Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a1921ca-ab9c-438e-b38f-c57ede30e1df.roa
File:                     5a1921ca-ab9c-438e-b38f-c57ede30e1df.roa (raw, json)
Hash identifier:          wZNxynUBQOTM7dn+wqyeodPSZAS6cy8A7qFOmlF8yCw=
Subject key identifier:   52:BB:A4:D8:96:39:53:C2:31:17:6E:1F:F9:E6:BD:63:D8:E8:E9:45
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       180F77E72BB3008F466282931ECFD71741606CB3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a1921ca-ab9c-438e-b38f-c57ede30e1df.roa
Signing time:             Thu 06 Aug 2026 00:00:38 +0000
ROA not before:           Thu 06 Aug 2026 00:00:38 +0000
ROA not after:            Wed 04 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        199.174.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:0f:77:e7:2b:b3:00:8f:46:62:82:93:1e:cf:d7:17:41:60:6c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  6 00:00:38 2026 GMT
            Not After : Nov  4 23:59:59 2026 GMT
        Subject: serialNumber=961a29551c48123fbd8fc4205e9e1979380d5e7e3e8ea1214a7c662497e7da30, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:09:1a:b4:a5:f1:40:99:f7:c4:01:64:f8:2a:
                    f2:d3:e9:2d:f1:39:9c:ac:37:43:c9:f4:51:25:19:
                    ce:21:ef:c9:9d:80:78:45:bf:c7:66:d3:37:60:b5:
                    cf:29:12:9b:cd:e5:4e:0f:dd:2c:77:84:5d:8a:fc:
                    71:da:a4:89:0f:88:d8:81:83:3a:09:94:c4:e1:de:
                    f7:bb:8c:a8:1d:bf:e1:83:40:0a:67:51:bd:86:55:
                    bb:48:f3:c8:c3:fd:c3:68:0f:87:5b:9b:60:0c:d6:
                    c1:14:fb:41:57:7a:c2:62:42:d8:52:c9:6f:58:23:
                    5c:0f:4f:3a:97:b1:f2:55:f3:d4:93:9e:37:b6:de:
                    52:16:b3:29:da:f7:68:1c:d2:6b:b7:67:d5:58:aa:
                    8e:fd:f3:9a:02:73:66:10:e9:ab:de:b0:76:db:f2:
                    e3:d4:91:ce:53:5c:11:4b:31:be:66:74:ae:1b:a8:
                    b4:7b:55:fa:a4:98:78:b2:c8:98:fe:1c:dc:45:85:
                    0b:0e:c1:c0:a8:68:a7:51:cd:65:6e:d4:f2:f6:d6:
                    46:54:39:64:7a:86:c2:82:c6:e5:88:cb:9b:46:28:
                    39:18:73:03:31:4b:83:73:8d:5d:0f:e1:88:09:f0:
                    2c:07:c1:8e:60:88:24:ba:da:20:e8:37:c8:28:8f:
                    d0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BB:A4:D8:96:39:53:C2:31:17:6E:1F:F9:E6:BD:63:D8:E8:E9:45
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a1921ca-ab9c-438e-b38f-c57ede30e1df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.174.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         28:e5:e1:d9:77:5a:54:8d:1a:0d:61:96:13:04:94:79:13:90:
         78:84:2a:26:b4:54:98:50:67:2e:b4:8e:da:5a:fd:5f:28:da:
         1a:bf:0f:19:c5:e8:56:39:c1:de:cd:03:aa:0b:88:48:e8:95:
         2c:6d:2b:df:87:68:77:52:76:03:eb:85:ff:c0:e2:8f:11:06:
         c1:1f:78:f0:a7:a3:85:8f:7b:21:1c:b6:16:cd:db:b9:c6:6f:
         bb:23:9a:14:c8:1e:2b:b4:b9:45:55:13:a3:0f:d3:e0:69:6b:
         ac:40:6a:58:19:bb:50:fe:7f:3c:78:ee:28:c3:0c:ff:7e:33:
         de:9b:c6:ca:b8:50:95:6a:1f:65:68:90:ce:ef:1e:1c:2f:56:
         96:86:1b:86:ed:54:b4:0a:bc:bc:d6:48:61:9c:99:66:35:ec:
         42:de:54:fe:1e:36:96:00:d4:b0:7d:cf:78:a3:13:7e:a7:20:
         f3:bc:f7:db:2b:92:e1:a4:e6:86:ff:b5:ef:a5:c6:1f:c0:cb:
         b4:b6:f2:ec:d2:c5:c1:e2:01:31:1e:c7:85:1d:91:18:a2:b8:
         57:f2:10:a8:86:ba:b7:de:47:41:b4:17:7f:62:a8:71:99:7b:
         15:56:10:65:47:32:29:69:d4:0a:0e:b7:b7:fd:0c:c4:6c:08:
         43:17:e4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:34:23 2026 by rpki-client