Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/616180ed-29ae-499b-8a01-013d569d9163.roa
File:                     616180ed-29ae-499b-8a01-013d569d9163.roa (raw, json)
Hash identifier:          2fVggfpmpgmAFVOlXdhkh45zfB78loGR1xNPys8Zv5M=
Subject key identifier:   E8:38:DE:AE:9F:DB:60:A9:19:7A:DC:19:82:29:DE:27:B3:21:D6:E3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5386DD4EC5BA8D5B7428F61A2CAF03C7D565F6C6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/616180ed-29ae-499b-8a01-013d569d9163.roa
Signing time:             Tue 19 May 2026 00:00:06 +0000
ROA not before:           Tue 19 May 2026 00:00:06 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        98.80.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:86:dd:4e:c5:ba:8d:5b:74:28:f6:1a:2c:af:03:c7:d5:65:f6:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 19 00:00:06 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=d7955c660021d8cb2d34547dc977241d9a58003a2a5200d02b73a18224a6a03d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c5:01:5c:b5:6f:b5:b2:f8:57:bc:f8:43:ed:
                    de:08:17:01:23:d0:39:6c:40:f1:e6:98:50:35:ae:
                    fa:b0:6c:6a:d0:79:88:f5:64:8a:e7:cb:a6:43:7e:
                    88:de:3e:dc:4c:b5:2e:bd:aa:dc:10:1f:48:00:1c:
                    34:ae:e1:1b:d7:9d:57:e3:4a:4f:2f:d1:1b:e2:a5:
                    02:f3:d5:c6:41:e7:bd:48:11:0a:9c:e4:5f:46:91:
                    4a:bb:3c:bd:89:88:ab:1e:5a:3b:f7:49:8b:67:fb:
                    32:a3:9e:fd:f7:52:cf:01:da:f3:18:97:37:03:a5:
                    d3:9d:ba:91:69:9c:42:00:de:a9:96:dc:bb:8c:5c:
                    23:21:5f:e8:70:37:a0:04:4f:a6:c8:3b:43:92:f1:
                    91:0a:f5:c8:67:d4:f7:7c:aa:47:c0:33:96:2a:71:
                    f4:9c:2f:8a:7e:cf:0e:f9:e2:4e:05:98:ef:d4:07:
                    47:1c:f6:40:93:dc:12:42:3b:32:18:b8:17:59:7d:
                    14:b6:97:e4:0d:20:ee:6c:3e:ae:d3:3d:20:7f:e8:
                    a1:dd:3a:a4:db:05:7c:c7:95:4c:79:64:76:0e:35:
                    9d:e1:82:9f:5e:f1:d4:4d:d6:7f:ef:92:ad:2d:c6:
                    16:6a:e8:08:60:a5:fb:56:ce:54:d9:82:67:7c:0a:
                    69:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:38:DE:AE:9F:DB:60:A9:19:7A:DC:19:82:29:DE:27:B3:21:D6:E3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/616180ed-29ae-499b-8a01-013d569d9163.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.80.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:d3:06:a2:27:f2:03:3d:f6:60:2a:4c:34:da:1d:aa:2b:40:
         ce:90:34:37:3d:bf:c0:13:f6:6e:55:a1:f1:9b:3c:09:d6:0e:
         e5:e8:e0:b0:73:1d:58:8e:1e:1e:cf:27:fa:b0:ce:ff:d8:0e:
         d1:65:ea:5f:df:3b:93:4f:b9:90:18:83:12:35:5a:db:6b:0c:
         9e:b8:77:58:d8:d9:60:ed:05:dc:96:97:34:1d:aa:22:65:83:
         97:43:6f:ed:1e:cb:a1:40:af:ae:fa:fa:ec:11:a7:47:5e:d0:
         e0:60:d2:9e:16:b9:d5:4b:77:9b:ea:1f:8b:a6:9c:d9:bc:7a:
         0d:59:f1:82:d1:4e:d8:fe:d2:c4:47:2c:d3:b4:11:01:e1:25:
         e0:97:b5:97:d2:ad:f3:56:88:78:1d:7e:70:a3:c7:d5:41:8c:
         8a:8f:01:d4:5f:62:a0:98:e8:6f:d6:e7:a2:bf:22:11:83:09:
         25:6b:70:61:54:4d:a2:a2:26:f2:2f:1a:e5:e5:ac:6e:d7:3a:
         10:eb:d3:14:b3:af:4a:57:f7:8e:58:55:14:19:ca:48:90:dd:
         3b:de:f1:aa:6f:b9:dc:53:3b:65:ad:15:5b:ec:ac:42:47:77:
         e6:a6:47:a6:e8:b3:fa:3a:ef:39:e5:4f:bf:a0:d6:7b:d4:a9:
         88:92:4a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:52:40 2026 by rpki-client