Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a7938ef-40d0-49c4-aa4e-862db8f8341f.roa
File:                     5a7938ef-40d0-49c4-aa4e-862db8f8341f.roa (raw, json)
Hash identifier:          flplkXcL4kkJDF3kUpb/N7EQ4NQ+zMjHYXtOLJo8LNg=
Subject key identifier:   7D:3A:F9:A0:F2:D9:99:57:D3:13:B5:11:FB:1B:1E:DB:80:51:D2:34
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5E76BEF3EB13BF430CCE1E09AF76DBAC8AADAE5A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a7938ef-40d0-49c4-aa4e-862db8f8341f.roa
Signing time:             Fri 24 Jul 2026 00:11:15 +0000
ROA not before:           Fri 24 Jul 2026 00:11:15 +0000
ROA not after:            Thu 22 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        50.16.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:76:be:f3:eb:13:bf:43:0c:ce:1e:09:af:76:db:ac:8a:ad:ae:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 24 00:11:15 2026 GMT
            Not After : Oct 22 23:59:59 2026 GMT
        Subject: serialNumber=45241fc1f2f8631029433624fa90567bea85046d1556bde5f8881aa8edb672ce, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cf:17:92:8a:9c:0b:b7:3c:bf:c5:84:c5:7d:
                    40:a2:d6:44:72:da:91:2a:38:6c:b9:60:ba:2c:f9:
                    74:bc:fd:1a:45:d8:af:44:b9:9f:2b:99:62:e6:60:
                    0a:a0:9e:14:ee:24:25:39:58:b1:e0:97:fb:ea:3c:
                    66:ab:19:f0:6b:f1:b8:9c:59:ff:8a:c5:ff:64:55:
                    8c:7d:16:1f:02:85:3f:00:69:b3:7c:58:1b:eb:02:
                    b0:13:32:31:11:73:f0:a4:75:39:03:4e:af:54:7e:
                    7f:37:06:6c:c6:54:2b:ce:52:10:41:07:1c:fb:b0:
                    05:91:d9:71:cd:51:e5:6a:f4:b1:34:ae:d5:f5:a9:
                    2c:6a:65:61:94:b3:c6:44:b0:80:6c:65:89:80:e9:
                    7e:cb:15:a9:c7:20:0d:2f:0e:c1:5a:f6:1e:b3:34:
                    34:05:70:aa:d6:1b:fa:b3:88:c8:1b:fe:43:0d:85:
                    20:aa:07:aa:39:9a:26:32:34:ae:c5:05:24:c8:ef:
                    8a:0e:ab:88:10:f7:c6:32:65:0a:91:5e:d4:1d:32:
                    03:38:85:0a:46:12:fe:b8:0f:d2:e1:4e:6a:3d:2f:
                    5b:51:16:4a:4e:48:ad:30:fc:e1:73:b9:ec:57:53:
                    12:1a:04:d7:b1:d0:7d:7d:45:64:10:33:c2:a6:9d:
                    27:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3A:F9:A0:F2:D9:99:57:D3:13:B5:11:FB:1B:1E:DB:80:51:D2:34
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a7938ef-40d0-49c4-aa4e-862db8f8341f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.16.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         98:89:26:40:7f:9b:de:8b:2b:af:38:ab:2e:ac:17:32:5f:f7:
         10:b5:0a:ef:32:3e:36:39:6e:b3:83:5d:cf:3c:92:b2:45:11:
         7c:34:a5:10:96:28:b4:ca:ea:51:57:f6:14:d7:1f:c1:09:bd:
         02:f2:b5:2e:4b:50:6b:a6:d4:ba:74:f7:35:f3:44:5a:a0:a9:
         d3:a8:2f:45:a2:5e:88:61:59:da:6e:c2:d0:f3:cb:c6:ab:28:
         ff:80:21:86:f0:22:bc:c1:56:c5:99:d3:db:f5:d4:bd:8a:e9:
         0b:7d:d0:71:e0:d4:6b:e3:0b:59:28:9b:a9:ad:eb:8e:c1:1b:
         36:35:54:f5:0a:37:82:b5:42:4e:14:d8:43:df:97:50:5d:03:
         2c:36:ac:d7:54:86:45:7a:d4:6d:5e:bc:fd:7a:2a:75:28:1e:
         eb:1e:5a:53:0e:c5:0e:ad:db:61:f5:e5:ed:15:e7:f8:6a:d3:
         34:e1:fa:03:97:3c:57:67:de:23:96:46:e1:b2:00:a3:eb:4f:
         18:b7:53:9a:1d:47:ff:e9:ed:13:2a:90:82:8c:bf:94:8b:02:
         78:24:cf:d9:22:43:7b:9d:71:c6:ae:5d:f4:87:3d:7e:5e:94:
         6b:e1:b3:2d:63:00:40:c1:e8:5a:4b:09:4b:64:b8:47:1d:af:
         ba:2e:f9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:49:41 2026 by rpki-client