Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8d554ca-7ae7-453d-9bdb-dbc7f8e490e3.roa
File:                     e8d554ca-7ae7-453d-9bdb-dbc7f8e490e3.roa (raw, json)
Hash identifier:          9ee9q8DX4tXXWQvuvGCOQn7/AkZ9AQVxqKVmNm1RFlg=
Subject key identifier:   F4:9A:E8:F2:D4:7F:63:E5:AD:69:17:B2:71:F2:C2:F1:76:CB:1D:66
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5ECB51AE15C38669D13269582A8673439A701A1F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8d554ca-7ae7-453d-9bdb-dbc7f8e490e3.roa
Signing time:             Fri 15 May 2026 01:20:36 +0000
ROA not before:           Fri 15 May 2026 01:20:36 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        16.61.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:cb:51:ae:15:c3:86:69:d1:32:69:58:2a:86:73:43:9a:70:1a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 01:20:36 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=7e860dff312b489fc6c5de78128fc7fe3c956a6ec650b87f8177cc6e30aed140, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ae:c0:1d:d1:2f:87:47:21:43:04:3e:c2:6e:
                    a4:c9:79:d6:0f:00:33:e7:c3:f0:ba:8f:71:a9:01:
                    55:02:d0:63:c7:10:b9:07:f1:a2:f3:e2:a9:3c:bb:
                    b8:ac:6f:fd:ab:11:27:ef:d3:a5:53:90:81:bd:22:
                    9c:c3:ed:67:9c:d9:26:c4:f7:a8:97:fa:89:98:37:
                    c4:db:fd:45:29:7c:10:ac:38:46:89:1e:5e:98:34:
                    45:a9:13:a8:ff:b2:79:05:3c:68:8c:20:a6:c5:be:
                    9b:32:72:47:43:ed:4b:17:a1:8b:44:c7:fa:54:40:
                    a0:af:35:2c:6e:9e:ae:73:a1:53:a0:bc:57:68:7f:
                    d9:d2:48:52:6b:dc:c6:bf:38:13:9a:17:a1:eb:85:
                    e0:56:5d:c6:be:9b:86:cd:47:b3:8c:a1:7e:9b:95:
                    15:01:58:0c:c0:cc:6f:57:58:78:75:bd:19:a0:85:
                    63:f8:94:9f:d0:57:09:35:d6:1b:02:e7:fd:c2:a3:
                    15:23:bd:e3:ba:7a:e6:26:5e:e6:ab:b9:a5:0a:fe:
                    c2:a2:7b:ec:04:9b:87:20:c6:dc:5e:87:ac:79:94:
                    d6:58:77:d3:99:96:7c:a7:19:6f:29:64:94:5b:8f:
                    f8:41:b9:3b:0d:58:8a:ce:f6:dd:b7:97:3d:7a:e1:
                    65:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9A:E8:F2:D4:7F:63:E5:AD:69:17:B2:71:F2:C2:F1:76:CB:1D:66
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8d554ca-7ae7-453d-9bdb-dbc7f8e490e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.61.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0b:cd:a7:36:fb:bd:3b:10:6f:80:06:bb:2d:25:ae:cb:3d:bb:
         b6:6f:72:cf:af:4a:80:0a:83:3c:66:9e:3c:5c:49:f6:02:42:
         a4:c9:a3:b4:dd:f1:ee:03:7f:9c:60:44:b1:1a:d9:bd:17:76:
         b3:35:9b:3e:f7:5b:9a:33:1b:cf:60:8d:5b:88:2f:b9:4c:e3:
         7e:5b:ca:76:52:36:e0:c6:fd:7f:5d:12:e0:be:7a:53:97:d1:
         71:ff:57:9c:ee:5b:a3:c1:af:0f:f5:c7:11:fb:51:cc:27:8c:
         27:98:5a:71:47:d5:54:dd:72:79:44:58:5f:f1:69:91:ee:94:
         e2:38:d9:cb:3c:bb:93:93:9f:26:05:24:09:9e:61:60:65:46:
         38:f8:93:6a:9c:e0:54:6e:cc:fb:e9:e7:f4:fa:4c:48:87:bf:
         05:91:f4:5e:cf:35:ee:95:a1:fe:90:93:96:71:3b:89:e1:14:
         a0:a9:61:14:d1:08:df:8c:9b:c9:17:f3:8c:71:c1:a2:7a:36:
         40:67:78:51:69:1a:33:c5:16:a7:d4:eb:93:65:ac:c3:e9:2b:
         ac:d4:cd:d8:01:ea:39:5e:dd:b8:b3:91:7e:dc:c9:ec:a4:63:
         d1:71:2f:46:aa:6f:14:84:1a:f0:49:90:7d:c8:bc:d5:e4:a3:
         70:b7:81:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:44:30 2026 by rpki-client