Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/320ca148-446a-4e39-8e3e-d5083b594410.roa
File:                     320ca148-446a-4e39-8e3e-d5083b594410.roa (raw, json)
Hash identifier:          YSQ4sVYxAr2sYN64xsiekwX1iLoGVFjxHGHm1DU0AtA=
Subject key identifier:   93:DF:C3:31:63:CC:76:ED:64:3B:8D:8C:ED:18:0E:1A:CB:F7:D0:74
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       110976DD2BE68B61DDFB335087A17DCE0E0867A1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/320ca148-446a-4e39-8e3e-d5083b594410.roa
Signing time:             Sat 01 Aug 2026 00:41:52 +0000
ROA not before:           Sat 01 Aug 2026 00:41:52 +0000
ROA not after:            Fri 30 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        205.185.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:09:76:dd:2b:e6:8b:61:dd:fb:33:50:87:a1:7d:ce:0e:08:67:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  1 00:41:52 2026 GMT
            Not After : Oct 30 23:59:59 2026 GMT
        Subject: serialNumber=47568a66e5c3f1da4479e153a93b07be503d1b1b8b8164b7e66ba035818a1e31, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:41:49:d2:c4:77:63:2c:b5:87:8b:23:d6:b1:
                    44:76:7d:71:43:bd:fa:92:6f:70:ef:51:7a:84:bc:
                    fb:54:1b:21:2a:7b:5b:c3:1b:82:ef:6f:b8:ec:74:
                    8d:af:cf:f5:95:c8:10:fb:65:06:15:7f:53:e1:52:
                    9e:0b:3b:be:b2:54:50:4c:19:a0:08:9d:7c:9b:4a:
                    af:82:49:31:34:c2:af:32:2c:9b:98:12:30:26:ab:
                    30:fa:81:cc:50:4c:d8:14:47:c8:7c:eb:93:ca:13:
                    9f:94:54:bf:c6:1e:fe:ed:67:e5:46:67:c2:9a:8e:
                    b7:51:bc:35:00:58:f3:c2:7a:5b:e9:2f:8b:7c:2c:
                    16:58:96:46:6a:48:48:82:f3:e4:d6:a4:5e:fe:5f:
                    06:f0:1a:99:3c:9a:e6:61:e4:02:d1:4c:58:0c:fc:
                    4e:a9:27:a9:ad:35:8b:6f:c8:aa:93:86:8d:96:61:
                    47:42:94:0b:5a:f3:3f:ef:d7:6e:2d:58:3d:79:ed:
                    22:e8:e8:94:5a:5c:2f:44:b9:5e:c1:e4:51:dc:90:
                    14:45:67:52:a4:02:e1:da:9e:78:c6:84:7d:b2:94:
                    7a:29:c6:e9:96:83:16:1a:bb:e6:ce:b6:45:57:c2:
                    30:50:bb:1b:09:51:85:c9:0c:da:2e:ab:0a:e5:55:
                    68:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DF:C3:31:63:CC:76:ED:64:3B:8D:8C:ED:18:0E:1A:CB:F7:D0:74
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/320ca148-446a-4e39-8e3e-d5083b594410.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.185.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:2b:c9:ea:38:07:d8:1f:08:f9:6b:60:8b:11:30:da:a8:2c:
         12:92:f6:db:7f:58:24:7f:03:6b:29:60:fe:5c:99:2e:0c:f8:
         85:c7:ad:b6:b9:5b:ee:d7:49:54:69:7c:de:86:2c:d2:60:14:
         11:b3:50:fc:60:b5:01:88:d5:7f:4a:18:34:98:6b:ed:1f:f9:
         e5:18:f4:24:68:58:87:a8:b6:f5:13:c9:74:dc:af:83:69:92:
         3d:95:06:fe:a9:10:9a:07:6e:8b:1e:00:46:8e:c7:c8:3d:c9:
         84:c4:58:fb:d9:2c:4a:73:11:a9:af:17:b2:43:6c:aa:62:85:
         ed:9e:4f:bd:9c:10:e4:c9:5d:2c:64:fd:7e:5d:39:46:6e:21:
         be:32:28:86:81:b0:12:9f:69:d0:b6:64:b2:66:42:b1:b8:5a:
         c0:47:6c:e9:ec:bf:b7:47:14:60:03:ed:61:c9:50:17:5d:db:
         e1:7b:e2:bf:eb:f3:ac:31:ad:77:5b:fc:34:b3:30:18:25:1f:
         1d:62:94:f1:15:bf:89:ce:ae:fa:cd:0a:c7:ea:5b:61:84:64:
         14:c4:62:a3:a7:6b:fa:8a:e5:85:62:92:18:4e:eb:40:86:79:
         d5:0a:9a:8d:62:a4:af:f6:a9:a1:4d:c7:8b:a9:f5:9b:1a:13:
         fc:89:85:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:38:21 2026 by rpki-client