20:c9:f6:
         11:a5:8d:90:7d:9b:39:ae:b4:6b:ba:60:69:fd:21:0c:f1:84:
         44:50:53:15:c2:10:02:79:d2:70:c1:54:db:c3:8c:c8:2c:47:
         d8:f8:98:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:59:49 2026 by rpki-client