Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a97b80c-8fcc-44bf-9103-e6c5a4525950.roa
File:                     9a97b80c-8fcc-44bf-9103-e6c5a4525950.roa (raw, json)
Hash identifier:          EzFQwJGgAzSUQEmHVp3+cEWI3vAAozfvJQsd7SMOlFI=
Subject key identifier:   51:1E:BC:94:52:32:E2:49:2F:AF:1D:5C:25:C5:A7:8F:A2:B5:63:20
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6C0D87C5874B051997B5FABBC970A0D5FE83F570
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a97b80c-8fcc-44bf-9103-e6c5a4525950.roa
Signing time:             Fri 15 May 2026 01:11:55 +0000
ROA not before:           Fri 15 May 2026 01:11:55 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        161.193.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0d:87:c5:87:4b:05:19:97:b5:fa:bb:c9:70:a0:d5:fe:83:f5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 01:11:55 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=0947af05fca16f18da4fbd998a59e1449e56cd753c7b3c3fcec6dd0739b2da66, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:98:29:6a:ba:f3:8d:d3:a1:f9:c3:00:5f:23:
                    7a:f9:56:02:82:53:fa:6d:02:c0:87:af:df:41:53:
                    47:5d:1e:a7:dc:2c:a8:c4:c3:48:ef:70:ce:2f:88:
                    43:6d:d5:b9:3c:62:96:d8:54:ca:cf:83:d9:a0:3b:
                    a0:65:31:35:ff:a5:b6:01:0d:d4:fa:5b:8e:37:f5:
                    68:94:87:4f:dd:b4:29:10:60:d2:84:d9:85:87:db:
                    26:13:93:0b:75:22:82:24:a4:f9:3f:b9:d0:95:93:
                    41:5f:85:45:4e:6c:3a:14:79:4c:05:a4:30:79:82:
                    be:2a:8c:b0:b6:7f:19:ef:c5:6f:ef:9a:0b:f6:5f:
                    5c:92:64:93:a6:73:9f:64:4d:12:89:05:24:24:ce:
                    9e:77:5f:75:79:bb:5b:f2:da:15:13:76:c0:e2:68:
                    22:52:2f:64:44:6c:02:c1:38:33:fd:7a:52:43:e0:
                    53:af:70:36:4e:75:b6:09:14:98:09:0d:a0:5b:f3:
                    9a:1a:9e:2e:41:b1:81:de:09:a9:97:2e:67:c6:cb:
                    bd:52:6e:ac:e1:a5:c6:bc:46:86:71:09:fd:f8:11:
                    23:e3:30:84:91:e7:35:bd:41:4f:0e:55:29:87:1e:
                    4a:04:d4:da:c1:26:c4:6f:42:dc:c0:7d:73:d0:91:
                    b7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1E:BC:94:52:32:E2:49:2F:AF:1D:5C:25:C5:A7:8F:A2:B5:63:20
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a97b80c-8fcc-44bf-9103-e6c5a4525950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.193.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3b:c0:bc:76:8d:12:ce:18:d3:ce:03:76:1c:2f:ac:66:63:8d:
         1b:e9:3e:c3:2a:05:86:1b:76:71:50:f4:2c:70:61:eb:56:b8:
         5b:46:cb:d4:a6:9a:f0:d6:64:a1:93:43:5b:b6:98:b5:d3:59:
         34:74:27:47:76:fe:37:be:5e:a0:ba:8f:3b:ca:b1:38:74:f3:
         41:c5:3b:e1:72:bc:84:08:98:1b:2d:3e:12:0d:ab:1e:e8:82:
         0f:1b:3d:bb:d4:f1:e4:ae:15:2c:9d:b7:ba:dc:3e:ed:0a:d9:
         a1:64:f1:e9:3d:7a:07:ff:ae:2f:34:63:c0:56:17:74:78:8a:
         d6:2f:79:9c:e5:2b:a2:34:5d:33:dc:94:cc:71:96:57:80:5d:
         a4:d3:48:2c:55:ae:81:d1:54:ae:b9:a9:58:3c:b7:6e:b0:1b:
         e7:a8:99:ef:86:9d:91:da:fa:a3:74:27:02:e2:44:ae:4c:ad:
         f1:dc:8c:c3:91:89:08:0b:f7:5d:80:0a:b6:17:9e:50:9b:c1:
         78:db:33:3f:37:69:0d:1d:3c:f6:c4:35:59:1b:3a:92:8a:64:
         8d:80:ae:39:56:f4:1e:ea:85:d8:d1:eb:0b:17:5a:54:f4:9e:
         13:a2:57:11:9e:98:92:4f:0c:a2:60:09:f0:99:63:b8:ef:0e:
         0f:7a:80:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:47:56 2026 by rpki-client