Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/047471e9-5147-4aae-82fa-97d22965384b.roa
File:                     047471e9-5147-4aae-82fa-97d22965384b.roa (raw, json)
Hash identifier:          Gg4b9nl3SWCDudWLvX7Hg7Yiyyai5E3JmnInCE+GAbU=
Subject key identifier:   B4:B4:C3:90:CC:A1:EF:89:C3:00:47:54:D1:99:63:52:76:5E:50:95
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       16999FB9F2556133E3625607D1E9C5E5BD040404
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/047471e9-5147-4aae-82fa-97d22965384b.roa
Signing time:             Wed 05 Aug 2026 00:51:11 +0000
ROA not before:           Wed 05 Aug 2026 00:51:11 +0000
ROA not after:            Tue 03 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        161.46.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:99:9f:b9:f2:55:61:33:e3:62:56:07:d1:e9:c5:e5:bd:04:04:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 00:51:11 2026 GMT
            Not After : Nov  3 23:59:59 2026 GMT
        Subject: serialNumber=c504e99b7e3cc8d046179cdb04185a826e5a2fd66f0d7ee28c655a0db6530703, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:51:fc:1f:a8:c6:95:0c:e1:9a:19:97:a1:96:
                    17:65:7a:87:67:e7:06:19:14:32:22:b9:5f:34:d9:
                    d2:66:cf:95:65:a6:b7:90:67:6c:f1:78:c8:fe:f1:
                    67:29:f2:8d:73:94:93:2d:de:76:53:7e:8a:3e:07:
                    89:58:dc:54:5a:a3:af:d5:4e:a3:a9:ef:35:4f:5e:
                    db:1e:2e:47:39:a5:b5:41:88:de:95:30:fe:f6:a1:
                    1f:ca:02:cd:59:83:e8:df:7b:4b:ea:53:cd:b4:e6:
                    72:a4:c5:28:ca:90:b7:05:d1:73:bd:1f:02:5f:ee:
                    58:fb:4d:24:1d:9a:83:af:81:bf:77:65:a2:cc:39:
                    46:64:53:2b:ca:8d:41:c9:ed:d1:43:c2:17:2f:dc:
                    fa:36:d1:98:95:bf:2e:20:f2:dc:57:cd:01:1a:62:
                    b1:91:24:c3:c7:c2:91:f8:8c:67:14:0a:94:e5:3f:
                    02:0e:94:b2:40:6e:9a:b6:6a:08:30:6e:43:54:99:
                    7d:53:a3:89:94:ef:d0:e7:5b:a9:d6:93:a8:58:a5:
                    9c:7c:0a:95:fa:b7:b5:14:19:b0:99:3f:8b:97:f6:
                    1c:4c:2e:29:94:d8:0a:c1:ac:3b:6f:18:93:68:6d:
                    68:50:a4:ca:6f:4e:c9:8a:95:7f:12:0f:b8:71:ca:
                    98:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B4:C3:90:CC:A1:EF:89:C3:00:47:54:D1:99:63:52:76:5E:50:95
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/047471e9-5147-4aae-82fa-97d22965384b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.46.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4e:05:e3:db:55:96:91:60:2e:c9:9c:44:3d:56:c0:09:a6:de:
         42:8d:15:ce:c2:70:e8:80:34:89:db:e4:13:bd:9a:f6:22:d2:
         26:ad:db:f6:95:85:d2:e1:1e:09:1a:2f:e3:d3:6a:de:f8:38:
         c8:d2:05:7e:60:ff:63:98:b1:62:93:59:e2:f1:f4:72:eb:8e:
         b4:6d:17:44:25:67:be:66:34:fd:cd:04:07:77:49:36:21:fe:
         4a:9c:36:6b:e3:68:bc:93:7c:b7:d2:18:7f:01:3c:15:70:76:
         33:e0:02:b8:2b:a2:85:53:11:01:7c:c6:ab:8e:b0:a5:d9:f0:
         4d:f8:8a:10:40:63:e3:2a:1a:e2:3f:05:71:17:0f:b5:69:72:
         42:14:12:89:cc:09:a4:6a:5d:1f:a4:dd:dc:ff:11:cd:70:a6:
         9e:4d:25:d2:2b:56:06:c9:0f:2f:f8:25:f8:f1:46:25:16:d7:
         7e:48:bb:0e:5d:9d:6f:06:db:a2:5b:a8:9f:14:d3:7b:bc:88:
         8d:b6:0b:45:71:36:08:b0:50:a7:3f:ff:2f:30:48:53:b7:f7:
         2e:3a:f9:31:3b:57:27:fa:81:50:78:6f:cb:29:9e:d3:a8:41:
         c6:fd:9b:3d:f9:0f:ae:83:94:5d:d3:dc:5c:70:11:e0:69:56:
         d8:b6:43:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 03:17:30 2026 by rpki-client