Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00e7b3cb-c96f-40ec-bcc9-73c3a6bf03e2.roa
File:                     00e7b3cb-c96f-40ec-bcc9-73c3a6bf03e2.roa (raw, json)
Hash identifier:          VjCQg5at1/fEuDnx7KCtpPT6IrCqmFiL31hQRFFM5M4=
Subject key identifier:   F3:C9:E1:14:D3:F4:40:5E:C7:25:4A:3A:BE:F0:21:77:A0:8A:61:12
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       18308B83158C8F8F111011985540592FC2F32A70
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00e7b3cb-c96f-40ec-bcc9-73c3a6bf03e2.roa
Signing time:             Mon 03 Aug 2026 00:10:07 +0000
ROA not before:           Mon 03 Aug 2026 00:10:07 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        16.196.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:30:8b:83:15:8c:8f:8f:11:10:11:98:55:40:59:2f:c2:f3:2a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 00:10:07 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=3b063bad6a02763615004fbc21c9f1a4c97699d325f384d15e2ceae1655df244, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e0:78:da:a5:8e:cf:ea:2c:45:6c:bb:33:7b:
                    41:7e:ae:eb:ae:96:cb:3d:7a:e0:92:f6:19:0c:8d:
                    0b:d8:05:0e:87:7a:96:35:92:06:b5:5d:77:f1:c6:
                    81:2f:fd:06:23:fa:d4:34:54:d6:e3:6a:ec:dc:00:
                    7b:c1:aa:18:81:94:4f:c8:dc:b4:b7:6c:73:17:0d:
                    2d:d0:4d:ac:41:cb:1f:ce:c8:64:bd:57:43:c8:c6:
                    70:46:01:e3:db:56:aa:ab:f5:83:88:ed:2a:54:6d:
                    9d:5e:20:d2:d5:49:d1:d2:51:19:ab:ba:2b:64:1a:
                    c9:7e:1d:5c:40:81:98:39:7e:4b:26:8c:dc:9e:53:
                    ad:07:fb:d5:69:4b:51:6b:b0:e8:c6:13:b8:88:3e:
                    7f:4d:6d:6f:5a:4c:34:04:1a:2f:34:e3:64:2b:48:
                    bb:e5:01:ca:96:65:ef:bd:28:e3:56:44:55:cb:8c:
                    8d:21:66:da:0b:0e:34:62:a5:13:b6:60:fd:27:66:
                    77:31:2e:63:05:52:2f:c4:82:68:63:c2:a6:66:0a:
                    6a:e0:ca:53:e7:2d:18:60:07:d3:6d:6c:b4:62:75:
                    96:b5:c3:b5:b6:d6:c4:7c:78:c4:d7:8f:6c:1b:92:
                    3a:b8:2a:a4:8d:67:3a:56:0f:de:85:d2:1a:d7:dd:
                    43:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C9:E1:14:D3:F4:40:5E:C7:25:4A:3A:BE:F0:21:77:A0:8A:61:12
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00e7b3cb-c96f-40ec-bcc9-73c3a6bf03e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.196.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         61:ec:9b:c6:9b:64:6b:95:9a:0b:69:1a:59:ce:5d:f3:a6:09:
         c1:c7:f6:62:b5:f5:c0:28:7e:9c:d6:9f:c9:c8:62:12:d4:a4:
         a0:66:cb:84:35:eb:fa:06:25:11:7c:0d:77:8f:1a:61:a8:8e:
         a8:12:ce:c5:2a:02:35:8e:0e:84:29:bc:d4:57:bc:f7:84:cc:
         24:24:bf:5b:34:07:9a:f0:6a:4f:56:3a:9a:7c:6b:56:b7:00:
         52:2b:24:de:b2:d0:3a:09:86:d4:a7:a4:cb:08:aa:fb:9b:4b:
         25:1b:a5:39:a6:e5:1b:4d:8a:e0:25:ac:15:a1:86:72:4e:15:
         7f:8a:64:6c:35:61:43:4a:85:6f:2d:86:5c:4f:04:07:d5:18:
         19:f8:34:de:f0:a7:1a:b8:3e:81:39:46:c2:8d:60:6d:0d:6d:
         7c:4c:db:f6:c7:94:e8:b8:5f:7b:71:82:9e:ae:76:aa:03:7b:
         c9:f7:60:e0:2a:f7:e6:15:70:36:d5:7b:cd:62:a4:2a:bc:12:
         a2:f2:41:c2:73:4f:20:e0:e5:37:9c:c8:e3:ad:cc:5a:a9:7f:
         ba:37:44:2e:25:91:52:11:9d:2a:01:03:d1:ad:0c:3b:68:cc:
         96:b2:d9:f9:19:3f:0d:70:3d:fc:7b:81:f0:04:e5:87:17:b4:
         52:4b:12:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:37:24 2026 by rpki-client