Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6776af38-515d-4b33-bc1f-9f781cacf369.roa
File:                     6776af38-515d-4b33-bc1f-9f781cacf369.roa (raw, json)
Hash identifier:          HuAWRjqyeH+Kve0rPwK++kDNXf1Sx9irCz+GmXV5jb0=
Subject key identifier:   20:F1:33:B5:13:C4:27:1D:B8:FC:AF:D9:B0:50:36:BC:84:EC:13:32
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4986C6F144760267CF78847CAE48E8FB6CEB6077
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6776af38-515d-4b33-bc1f-9f781cacf369.roa
Signing time:             Fri 15 May 2026 02:20:56 +0000
ROA not before:           Fri 15 May 2026 02:20:56 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        107.20.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:86:c6:f1:44:76:02:67:cf:78:84:7c:ae:48:e8:fb:6c:eb:60:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 02:20:56 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=dfda76d77a9fbef92e4613b2ecd69b4f24c2e0749e4d10ed377787185f257019, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4c:51:79:ef:90:fd:a8:6e:65:d4:81:ec:27:
                    9e:b7:c3:f5:08:1f:4e:7f:f7:fe:ce:ca:dc:f7:8b:
                    2d:ed:68:0b:c3:2b:4b:0a:d4:9d:e8:b4:cd:cf:ba:
                    76:1c:1f:77:2f:83:7c:82:d3:00:22:fc:30:78:2a:
                    52:c9:16:2f:ae:95:29:40:26:df:f1:e4:84:f3:b4:
                    ae:9e:26:1a:24:3b:16:06:2f:df:ca:3e:ad:2a:e3:
                    ea:3f:a1:e9:23:8c:a6:96:40:05:8e:a0:92:9c:bd:
                    57:28:9e:29:73:ca:44:79:2a:ea:3f:be:37:d9:e1:
                    68:86:73:0e:5e:02:1e:0b:18:06:a9:a5:4a:56:06:
                    af:c9:11:61:cc:1b:cd:91:ba:e3:a1:44:8e:e2:6c:
                    3e:7a:ad:5a:92:ef:9c:85:33:e7:ab:da:b8:3f:d4:
                    a4:06:eb:74:4c:92:e7:87:58:46:af:1b:e9:51:f8:
                    b2:93:0b:86:96:ec:e7:11:b2:ec:ae:d3:83:f5:90:
                    a6:7a:a1:d7:c4:8d:b8:6d:fb:78:df:e3:49:f8:b3:
                    21:9f:32:1d:c5:e4:ad:82:ea:5c:dc:c6:0a:e7:51:
                    d0:8f:35:78:5a:e2:ae:1f:aa:a1:63:4d:90:85:49:
                    c5:aa:48:51:e8:89:79:f4:9b:f8:25:90:76:7c:01:
                    a7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F1:33:B5:13:C4:27:1D:B8:FC:AF:D9:B0:50:36:BC:84:EC:13:32
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6776af38-515d-4b33-bc1f-9f781cacf369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.20.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         35:d9:67:c5:e0:50:e8:63:4a:4e:92:37:42:4d:4d:ea:88:7c:
         5d:6a:b1:fb:de:0a:73:e7:61:80:21:9c:3a:0d:91:4d:91:8d:
         3e:9b:0c:54:cb:71:73:64:e8:15:03:66:a7:c0:ab:8c:52:f4:
         e0:2f:df:54:bc:51:2b:5c:15:d1:cb:9a:e5:1d:05:fa:38:a8:
         c0:c0:95:73:09:cb:a7:ed:77:4d:10:fd:3c:e3:9d:56:9d:fd:
         22:44:3e:a6:3a:7d:23:be:3f:29:4e:bb:1a:43:d4:09:69:96:
         9a:05:c0:67:f7:c7:f3:19:81:b6:89:c0:08:d0:e7:8e:2a:c2:
         1a:84:8a:c2:df:0f:17:5e:88:55:8a:6a:27:ad:d7:d2:7a:29:
         e4:d2:ae:a7:6f:c9:5e:fb:ba:a2:71:1c:75:ba:a2:cb:8d:02:
         97:89:97:e6:c9:41:81:17:92:ae:2b:42:03:af:4a:ab:57:cb:
         3c:76:b8:24:e8:d1:a4:50:01:c0:32:46:81:50:cb:b0:3e:64:
         96:94:8d:17:ca:8b:57:37:cc:76:ba:a0:69:a7:63:3d:6e:3e:
         24:e1:bc:89:2f:bc:d1:be:aa:a3:de:d6:8e:7d:76:04:8b:fc:
         bc:7d:a4:46:60:5a:89:68:7b:ae:17:81:ef:22:50:69:44:61:
         4d:74:a4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:22:01 2026 by rpki-client