Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1d3960f-ba0c-4306-8cce-8123371ddf05.roa
File:                     b1d3960f-ba0c-4306-8cce-8123371ddf05.roa (raw, json)
Hash identifier:          joGy0RnX/Os5O9+SO5K6EwiaA7wF6nKg4rQOiR/mLJg=
Subject key identifier:   67:97:22:30:4D:8D:7A:F2:E3:81:73:7D:39:85:54:B8:60:D5:44:BB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6C19B05E3A4333A250EBFB79859FEDD0C24DCCFE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1d3960f-ba0c-4306-8cce-8123371ddf05.roa
Signing time:             Sat 06 Jun 2026 00:00:10 +0000
ROA not before:           Sat 06 Jun 2026 00:00:10 +0000
ROA not after:            Fri 04 Sep 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        16.65.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:19:b0:5e:3a:43:33:a2:50:eb:fb:79:85:9f:ed:d0:c2:4d:cc:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  6 00:00:10 2026 GMT
            Not After : Sep  4 23:59:59 2026 GMT
        Subject: serialNumber=7207719081146057494260ecc4211cd155c1730d37e692c92bd06fddc8f90461, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7b:d0:60:a4:19:d6:a7:ee:44:61:e3:11:28:
                    30:18:64:0d:dd:da:0e:be:b1:6d:7b:15:e6:b4:5b:
                    ed:e8:40:d3:2a:97:9e:e3:87:f7:a4:32:5f:7e:a6:
                    9a:74:af:33:60:48:1e:ba:d0:e5:b1:6b:02:80:a9:
                    36:02:01:d7:b1:2a:be:51:4a:4f:ae:47:8d:5f:c3:
                    99:b7:a8:84:ee:d7:3c:b7:7c:e1:1a:f8:6a:18:13:
                    b9:f4:43:57:49:78:d2:3d:61:09:69:7a:93:9c:23:
                    c2:21:46:c3:bb:9d:cd:96:02:ff:8e:82:d8:08:8b:
                    ab:47:db:30:94:25:1a:9b:54:67:d7:4f:81:42:a6:
                    ba:94:a8:c5:57:70:c1:51:21:64:5d:f4:3f:b9:f2:
                    25:4a:ee:73:cf:f5:4b:df:9a:26:6b:b4:35:ae:19:
                    01:b6:bb:5a:99:e9:b8:92:49:78:39:93:da:29:5a:
                    26:47:d0:08:e3:5b:c5:f7:00:fd:89:52:10:ef:99:
                    db:e0:b2:ea:0c:73:79:f7:46:e2:81:67:6a:e2:1a:
                    5c:16:3e:29:90:b3:0b:50:fe:32:43:83:4a:14:78:
                    ba:94:14:9c:37:4b:9f:f7:46:54:5a:00:b1:60:84:
                    a3:8b:03:d4:01:57:16:a2:97:8a:88:7e:34:8a:d7:
                    9d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:97:22:30:4D:8D:7A:F2:E3:81:73:7D:39:85:54:B8:60:D5:44:BB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1d3960f-ba0c-4306-8cce-8123371ddf05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.65.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:20:4b:29:8e:43:89:37:24:d6:39:6b:ab:8d:7f:2b:e6:69:
         4c:6a:6a:37:7f:4e:0b:b3:18:ec:a1:1a:2f:ea:aa:33:00:9d:
         1d:82:ec:da:a9:90:c0:a3:cd:47:94:63:e1:bf:eb:13:23:b0:
         23:0d:7f:d8:b5:50:39:c1:a8:b1:5e:1f:4b:24:95:0e:be:77:
         08:15:45:33:fe:e8:0d:7d:7c:8c:dc:b5:80:b8:0e:12:23:87:
         8e:b6:c6:8e:0a:42:7c:17:d8:ad:21:13:7c:c8:af:45:8a:6d:
         55:33:b1:d4:50:51:95:26:c3:2c:d5:39:a6:fd:fa:27:3b:77:
         de:cc:07:f7:a8:b9:29:af:5a:f8:a9:93:96:22:c8:29:e6:99:
         7d:2d:d7:a6:b8:c6:1c:c6:3a:f3:31:47:cd:2f:28:5a:3c:50:
         84:62:07:ca:46:36:82:15:ff:11:f2:b7:7c:02:c4:80:4f:b1:
         87:dc:f3:90:a3:00:66:19:6b:ef:b7:b8:76:1d:e9:c7:71:5e:
         b9:37:b4:62:d3:d9:f8:7c:bf:76:b7:e2:3f:b0:7f:18:69:37:
         cb:cb:26:65:bd:4a:90:99:d8:28:46:d3:7c:11:0c:1c:40:13:
         0d:db:35:33:56:27:ad:b1:d4:ec:2a:cc:3c:ab:03:fe:a3:24:
         97:55:d9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:50:34 2026 by rpki-client