Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe4dae27-bd0b-4693-9fd3-05309ef5d4ee.roa
File:                     fe4dae27-bd0b-4693-9fd3-05309ef5d4ee.roa (raw, json)
Hash identifier:          mDtA4zjkSOW1LGMSr9w5+smnWQtz0lW3q14rZIfts3M=
Subject key identifier:   89:64:5E:4E:8F:CE:1E:16:E6:F1:66:9C:7B:D0:36:B0:C8:73:44:5C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3C18921516579D0B9E59CA8C966144E096CA1F98
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe4dae27-bd0b-4693-9fd3-05309ef5d4ee.roa
Signing time:             Tue 28 Apr 2026 00:20:10 +0000
ROA not before:           Tue 28 Apr 2026 00:20:10 +0000
ROA not after:            Mon 27 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.181.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 18 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:18:92:15:16:57:9d:0b:9e:59:ca:8c:96:61:44:e0:96:ca:1f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 28 00:20:10 2026 GMT
            Not After : Jul 27 23:59:59 2026 GMT
        Subject: serialNumber=090b9741d2d57e54d4951e2fa10bdff73fd8f7dfdc8d45203b6fd9f34ffaf473, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e4:33:48:13:3d:97:a6:ca:1c:01:b9:67:9e:
                    56:ff:08:ef:2c:a3:9a:8d:d8:c4:c5:30:74:63:66:
                    db:fe:b1:14:64:28:c5:4f:ff:bc:3f:31:9f:a0:e6:
                    f0:cc:3f:09:a3:26:f6:e6:86:a8:13:97:b7:ca:20:
                    96:ad:9f:41:c7:c1:0a:23:e2:54:24:cd:b2:bb:65:
                    31:07:7d:58:60:da:c5:b0:a5:48:d7:84:81:75:c4:
                    b8:97:b4:9b:24:ac:b9:e6:bf:7f:c5:31:3e:a7:6a:
                    58:0b:f2:8e:53:f1:f7:ef:e6:00:43:42:0e:d5:fd:
                    e9:20:04:c3:00:05:31:e7:cc:75:fa:29:e2:05:ae:
                    d1:4c:22:5f:df:61:f4:82:b5:79:30:16:f1:f0:e6:
                    8f:ea:54:f2:ee:8c:01:69:7f:a8:e8:07:a5:96:bb:
                    56:44:1b:14:86:f1:02:e2:74:34:6c:da:b5:cc:af:
                    e1:3f:ff:da:0d:3c:14:1b:50:e2:9b:df:f1:9c:b0:
                    5e:7e:03:0c:49:2f:2a:7f:e6:7b:6e:f2:9a:43:a1:
                    ee:b5:93:4c:87:70:dd:f8:c7:d9:9c:b5:76:ad:8f:
                    0a:ba:cb:e5:af:b4:d7:84:52:7a:de:9b:a0:d0:97:
                    fd:12:5f:2a:b5:d5:8b:c2:91:a4:2a:1e:37:36:da:
                    41:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:64:5E:4E:8F:CE:1E:16:E6:F1:66:9C:7B:D0:36:B0:C8:73:44:5C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe4dae27-bd0b-4693-9fd3-05309ef5d4ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.181.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3c:e4:f0:4d:d2:6c:2d:15:8b:64:3d:68:c7:be:fb:dd:0e:41:
         10:8e:20:3b:12:2c:aa:d3:df:31:41:6f:fd:06:98:e0:13:e3:
         52:e1:4b:40:1a:cd:56:09:7d:4a:52:49:03:6e:bc:6b:a3:2c:
         a4:ee:80:0b:6e:df:b0:51:55:cf:c2:6c:cb:e8:3f:5f:1d:de:
         74:98:2d:11:f2:e1:24:de:7c:78:1f:2b:6a:06:86:97:04:31:
         d8:b4:8e:ef:15:40:14:20:83:fa:b8:d2:8d:0c:88:59:57:50:
         23:46:ce:fb:fe:d0:06:8d:bf:46:04:fa:61:6a:ff:35:3f:d4:
         61:1b:6e:c9:3c:6f:b1:0d:40:61:87:36:1d:11:fa:43:93:b1:
         5e:b8:aa:14:55:d7:8e:f5:f8:33:4c:75:b6:3e:36:fd:24:ed:
         30:cb:15:20:27:9f:79:14:e6:68:fa:ad:9c:cd:b8:7f:6e:63:
         ba:21:90:68:d9:38:af:dc:b4:02:b1:ee:a1:17:c7:01:7e:a4:
         cb:64:0d:8f:f8:1b:c1:5b:22:ec:a9:d2:7e:a8:70:96:cb:1f:
         98:f8:19:ef:0b:d0:7c:05:9c:e9:de:9b:ac:25:31:69:be:7a:
         13:3b:83:95:84:2c:65:0b:97:3a:f7:cd:90:e8:f8:5f:24:00:
         a3:b4:9d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 05:03:00 2026 by rpki-client