Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1500b9fd-4529-4cd4-8362-2f8b99b9d9aa.roa
File:                     1500b9fd-4529-4cd4-8362-2f8b99b9d9aa.roa (raw, json)
Hash identifier:          R3MqIltFT/OgYI6wMtRQoRPXvsQZbwnRHllO5E/SsfY=
Subject key identifier:   F8:07:AD:1F:C9:A4:33:C9:29:A3:8A:DC:EE:95:EC:AF:80:0A:AB:CE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       309556C260853AC99426EEE38876E6BA9D2F87C7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1500b9fd-4529-4cd4-8362-2f8b99b9d9aa.roa
Signing time:             Wed 29 Apr 2026 00:51:38 +0000
ROA not before:           Wed 29 Apr 2026 00:51:38 +0000
ROA not after:            Tue 28 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        143.191.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:95:56:c2:60:85:3a:c9:94:26:ee:e3:88:76:e6:ba:9d:2f:87:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 29 00:51:38 2026 GMT
            Not After : Jul 28 23:59:59 2026 GMT
        Subject: serialNumber=261cdbf19b12fc1584e9fab3386eb90ffc8922c0bca501ebfc2f5b82af8ea0af, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:42:ab:27:59:66:bd:1a:cf:9d:dd:48:57:7d:
                    2c:3f:a9:1f:0c:23:40:58:2a:62:2a:52:f4:21:16:
                    02:9f:dd:dd:ca:ec:b7:09:c1:e7:bf:fa:ab:e8:3f:
                    23:0f:29:3b:e5:45:65:9d:cf:88:ce:58:da:cb:ce:
                    49:2d:42:21:7a:09:05:bf:53:f1:52:9d:9d:ee:73:
                    11:89:9f:01:93:36:ba:8e:59:b5:da:a3:c4:d4:80:
                    32:56:15:aa:3b:2d:bb:c7:52:ba:bc:c9:dc:1b:5c:
                    50:50:6f:fb:ce:7c:71:ea:80:06:f8:95:e1:5e:63:
                    36:ed:45:ed:82:f1:01:b9:ed:d7:9e:f0:65:ea:f8:
                    d0:ec:50:3a:39:a6:98:35:39:65:1a:d9:89:6a:6a:
                    ce:fc:a4:3b:8e:eb:12:2e:90:8f:05:ad:5f:75:5e:
                    db:72:fc:44:95:ad:41:91:00:76:fb:6f:5c:b0:ce:
                    96:e6:0d:ad:ac:15:df:4b:c5:eb:16:da:0c:38:ba:
                    d1:49:b8:55:76:61:f6:22:72:7f:91:99:cb:f0:53:
                    18:26:83:27:e1:7e:1d:fe:14:6e:d3:63:90:2c:ca:
                    b5:66:81:48:57:1b:45:a6:66:8c:48:0d:11:0b:80:
                    cf:e1:84:ee:e6:6f:46:47:a0:59:81:87:0f:12:c7:
                    b7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:07:AD:1F:C9:A4:33:C9:29:A3:8A:DC:EE:95:EC:AF:80:0A:AB:CE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1500b9fd-4529-4cd4-8362-2f8b99b9d9aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.191.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ce:a9:8a:66:ab:07:70:08:25:5e:84:1a:fb:a6:b5:0d:a5:99:
         1d:e9:d4:98:b3:32:3c:d8:be:5c:90:6b:63:ab:18:87:30:a0:
         96:88:1b:d9:5b:a5:fe:32:eb:bb:29:6a:9e:ff:11:e9:b2:4d:
         3c:2a:72:53:8d:61:f0:d2:6a:40:27:46:92:a4:ef:c2:e9:3f:
         64:e2:c3:c9:87:6a:d2:dd:a7:b1:e1:44:53:a6:b2:39:85:20:
         00:52:c5:f3:e8:c9:52:f3:56:f5:63:b9:bc:90:28:49:9f:6f:
         f8:bb:78:44:42:9d:92:c5:84:85:ef:56:8e:8f:b5:e3:7a:bf:
         ad:f7:cb:45:8e:a2:0c:e6:37:7d:d7:e9:fd:31:33:6b:08:18:
         b1:98:bf:18:a1:83:fe:38:77:98:e4:d1:65:7a:16:a6:38:03:
         66:67:5b:28:b6:98:fc:f5:40:2b:10:6f:f4:4a:63:b4:b1:d0:
         7b:2b:a3:78:0f:0e:c1:de:b0:2c:69:48:74:73:85:89:f3:90:
         7b:9a:29:d1:18:49:1f:87:a5:50:70:69:9e:73:4e:b3:81:c0:
         56:9c:1f:a5:c2:45:42:fa:14:fa:d2:60:66:ab:0d:e3:7c:42:
         10:c5:ff:bd:2a:e2:9f:17:4f:31:d9:e7:1d:70:9a:54:63:f3:
         b0:5c:1d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 14:45:49 2026 by rpki-client