Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b4abda6-2ea5-45d6-ab35-002d675d57ac.roa
File:                     4b4abda6-2ea5-45d6-ab35-002d675d57ac.roa (raw, json)
Hash identifier:          sNIE45mjtHUi2PIFsm97UK3ZNIGjeYwZZvCtghxVfew=
Subject key identifier:   7E:64:BE:BE:46:88:C9:9F:BA:AC:B5:DA:34:AE:76:E4:79:4F:19:7B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       46BBAB0997035BC0968D771C9628DF045D6B251F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b4abda6-2ea5-45d6-ab35-002d675d57ac.roa
Signing time:             Tue 28 Apr 2026 00:01:05 +0000
ROA not before:           Tue 28 Apr 2026 00:01:05 +0000
ROA not after:            Mon 27 Jul 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        16.31.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:bb:ab:09:97:03:5b:c0:96:8d:77:1c:96:28:df:04:5d:6b:25:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 28 00:01:05 2026 GMT
            Not After : Jul 27 23:59:59 2026 GMT
        Subject: serialNumber=5836efe53391263a0ab2658137ee850222eef6158c5c4b6fead38da283cb3db0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6e:f7:11:39:da:d0:96:51:a5:c0:07:8a:95:
                    ac:72:d8:2b:d5:97:6b:7b:f0:2e:31:70:09:6b:72:
                    ee:3b:c4:ee:96:ff:51:30:1e:93:81:28:00:a8:62:
                    48:10:b0:52:b9:1d:46:0d:bc:e0:3a:0d:56:25:ea:
                    77:f4:3f:4c:2a:b4:25:4e:2e:0d:eb:36:c6:e3:b1:
                    78:82:99:bc:f6:6d:12:51:5a:92:31:e2:4f:4a:28:
                    8d:02:76:dd:40:80:17:da:53:b3:0d:c0:fc:02:35:
                    27:77:97:b9:10:9b:b1:38:9b:53:b2:06:4b:cb:bc:
                    00:ce:17:20:21:44:cc:08:c4:cd:0a:7b:ed:6d:a4:
                    22:fa:3e:9f:30:0b:39:14:d7:a9:85:b5:72:7a:f8:
                    f7:37:db:40:35:51:58:56:f7:52:20:da:33:01:58:
                    cd:56:0c:1b:39:ed:90:40:1d:82:60:06:52:29:82:
                    2f:2f:8c:ac:20:97:17:19:4f:00:16:af:0a:4a:fa:
                    c2:fc:81:9c:dd:71:e7:91:3f:cf:20:f0:09:4d:88:
                    54:49:02:62:81:58:55:0f:5d:0b:d7:af:35:9e:8e:
                    95:90:09:62:4b:41:df:dc:f2:86:fc:f7:5f:6d:76:
                    bc:ef:10:60:ef:1f:ce:75:53:2b:5d:24:7d:f8:b7:
                    40:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:64:BE:BE:46:88:C9:9F:BA:AC:B5:DA:34:AE:76:E4:79:4F:19:7B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b4abda6-2ea5-45d6-ab35-002d675d57ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.31.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8f:bd:53:2a:d5:f0:b4:2d:c9:aa:a1:05:55:5a:f3:91:fa:6e:
         54:89:2f:5d:ab:df:c0:fb:1d:e8:17:ba:76:d4:ed:53:cb:fd:
         02:90:7a:b5:59:b8:73:10:45:33:bd:ee:a5:97:89:2b:b9:28:
         9b:eb:d7:0f:7c:55:b4:1c:63:65:0f:11:48:78:93:31:ea:c1:
         05:04:31:e4:0f:00:d4:bc:42:5d:c9:9c:8a:ae:a3:2e:25:2c:
         a9:a4:dd:c3:e4:10:5a:f5:ac:fc:f2:90:c2:95:7d:20:02:bd:
         62:9a:57:8d:64:7e:14:bd:3d:1c:e4:dc:b2:f2:15:55:d4:d4:
         66:ac:b1:dd:87:0d:a2:53:b4:50:ba:16:02:ac:ee:aa:f4:e0:
         be:21:d2:ab:8b:29:a9:c8:45:f6:65:5a:04:05:b3:c2:cc:d7:
         e3:91:56:b3:e8:3d:1c:b6:bf:5b:51:5d:20:87:19:a5:e7:83:
         1c:f4:bd:08:f2:2c:2a:29:a0:93:a4:d1:2d:0d:a2:0d:a5:74:
         00:70:a5:a3:96:d5:fe:bd:aa:3b:c5:d4:a9:41:78:99:8f:c7:
         f5:e2:f3:ec:26:be:f7:90:84:fc:b3:3f:d9:06:ee:80:76:67:
         f6:4f:55:06:0a:09:89:8a:bd:ff:9b:b4:ff:ad:76:91:17:cc:
         88:9a:0c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 21:38:58 2026 by rpki-client