Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3076cf1e-83f7-445d-b25c-dfb7b558c7d5.roa
File:                     3076cf1e-83f7-445d-b25c-dfb7b558c7d5.roa (raw, json)
Hash identifier:          XzEsppcRLeFqLebITkaw2n2r+R9fZvzYC/MQ47U/WI4=
Subject key identifier:   E6:C3:22:EB:4A:0C:53:00:35:72:F5:B2:64:23:29:43:84:E3:F5:CB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       505FA4DFB6BAB5212D67DAE1C9DBC20E1532A124
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3076cf1e-83f7-445d-b25c-dfb7b558c7d5.roa
Signing time:             Sat 08 Aug 2026 00:10:14 +0000
ROA not before:           Sat 08 Aug 2026 00:10:14 +0000
ROA not after:            Fri 06 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        63.246.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:5f:a4:df:b6:ba:b5:21:2d:67:da:e1:c9:db:c2:0e:15:32:a1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  8 00:10:14 2026 GMT
            Not After : Nov  6 23:59:59 2026 GMT
        Subject: serialNumber=ee26ffc73d4bd0c31570ec3e2deb4596580c30e75eb134783b37267fe9346dc6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5c:29:89:c8:94:1a:4e:e5:ed:39:74:ef:4a:
                    a3:5d:33:66:28:eb:bb:dd:ff:e4:dd:aa:60:42:fd:
                    2f:ab:4a:bb:c4:18:27:51:64:fc:9e:9c:bf:e7:95:
                    51:a1:ed:9d:11:36:1a:cd:76:b8:c3:60:44:dd:f8:
                    94:f5:0d:2b:75:2f:58:76:4f:02:fc:e7:7f:d2:57:
                    7b:60:3f:8b:f4:ea:1a:11:bf:2b:70:ab:73:d5:79:
                    5f:29:d3:f7:e6:7f:d6:bb:c4:01:3a:56:4b:6b:45:
                    3f:7d:47:b0:63:aa:c7:a6:ad:1a:15:0a:5f:76:41:
                    45:74:9c:a5:17:47:81:10:55:ae:b0:9c:ba:dc:2a:
                    5e:55:aa:80:19:82:2f:bd:ac:1d:60:3e:e0:1e:87:
                    5e:6e:8a:23:81:12:92:a5:76:fa:3a:cd:14:04:52:
                    2a:06:78:a8:21:42:da:98:27:ba:71:9e:1c:ed:c1:
                    8a:dd:e0:7a:56:0b:03:f0:64:c2:db:ba:4b:fe:9c:
                    be:e7:fc:43:6a:97:90:17:04:a2:6a:b7:6b:04:95:
                    99:21:b1:ec:fd:2c:d5:ac:23:d2:e4:d8:b6:7c:26:
                    b2:b7:b4:20:ac:3c:d6:59:5b:70:35:98:06:39:1e:
                    56:98:b1:6c:78:12:a9:43:5c:aa:b6:1d:1a:14:9d:
                    a4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C3:22:EB:4A:0C:53:00:35:72:F5:B2:64:23:29:43:84:E3:F5:CB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3076cf1e-83f7-445d-b25c-dfb7b558c7d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:e1:82:c2:e3:03:1f:c6:38:fe:49:10:54:91:a9:7f:c6:03:
         a6:99:2d:71:8e:ba:30:4a:00:92:84:9d:ff:61:5e:54:ab:17:
         dd:99:67:3c:02:55:15:c6:98:77:1a:4a:11:0c:9e:a2:14:b8:
         0a:44:02:a7:06:8a:21:5e:04:5a:41:60:67:d6:db:5d:88:f6:
         0a:06:12:ab:29:8b:64:44:2f:e2:6f:73:0d:cc:33:18:37:c9:
         f1:16:b0:82:ed:c1:6e:7b:cc:06:70:c8:81:ec:83:e7:a9:a7:
         ee:7e:81:a3:15:3b:7b:50:d6:34:3e:9a:cc:d7:f6:b7:0a:b7:
         e5:55:63:40:f3:f2:1b:29:51:92:e6:4e:db:fb:88:44:ed:1b:
         19:44:90:8b:7f:ae:56:d3:de:f3:e0:55:64:d1:02:e5:e2:09:
         16:91:b4:0f:eb:21:5b:4e:62:1f:57:c9:dd:62:dd:bd:75:c3:
         10:7c:6e:7e:3a:b3:8a:6b:97:7c:55:d2:ae:60:2e:33:7f:fc:
         20:74:b1:65:fe:6c:18:cc:0e:d2:4b:9a:28:4f:7a:2e:63:5c:
         c8:62:eb:a7:f8:ac:3a:38:ad:17:8a:d1:7c:61:13:98:a5:c1:
         cb:0d:00:99:56:c7:48:ed:d7:98:37:07:60:ef:f8:79:59:8a:
         9e:71:d5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:55:09 2026 by rpki-client