Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f49dcf4f-74f0-4445-8e41-0534ecc0008c.roa
File:                     f49dcf4f-74f0-4445-8e41-0534ecc0008c.roa (raw, json)
Hash identifier:          adrDvayfpVwYF7I1EAAGSRc3Xs+v6leRqxg0hpRpaIQ=
Subject key identifier:   F1:30:9C:AB:63:AE:00:8B:DB:D8:A3:C8:E3:FC:8B:74:5B:A8:C1:E9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       08E69636838FF4476F295146EFA7B519525640B5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f49dcf4f-74f0-4445-8e41-0534ecc0008c.roa
Signing time:             Sat 16 May 2026 02:11:43 +0000
ROA not before:           Sat 16 May 2026 02:11:43 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.39.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e6:96:36:83:8f:f4:47:6f:29:51:46:ef:a7:b5:19:52:56:40:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 02:11:43 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=c0b5817cb3ca0a029afc366fb50e294ccebc3333a05c9d9547b430019a7e1148, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:11:27:12:9c:5e:70:84:67:48:86:4a:62:29:
                    fb:06:0d:b3:db:bb:e6:8f:2a:56:5f:55:d8:19:3d:
                    94:c1:ac:1d:5d:ec:2e:60:4f:ec:6d:d2:6e:71:1f:
                    e4:cd:97:a4:ee:5e:21:39:f2:f1:81:47:b3:5c:9d:
                    98:6d:7e:8c:8c:39:41:b5:68:4a:32:81:75:77:82:
                    f5:8a:65:06:d0:d1:08:bc:9f:c2:8d:7c:ed:3b:b7:
                    a4:30:23:ee:f5:27:8b:82:54:cb:53:a1:ad:25:8b:
                    7a:f3:06:ab:72:85:46:91:ae:56:21:c6:bd:1b:a0:
                    6e:78:71:7d:a6:7a:25:71:42:b2:c0:77:bd:57:44:
                    84:47:dc:87:ef:1b:2f:bf:0a:f6:68:64:1f:e9:8c:
                    22:81:d9:54:98:4e:17:6c:50:2f:17:d3:0a:21:cc:
                    33:04:1a:fe:81:31:44:7a:b1:0d:e4:df:61:9a:48:
                    55:89:cc:6b:17:92:f2:98:0f:4c:22:c6:7a:bf:ba:
                    8c:09:28:62:62:4f:e4:6d:4f:c5:f9:9d:4f:f8:a2:
                    c4:5b:b2:cf:26:ac:2a:1b:a2:be:63:86:7c:1c:65:
                    98:b8:55:36:d7:d0:44:da:c8:c1:1a:ce:58:1b:53:
                    84:0f:6a:c8:9a:34:0c:e7:83:28:a8:35:cf:cd:4a:
                    0e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:30:9C:AB:63:AE:00:8B:DB:D8:A3:C8:E3:FC:8B:74:5B:A8:C1:E9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f49dcf4f-74f0-4445-8e41-0534ecc0008c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.39.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:dc:42:fb:e1:18:13:92:60:33:01:5f:fd:c8:1a:c3:b7:91:
         76:7b:ac:1b:de:2d:01:f5:aa:dc:cb:8c:b6:f1:08:8b:4d:c2:
         f5:3b:eb:4b:62:00:d1:94:85:7d:a4:44:89:26:40:ba:62:34:
         b8:46:ac:5d:01:a6:01:3e:57:10:8a:2a:61:cd:13:67:d0:30:
         92:08:5a:d7:7c:ea:8b:47:c3:88:9c:80:c2:5e:5b:a2:51:28:
         9b:70:df:c0:0a:5c:2c:9d:90:1b:ea:a3:f8:c5:e8:18:38:99:
         3a:50:ce:3b:01:91:dd:35:39:8a:eb:bd:dd:e0:50:88:65:e7:
         20:61:53:dc:45:50:aa:62:84:6b:e8:4b:ee:e7:41:bd:49:bf:
         67:52:b9:6f:98:32:64:b4:78:d1:b8:8c:5d:49:19:97:5a:1b:
         cd:9d:bb:51:91:52:fe:a8:b0:2a:5c:4d:a6:2f:23:55:ff:2c:
         ef:4d:76:f2:58:8d:a4:56:ab:cb:60:da:f0:6c:c0:71:80:61:
         94:0e:c0:a6:e5:22:69:8b:bb:30:ba:0f:6a:60:4f:77:b9:c6:
         e6:4d:96:3d:6f:15:3f:c6:b9:97:b1:6e:71:2f:cb:93:4c:3f:
         e0:03:25:34:80:38:12:9a:19:08:5e:e9:2a:75:ce:85:47:8c:
         5d:8c:4f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:06:39 2026 by rpki-client