Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/475aedaf-9d2c-46eb-992e-0ed3d3a82c66.roa
File:                     475aedaf-9d2c-46eb-992e-0ed3d3a82c66.roa (raw, json)
Hash identifier:          /YQyNfbxHhxFafaJTAsYUG3HvmpOssZVg7ft3gQ00mQ=
Subject key identifier:   AB:4C:F8:A2:C3:59:86:8A:3A:12:CF:B0:22:C6:DC:22:BA:64:81:10
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       65F1E1DA433C2829955845270B9528B13F97ECD7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/475aedaf-9d2c-46eb-992e-0ed3d3a82c66.roa
Signing time:             Tue 28 Apr 2026 00:10:41 +0000
ROA not before:           Tue 28 Apr 2026 00:10:41 +0000
ROA not after:            Mon 27 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.159.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f1:e1:da:43:3c:28:29:95:58:45:27:0b:95:28:b1:3f:97:ec:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 28 00:10:41 2026 GMT
            Not After : Jul 27 23:59:59 2026 GMT
        Subject: serialNumber=9e24abff2b9f9f4fd540d82f40b73774184dfb2051ad466d43bc26152fc7949d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cd:8b:94:b4:b8:e5:e6:63:b5:a8:0e:a7:2a:
                    5a:6d:01:8f:f5:1a:c0:4f:a6:be:fa:55:10:3a:c2:
                    5f:0a:59:41:f8:b9:10:e7:ce:37:31:b4:b6:b4:9f:
                    e9:ee:a0:e9:98:0c:ad:57:d7:01:ab:5f:72:32:c0:
                    fa:1f:5c:c9:fb:8a:bc:de:a7:c4:ba:08:d2:38:c8:
                    09:78:47:ee:bb:dd:5e:b0:9a:55:47:03:bd:56:77:
                    3a:10:a3:f3:b8:9b:f8:94:71:09:cf:8a:30:85:ea:
                    47:80:31:dd:2b:9d:aa:35:79:a2:21:36:82:7c:f5:
                    ba:47:a6:16:ef:42:9f:49:6a:57:54:ae:f1:38:bd:
                    97:37:fc:36:6f:4a:00:6f:6d:ab:8d:2e:45:d3:b7:
                    64:9d:48:0b:8d:2f:1c:0d:19:6c:d0:8c:f7:c1:9a:
                    5e:94:82:f3:cd:ec:b6:96:6e:5d:2c:58:0c:ba:e2:
                    d3:f2:b7:5c:04:dd:c7:81:df:07:3d:2d:a3:4a:d3:
                    04:ba:7c:5b:19:0b:00:7f:74:09:37:ad:7b:4d:dd:
                    d3:eb:f4:81:62:11:bd:6d:00:0b:32:6c:f2:5c:1b:
                    47:a4:0d:cd:28:f9:f2:4b:3a:d8:8d:dd:36:cb:40:
                    eb:00:4c:51:4c:23:42:ac:b6:10:5f:d0:e4:77:e5:
                    03:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4C:F8:A2:C3:59:86:8A:3A:12:CF:B0:22:C6:DC:22:BA:64:81:10
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/475aedaf-9d2c-46eb-992e-0ed3d3a82c66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.159.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         23:2d:e6:30:59:59:9b:fa:06:9e:04:56:78:60:25:f3:66:d3:
         ba:cf:6b:87:62:22:18:b8:92:a5:8f:7a:c4:32:e7:be:0e:5d:
         d6:e5:38:28:be:9f:89:8b:8d:06:da:f9:25:d4:4b:6a:68:8a:
         45:d0:22:55:f0:1d:bd:57:e5:8b:30:67:c0:7e:7b:78:fa:63:
         73:ca:83:a5:6d:8c:7d:ac:56:99:87:38:e2:3f:ee:e2:66:8f:
         ee:53:c3:e5:8b:89:b4:2d:a5:33:dd:77:2e:03:0a:f1:4c:87:
         06:dd:d4:60:41:78:ac:f3:42:6d:48:e7:6d:6b:0a:bd:0f:8f:
         3d:2c:b9:c9:e1:49:2d:4c:86:2f:00:2e:00:63:a4:f7:d0:22:
         f6:97:7e:47:24:bd:3e:e4:43:4f:1a:78:3d:71:0b:f7:87:4c:
         88:20:57:69:8e:53:95:9d:c6:16:f3:db:93:fa:b2:a9:30:dd:
         47:6a:2e:82:0d:3d:79:2e:6b:e6:9b:e1:9e:53:61:8b:8e:f3:
         a5:61:06:97:4a:0a:1d:08:4e:7e:20:7e:06:c0:40:fe:88:ee:
         3f:e9:47:64:cd:6f:e9:98:0d:38:43:c0:7d:f5:6a:d1:bd:df:
         d2:be:ba:b8:fd:dd:58:9f:a9:33:34:bf:8c:5c:3c:c4:f5:e7:
         a2:cb:a0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 15:27:51 2026 by rpki-client