Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/166723b7-7971-40d9-86ad-08b966ec0f9b.roa
File:                     166723b7-7971-40d9-86ad-08b966ec0f9b.roa (raw, json)
Hash identifier:          ccs1XiWaouoYCbkMk7gsFqJkyOI1HhGvJ/t+rNnESMQ=
Subject key identifier:   72:AE:F6:C9:49:32:25:86:5A:6D:DD:F9:49:F3:04:85:DB:46:0A:C8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       02AFB36601131EDD1C4AEB14D28B9E25F9FC57AE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/166723b7-7971-40d9-86ad-08b966ec0f9b.roa
Signing time:             Sat 08 Aug 2026 00:21:02 +0000
ROA not before:           Sat 08 Aug 2026 00:21:02 +0000
ROA not after:            Fri 06 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        35.48.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:af:b3:66:01:13:1e:dd:1c:4a:eb:14:d2:8b:9e:25:f9:fc:57:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  8 00:21:02 2026 GMT
            Not After : Nov  6 23:59:59 2026 GMT
        Subject: serialNumber=2e59d12c23f9afe33c9232b66ea38b89c81eb3b2f7df7f13bd453ea4ee5312a5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:16:ee:32:a6:4f:5a:dd:ec:90:5a:dd:f1:2d:
                    9f:04:32:2f:bf:db:f9:23:58:40:01:27:fd:a3:e5:
                    c0:b8:d2:b1:be:ec:96:fe:da:ce:b4:28:7b:0f:b8:
                    10:40:88:29:bd:4f:8e:2d:d5:9e:db:a0:e0:7a:c7:
                    c2:a8:00:49:dc:d9:b1:23:7a:b2:d6:c2:98:c6:f3:
                    44:b9:32:f9:a8:e8:20:3d:ea:f8:f6:7d:70:7f:03:
                    b7:87:34:1d:cc:15:58:68:da:6f:81:82:a4:81:94:
                    b8:2f:9f:10:79:70:84:1b:66:bf:00:cd:f4:b0:52:
                    4e:0e:c1:5c:59:82:83:89:1d:42:e1:9c:e5:27:f6:
                    68:c5:f3:52:48:df:4e:be:64:f7:fa:27:0a:6a:0a:
                    13:67:96:20:cf:38:b0:85:07:0e:90:fe:a1:e5:74:
                    f5:da:8a:a6:4f:9c:98:56:4c:78:93:f6:61:b7:94:
                    7b:14:72:40:bd:5f:09:2e:d3:4d:c8:8c:bb:15:00:
                    1e:ba:5e:c9:8a:e7:e0:54:f3:c2:71:06:04:df:5d:
                    b6:c2:29:8f:13:ba:12:dd:19:f0:2f:ce:09:15:6b:
                    f0:44:17:44:29:78:9b:6f:d7:73:f7:a3:da:6d:38:
                    b1:84:75:c7:46:49:32:3d:cc:0d:91:41:9f:19:a2:
                    48:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AE:F6:C9:49:32:25:86:5A:6D:DD:F9:49:F3:04:85:DB:46:0A:C8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/166723b7-7971-40d9-86ad-08b966ec0f9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.48.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         bc:78:97:05:54:7d:2d:cd:ba:56:ac:23:bc:db:be:68:81:02:
         dc:f3:08:51:81:20:cf:14:69:7a:1e:60:7f:23:d9:5b:c3:2a:
         c9:58:d2:40:79:fa:e4:ac:2c:34:9e:a6:4b:ff:a4:f0:6d:18:
         80:d0:b5:09:d1:24:c6:5f:1d:40:4c:64:57:ad:2b:84:56:90:
         c8:f1:c9:d3:04:bf:8d:b0:ed:78:6e:db:36:33:41:66:d3:10:
         21:66:14:80:1f:e7:34:6e:fd:4a:4f:1e:10:6a:2a:e5:ba:14:
         8e:0a:16:57:cb:93:7f:a4:c9:c0:ab:c7:2d:aa:00:17:bb:39:
         16:41:4c:43:cf:2c:0a:44:7f:3e:17:59:cc:2f:eb:8e:98:1a:
         01:82:a2:13:d7:bd:43:d5:be:82:0e:39:68:c9:62:b6:70:1b:
         c0:31:eb:8e:ab:07:f2:30:f1:eb:56:5e:97:60:f9:5d:92:e5:
         64:9d:59:e7:f3:a0:03:17:ce:22:be:79:a0:a7:10:a5:04:d9:
         fe:d0:5c:d7:03:76:b1:2d:ff:26:7d:6b:cc:bf:21:93:3e:9c:
         ee:cd:b3:7a:21:da:54:91:ae:37:40:bd:0e:14:69:fe:7f:bf:
         fe:ef:70:6e:d8:e3:40:77:0c:e9:85:8b:76:68:66:4b:c9:bd:
         05:f7:56:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:06 2026 by rpki-client