Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2a803dd-f1de-45e3-a5f4-3792da16cfef.roa
File:                     d2a803dd-f1de-45e3-a5f4-3792da16cfef.roa (raw, json)
Hash identifier:          ppeRVWtQhSLQdA7ZMkkWNhz0c5fHNl7AyUVrfk/Zsis=
Subject key identifier:   06:12:97:83:6D:16:B4:D0:AD:A8:32:58:9C:33:C8:56:C8:C5:B1:A0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3A5F198957CEBA72046E65D5A5780B9BE2FFBC76
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2a803dd-f1de-45e3-a5f4-3792da16cfef.roa
Signing time:             Sat 16 May 2026 00:10:09 +0000
ROA not before:           Sat 16 May 2026 00:10:09 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        173.228.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 18 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:5f:19:89:57:ce:ba:72:04:6e:65:d5:a5:78:0b:9b:e2:ff:bc:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 00:10:09 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=18a477287273e7c879268786609a91b9cec782778952ad87dfdbbfda3bbbd011, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:57:d0:e6:1f:0c:90:db:49:fd:d1:eb:dc:a0:
                    d8:b6:8f:b8:ef:49:78:5c:25:98:95:f4:9e:df:73:
                    8a:b4:15:4d:e2:42:29:12:88:b4:d5:00:9e:f2:90:
                    8c:a2:a9:23:11:37:85:e7:8a:26:b9:12:f4:ef:05:
                    73:49:c0:12:53:1f:75:f1:00:6b:76:13:09:02:55:
                    50:f2:10:c2:0c:5e:04:47:36:c8:9d:91:73:eb:7a:
                    7f:cb:31:cc:57:3d:92:ed:51:10:51:bd:df:e5:8a:
                    59:2b:12:36:98:4a:27:9d:b1:a3:cd:5f:fc:df:1d:
                    e3:50:52:a9:67:cf:16:2d:60:b2:0e:f7:91:08:1d:
                    5b:8b:15:0d:78:9f:29:76:65:b2:cb:4f:8b:99:dd:
                    07:53:e5:ac:3c:87:36:53:5a:b6:ea:5a:c4:34:b0:
                    81:cc:e4:b9:68:a8:fe:05:db:82:6c:0d:b7:12:0b:
                    7f:d9:8d:c7:0c:00:59:77:52:4b:12:59:35:c3:ef:
                    60:0c:41:7a:63:d1:54:70:7f:4e:c4:19:34:cd:70:
                    f7:03:71:dd:f1:fc:b7:bd:32:b2:ae:e3:bf:4c:ec:
                    bb:18:1f:b9:4a:c7:47:99:25:aa:37:9a:b0:ad:73:
                    dd:73:64:35:51:50:1f:7e:e1:e9:5a:3a:66:a2:0a:
                    17:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:12:97:83:6D:16:B4:D0:AD:A8:32:58:9C:33:C8:56:C8:C5:B1:A0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2a803dd-f1de-45e3-a5f4-3792da16cfef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.228.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1f:55:87:66:83:7c:a7:c8:bc:c5:a6:65:92:60:1d:1a:ed:5a:
         78:c7:0e:23:84:ec:85:23:90:4c:fd:88:ab:0f:bb:ff:0c:fd:
         4e:02:4d:ea:cd:53:88:17:24:91:0b:37:a9:2d:5f:90:a9:20:
         fc:2a:9b:b4:80:e8:7a:a6:68:5f:be:af:12:8c:b4:40:8b:2f:
         32:cc:ec:ae:49:cd:5c:3f:a9:7a:03:ff:fe:01:ff:dc:12:b5:
         71:4d:17:3f:a8:47:92:40:d0:80:70:4e:f9:e0:62:67:bd:0e:
         80:22:43:ce:3b:ff:8b:e0:b2:bd:da:05:93:9d:eb:10:7d:ac:
         3e:83:b4:e2:5f:e1:2f:7d:3c:71:b6:af:c1:64:02:9d:8b:da:
         99:a4:a8:b9:8e:17:9c:c1:06:fc:f7:83:24:9b:8b:80:76:de:
         01:f9:2c:73:b1:2f:17:e8:38:5e:00:b7:2a:95:17:7c:56:84:
         96:ec:f8:a5:14:05:07:c7:a7:c4:e6:9a:55:ed:d7:76:f8:cc:
         82:2c:39:4a:74:77:b0:bd:4f:fc:78:ac:81:38:54:12:2b:39:
         ec:b3:8d:38:a7:3d:65:c7:d5:d2:9b:0b:f7:06:f1:53:6d:79:
         7a:51:84:1a:ce:97:6d:f4:3b:78:31:81:97:b2:be:3b:22:d4:
         e9:b1:8d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 05:55:39 2026 by rpki-client