Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4453fba6-c24f-4c1d-a854-fe5e14fb78dd.roa
File:                     4453fba6-c24f-4c1d-a854-fe5e14fb78dd.roa (raw, json)
Hash identifier:          mR/ASs3O9WXw2nVoGHItTUan7xspKycpefIrd8MvOMk=
Subject key identifier:   DA:31:1F:20:4E:C5:2A:87:BE:CC:37:2C:27:B2:A5:89:52:CA:1A:85
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2CA886548D154C1BC1A8C2A939279C84FDF941C1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4453fba6-c24f-4c1d-a854-fe5e14fb78dd.roa
Signing time:             Sat 02 May 2026 01:10:08 +0000
ROA not before:           Sat 02 May 2026 01:10:08 +0000
ROA not after:            Fri 31 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.217.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a8:86:54:8d:15:4c:1b:c1:a8:c2:a9:39:27:9c:84:fd:f9:41:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  2 01:10:08 2026 GMT
            Not After : Jul 31 23:59:59 2026 GMT
        Subject: serialNumber=00b48fc99db05ece7048a1ae6d24b142b4700d17e4be7fc16eb31c87820ed9f8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:76:98:2c:0c:78:2f:c1:f4:a9:19:7e:71:d9:
                    d4:60:f4:3d:68:45:82:7f:50:e3:c6:63:38:eb:91:
                    29:47:9a:00:ce:47:8a:5f:48:61:eb:60:3d:dd:61:
                    44:15:9a:bc:94:08:ce:f8:94:99:bd:c2:dc:5d:b2:
                    a3:23:c5:9f:8b:a9:f9:ca:66:59:a2:39:1c:70:13:
                    2a:32:67:86:89:a2:a5:d0:4f:53:10:7d:5c:a8:39:
                    dc:b9:b7:9b:ea:e1:26:7d:24:d2:4d:3b:3a:05:2e:
                    b9:5a:06:0f:b5:f5:3d:4a:d8:a5:d7:df:9b:82:3d:
                    47:4d:35:22:cb:28:51:fc:5a:67:36:58:8b:ae:f3:
                    d3:e9:50:bd:47:95:59:a9:e7:c9:23:6c:ac:d6:e0:
                    1d:2a:80:f7:f5:e2:25:62:b0:db:0c:29:69:ca:50:
                    fa:eb:dd:d8:72:8c:a7:2c:74:a4:4f:54:50:69:dc:
                    62:c5:ff:76:59:bc:24:20:6d:5d:49:a8:50:dd:32:
                    e1:f9:48:03:e0:9f:dc:68:a1:83:da:ce:6c:f6:40:
                    cd:ae:c7:fb:ac:76:b1:34:da:17:ad:0b:a1:04:37:
                    58:ba:5c:fe:86:e6:f9:a4:d1:21:c7:ea:dc:6d:c5:
                    c3:e4:0c:5b:fa:6d:1b:94:82:69:d0:07:5b:dd:48:
                    a0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:31:1F:20:4E:C5:2A:87:BE:CC:37:2C:27:B2:A5:89:52:CA:1A:85
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4453fba6-c24f-4c1d-a854-fe5e14fb78dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.217.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c9:87:d0:cd:ae:2f:fd:70:ce:38:45:b8:05:14:24:49:d7:2d:
         c6:68:2e:46:20:2c:fe:24:41:fc:d0:19:37:cb:d9:63:5c:ef:
         09:b7:f2:6c:98:2a:b3:c3:53:23:bf:8a:f0:4b:7d:bb:de:d4:
         e2:7b:ab:ad:20:29:95:24:a5:eb:b4:d2:d9:a7:0d:ec:ff:34:
         ad:70:2e:72:ed:28:36:1e:e5:34:3e:2f:7c:25:5a:8d:25:a2:
         91:4b:68:d3:50:15:80:68:4b:d2:ec:28:fb:5e:ed:eb:1f:df:
         1f:90:7b:a5:8a:90:35:14:38:77:80:49:4e:37:75:45:ec:c0:
         16:03:e8:84:50:9c:b2:89:df:be:df:8d:c4:f3:9f:c6:1c:0a:
         30:25:84:7d:12:09:e5:d0:ee:41:2d:46:53:2c:d0:c0:47:a1:
         8f:bc:e0:ef:bd:f8:72:73:1e:1a:74:9e:5a:2c:26:5d:82:53:
         04:de:0e:88:cc:29:9f:7c:66:46:e3:0d:4f:0a:f8:83:ed:cc:
         84:12:90:62:64:b2:39:1b:18:2a:7f:73:7e:17:84:77:de:d6:
         ce:b7:58:5d:63:59:70:7d:2a:c1:a0:97:30:9a:87:21:46:41:
         e8:ce:01:43:58:b3:97:c1:fe:21:ea:9d:56:98:9a:f0:6a:4b:
         9f:7a:e3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 21:38:31 2026 by rpki-client