Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0402248-a874-493a-8245-46391eb45f64.roa
File:                     f0402248-a874-493a-8245-46391eb45f64.roa (raw, json)
Hash identifier:          j7ZMBrdmmtObzXCzNjS7+kZowK5AI1dU0RS45C7jKfQ=
Subject key identifier:   F0:2C:33:D6:83:03:F7:B9:49:D1:CA:85:00:C9:C9:84:26:FA:F7:78
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F769BDFAB542BE2F21453002C36932F86ADF4B0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0402248-a874-493a-8245-46391eb45f64.roa
Signing time:             Thu 16 Apr 2026 00:00:46 +0000
ROA not before:           Thu 16 Apr 2026 00:00:46 +0000
ROA not after:            Wed 15 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        69.16.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:76:9b:df:ab:54:2b:e2:f2:14:53:00:2c:36:93:2f:86:ad:f4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:46 2026 GMT
            Not After : Jul 15 23:59:59 2026 GMT
        Subject: serialNumber=3f23f6cf10d34dd649284dd31bdd1a246501772a17864aa59b4abf3ade467ad3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:88:45:8a:e6:0f:b7:cc:cf:3d:3f:ab:f4:b7:
                    bc:21:8b:83:67:76:fc:63:bb:07:14:ca:b4:c8:57:
                    ae:28:3b:1f:47:78:e3:26:1e:13:d6:46:7d:2d:2a:
                    b9:36:59:1e:89:d0:5d:7a:1e:73:9c:d5:42:ca:4d:
                    47:d1:d0:14:c1:e0:25:30:4d:3c:e1:1c:23:bc:2c:
                    6f:08:ae:42:a9:5f:49:de:67:a2:b9:6b:ff:f1:08:
                    4a:4c:a5:66:29:de:23:8c:84:5e:40:6a:aa:e8:91:
                    c5:03:fd:c4:6a:1b:c4:ff:f7:b7:72:a3:0a:13:74:
                    82:eb:69:8e:c6:67:fe:13:a4:5d:1e:bb:22:fc:16:
                    48:9a:38:4d:28:25:cd:c5:26:cb:4e:e5:ae:95:f7:
                    ac:a2:1d:b9:58:90:ec:c7:22:cd:8b:a7:bf:86:5e:
                    47:a7:40:54:ab:8a:c7:ca:ba:2f:61:16:6b:5d:39:
                    27:97:e1:e0:f2:2d:b2:ee:cc:54:a0:75:6b:79:5d:
                    c8:fd:59:c6:9b:08:23:8a:37:51:c8:c8:3b:67:6b:
                    18:d4:71:64:14:cc:6d:da:d4:6d:ce:3e:1a:17:75:
                    4b:ca:9c:4c:f2:85:63:53:04:c0:71:f6:48:d1:86:
                    76:c5:0b:03:05:92:cb:ef:87:68:a1:82:a7:ad:93:
                    95:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2C:33:D6:83:03:F7:B9:49:D1:CA:85:00:C9:C9:84:26:FA:F7:78
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0402248-a874-493a-8245-46391eb45f64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.16.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:68:02:be:01:b3:7c:e4:f1:4f:0b:eb:53:ad:5a:3b:c0:10:
         ba:4e:ff:42:8c:bc:a8:7a:0e:de:b4:89:70:32:6a:de:38:51:
         5d:a0:0a:5c:94:c2:ba:29:57:44:ad:52:95:3b:5e:93:bc:eb:
         8e:bc:72:71:a0:eb:85:a1:29:7d:a1:49:73:3c:6e:2e:b3:c3:
         b6:62:47:fc:68:c2:d5:6a:57:6e:d1:4b:68:47:98:41:14:06:
         a4:b4:f4:bc:1f:58:3d:4c:16:0f:f5:4f:5e:8c:4b:b8:91:35:
         7f:87:86:ad:94:ac:54:82:a0:25:03:e7:81:a4:df:e5:bf:22:
         bb:5f:00:ed:07:cd:d4:2f:bf:08:57:87:5c:b5:b7:8e:8c:26:
         bd:8c:e6:ea:2e:ad:38:ba:ab:11:a0:aa:ab:10:ef:fb:5f:d8:
         25:f7:55:e5:98:69:36:cc:a6:a2:3e:09:45:31:85:c6:d1:37:
         a1:eb:4d:e8:ba:69:b6:24:84:b3:93:3f:a6:4f:81:51:70:d0:
         c6:c1:67:53:1e:89:d4:4f:e3:d0:c4:66:a9:c1:24:36:f6:ae:
         30:61:ce:95:a8:c7:a9:53:ba:c2:1a:67:40:4f:ad:2e:26:9c:
         bf:d4:5b:95:2d:ec:7c:fb:f0:52:72:d0:e6:96:62:4e:c5:b0:
         c5:9b:15:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:18 2026 by rpki-client