Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2ca7ef2-9f61-4c33-9965-2dec38452377.roa
File:                     f2ca7ef2-9f61-4c33-9965-2dec38452377.roa (raw, json)
Hash identifier:          8XlRel24XhtwGlAAopQ9M+Ma7sTj+enIsefZgOtykU0=
Subject key identifier:   24:16:BC:9F:93:77:D7:01:92:04:44:25:53:8E:72:FE:94:90:0D:9F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3D62D1A8C3D67EB84929B80AF824F2B4D68C7B85
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2ca7ef2-9f61-4c33-9965-2dec38452377.roa
Signing time:             Fri 15 May 2026 01:30:18 +0000
ROA not before:           Fri 15 May 2026 01:30:18 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.59.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:62:d1:a8:c3:d6:7e:b8:49:29:b8:0a:f8:24:f2:b4:d6:8c:7b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 01:30:18 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=8e07f6047846b9ecc2d479f9935f37a0b518fbb5a989f4f3dc1a5949392af464, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3c:be:21:68:ab:d0:47:1a:5c:f5:fb:d5:cf:
                    53:b8:f4:7a:c8:50:dc:fe:23:96:84:a3:d0:a2:b2:
                    7a:e1:8f:c4:79:1a:4a:c8:18:aa:ab:54:ce:65:7c:
                    fe:5d:08:58:73:73:dd:95:ae:3a:7e:3c:8c:56:15:
                    78:17:bf:42:f9:c6:c5:67:5f:06:62:07:66:5f:3f:
                    9f:4e:27:b8:9c:a6:23:3f:ee:b1:53:5d:2c:4e:ef:
                    40:fc:61:8e:7b:1e:e5:5e:47:e9:d8:4c:19:b0:48:
                    04:58:0b:5c:b5:a0:5b:2c:d1:4c:fe:67:81:77:a1:
                    cc:c9:be:8f:20:48:2f:3e:c6:71:8e:b1:8b:b0:da:
                    6c:cf:63:f6:e9:43:b2:4c:ab:6b:69:14:c6:f8:b9:
                    09:85:cb:95:0e:4a:8f:94:95:4b:01:68:da:94:a7:
                    8c:2b:2f:ae:a6:65:22:cc:25:c1:9e:7d:a7:77:3f:
                    26:db:11:5a:8c:86:f5:10:85:26:8d:1f:ac:fc:6d:
                    c0:57:e6:5f:a5:ac:e2:d9:aa:fa:98:72:33:70:2a:
                    f9:00:37:9d:bf:37:40:c6:fd:ed:bb:0d:fd:16:5b:
                    f0:01:79:96:af:5f:ab:2b:19:e4:9b:d2:0a:1d:73:
                    6c:70:ce:68:6c:ed:af:b2:75:6d:97:ee:1c:c2:28:
                    a4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:16:BC:9F:93:77:D7:01:92:04:44:25:53:8E:72:FE:94:90:0D:9F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2ca7ef2-9f61-4c33-9965-2dec38452377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.59.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         78:15:0d:ae:35:17:55:69:4b:53:d8:7e:cd:81:c4:05:f2:47:
         7c:4a:f6:a1:af:8e:3b:93:3a:9c:57:99:88:d3:38:1a:6e:93:
         2c:ba:94:17:ce:6a:1b:3a:83:f2:1e:77:9e:bc:71:7a:e0:f5:
         1d:49:d3:2c:b3:72:11:74:d3:84:c7:ee:9d:33:9c:d6:3b:92:
         b9:96:d3:b3:81:39:22:71:38:72:93:1e:45:8c:c9:dc:21:33:
         8f:3c:b5:7d:4e:07:4b:c0:86:39:fa:64:40:26:61:34:42:e9:
         d1:3a:a1:92:34:62:90:8f:9d:9d:6c:f7:ef:c0:6a:b8:3e:c7:
         21:08:3a:ae:f4:75:f0:92:60:c5:2e:28:38:78:11:a2:d8:55:
         26:bb:d1:db:a7:29:93:d9:e7:70:5b:92:aa:ae:33:24:6b:8c:
         02:a2:29:58:1c:12:29:48:7b:99:9c:45:19:41:ee:b5:e1:0d:
         40:e9:75:9c:6f:5d:cb:ab:21:b7:16:29:91:ee:ff:64:e5:60:
         cc:db:4d:c0:45:e4:56:ea:a7:f7:ed:4d:c8:c3:a1:19:58:e4:
         17:d3:5f:ee:86:9d:52:13:60:3c:91:45:fe:08:69:1f:e5:38:
         15:22:e2:95:99:b6:da:41:56:2b:38:19:46:ae:7f:7b:78:8d:
         84:f4:5e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:29:46 2026 by rpki-client