Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f6f500c-a228-4cca-a78b-c7f72e0b9e74.roa
File:                     9f6f500c-a228-4cca-a78b-c7f72e0b9e74.roa (raw, json)
Hash identifier:          /YEa4t/N5JlBFdgDbFWVl5SvPLIx7H0oLOzdtZH98Vg=
Subject key identifier:   EC:11:FA:A5:AF:50:A3:08:EC:8F:E4:E9:6D:0E:A0:D5:31:2D:B9:5A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2211BF1DEAB6B860F01F4EDB8833AF1F3FE4961D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f6f500c-a228-4cca-a78b-c7f72e0b9e74.roa
Signing time:             Sat 25 Jul 2026 00:10:10 +0000
ROA not before:           Sat 25 Jul 2026 00:10:10 +0000
ROA not after:            Fri 23 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.187.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:11:bf:1d:ea:b6:b8:60:f0:1f:4e:db:88:33:af:1f:3f:e4:96:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 25 00:10:10 2026 GMT
            Not After : Oct 23 23:59:59 2026 GMT
        Subject: serialNumber=b619d000714d1403d5c85c9fafadc52e2cc081482cd4efcb1682e2688aa92eaa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ff:bc:9a:91:e1:1c:55:6d:b3:81:be:0b:96:
                    60:7e:8d:6a:b3:da:16:87:b6:49:e5:13:c6:44:5d:
                    76:a7:dc:5b:24:34:53:93:a6:da:9f:dd:82:e6:23:
                    1c:72:2a:ec:92:5c:f2:92:a2:4c:0a:f2:e0:42:32:
                    99:e6:80:02:8d:84:51:37:45:f0:14:ea:4f:70:0b:
                    88:dc:44:3e:d6:1c:39:ee:c0:92:26:9b:d4:bd:bf:
                    8e:74:d2:62:45:e4:74:8c:ca:7a:82:48:a1:4f:08:
                    b7:32:76:38:74:ae:cc:5d:41:36:ef:eb:c7:73:62:
                    bf:b9:82:f4:ed:5d:aa:b7:42:9c:f5:3e:3f:fe:eb:
                    9d:54:b0:2b:ea:c3:96:84:23:75:70:fe:4e:a1:0d:
                    d1:b7:c8:a0:eb:62:b3:b9:2e:99:ee:e5:f7:df:9a:
                    fb:d3:a3:71:94:88:13:22:04:35:7b:68:ce:e2:69:
                    05:d0:cd:de:84:1d:0a:b1:c9:00:55:ec:75:d4:e2:
                    04:6c:94:54:a9:15:82:00:a3:aa:e5:b6:b8:2a:03:
                    38:77:b0:cb:7a:6e:1f:cf:68:e7:6b:56:a5:ff:2b:
                    f0:47:de:cd:c1:32:36:1f:6a:17:c7:8e:3a:4e:10:
                    70:84:64:d9:d3:45:cd:7e:be:44:be:0d:6f:ca:13:
                    f9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:11:FA:A5:AF:50:A3:08:EC:8F:E4:E9:6D:0E:A0:D5:31:2D:B9:5A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f6f500c-a228-4cca-a78b-c7f72e0b9e74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.187.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1a:d9:29:3b:d9:05:eb:20:49:75:2b:51:2a:1a:5e:5e:37:f4:
         d3:e7:2b:c8:75:78:1c:9c:0d:f6:7f:45:08:e2:66:ba:8b:60:
         b6:50:bd:06:3f:bb:d8:37:81:04:fb:28:4a:ef:e9:7a:fa:27:
         ec:a0:02:46:eb:2a:c6:d0:54:a9:aa:a2:9c:08:9f:30:06:16:
         45:25:fa:03:c8:e6:55:69:80:d7:5a:bf:9b:d9:08:60:5a:ef:
         1e:fe:e1:11:20:dd:42:5b:99:52:34:a7:d7:56:6b:9d:bb:a4:
         4b:5c:53:f5:71:a5:aa:2f:a0:ba:fa:cc:08:d1:ec:cd:fd:7f:
         97:b3:75:4b:1d:c9:92:95:eb:b5:d0:dd:57:92:97:f9:5a:17:
         51:94:b6:83:b9:07:81:dc:59:6c:b0:4b:fd:26:69:75:61:42:
         37:1e:53:b7:4b:7f:26:5f:b1:86:01:a1:47:00:0e:67:22:b9:
         0d:77:87:ef:9e:80:06:f6:7d:3a:e8:8a:09:a7:0d:48:ef:f6:
         06:04:1e:d2:16:6a:7b:67:d0:4e:06:4c:b6:5c:e4:2f:aa:89:
         fd:65:d3:36:58:5f:f9:54:de:1d:77:73:46:4c:f1:dc:3e:38:
         3f:0a:72:97:b5:62:bc:1d:4d:33:c6:a3:25:79:e4:42:e2:a1:
         6f:7d:ed:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:52:50 2026 by rpki-client