Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e790948-9518-4339-b7cd-f658d299179b.roa
File:                     6e790948-9518-4339-b7cd-f658d299179b.roa (raw, json)
Hash identifier:          QNyttFot8F/NCJAv+TlhpQWvzKm0XzCwQfR6sfY2mxs=
Subject key identifier:   6A:2C:35:37:8F:04:A5:AC:44:AD:9A:1A:96:06:3D:C0:A0:86:FC:2A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       52FDC675DF5229D5FCE1FB9F4361152123D2E30F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e790948-9518-4339-b7cd-f658d299179b.roa
Signing time:             Wed 05 Aug 2026 00:20:46 +0000
ROA not before:           Wed 05 Aug 2026 00:20:46 +0000
ROA not after:            Tue 03 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.136.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fd:c6:75:df:52:29:d5:fc:e1:fb:9f:43:61:15:21:23:d2:e3:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 00:20:46 2026 GMT
            Not After : Nov  3 23:59:59 2026 GMT
        Subject: serialNumber=a71a4d2c3e24a86f0178518c07ad0b7f2891160ef666ee5c360a1fe030c4c6c1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bf:96:59:b6:f3:a7:eb:a0:14:1d:0e:6c:b6:
                    5c:b4:d8:d8:5a:21:94:c2:0b:0d:69:97:34:ae:88:
                    57:10:1b:71:64:75:37:41:39:89:f5:2c:ed:6c:d3:
                    e8:ff:1f:02:b4:30:3d:45:89:8e:2d:83:9f:24:ae:
                    40:ea:0e:9e:3f:e5:dc:01:60:32:15:33:27:2d:33:
                    0b:e9:96:93:11:0f:38:42:19:f5:41:c2:03:6d:0c:
                    4e:e7:bd:27:8b:92:fb:2e:e6:bf:27:2b:f0:34:91:
                    54:21:0f:d4:93:74:db:7c:c3:16:71:b1:0a:90:04:
                    30:cd:6e:8b:14:93:82:d8:b4:cb:67:15:09:6a:7d:
                    30:e1:26:d4:ea:31:31:d4:81:ed:ec:99:66:30:78:
                    f3:ff:3d:9e:2d:70:de:5a:49:20:e6:22:78:fe:0f:
                    df:32:4e:a3:3c:e3:35:e6:f5:60:b0:09:f2:3e:95:
                    a3:38:1a:f6:38:f5:e9:0d:8e:67:5e:17:65:fc:8e:
                    65:37:af:89:fe:54:e9:22:e6:57:1e:ed:83:e2:e0:
                    50:19:7a:59:77:f3:28:22:4d:55:83:0a:dd:ef:1c:
                    89:49:0c:69:f8:60:04:08:ef:46:a9:8f:a5:41:57:
                    f5:dc:0d:13:e7:cf:da:c5:95:85:de:6f:6d:e9:aa:
                    81:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2C:35:37:8F:04:A5:AC:44:AD:9A:1A:96:06:3D:C0:A0:86:FC:2A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e790948-9518-4339-b7cd-f658d299179b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.136.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         37:44:6b:38:ee:8f:8e:10:c7:9b:4a:8d:f0:10:e6:94:ad:67:
         3d:a3:5c:91:b1:29:15:0e:dc:60:09:89:8c:2f:b3:0e:ad:bf:
         e4:44:be:08:c4:a9:8e:46:ff:da:fd:ff:28:fd:0d:9f:01:31:
         47:f3:75:ed:23:81:f6:30:3a:3e:e2:38:52:f7:39:a7:6f:24:
         dd:ce:da:88:3d:e9:48:af:d8:1b:32:11:ce:d6:ce:6f:2b:f6:
         01:af:3f:e3:19:0b:01:e2:21:ee:a7:f3:95:bb:6f:fc:b5:18:
         8f:88:47:7f:95:d1:a4:14:cf:20:02:8b:b3:b8:e5:99:01:89:
         d3:33:2a:6a:91:18:bc:12:08:f9:d9:cb:e2:0a:50:0a:c0:23:
         5e:8d:eb:98:74:3d:0f:82:c0:ce:c8:25:f7:da:58:00:74:7a:
         8c:ad:84:6b:21:74:4b:87:3c:bd:8d:de:bd:98:7d:2d:65:80:
         b9:8f:a2:cb:dd:48:72:0e:32:30:91:d8:56:91:27:48:1c:df:
         c6:ce:d2:4f:2c:9d:e4:7b:3f:25:46:40:1f:c2:4f:fb:f6:06:
         d9:4a:c2:cf:d9:a6:35:fe:01:e3:1e:d1:78:87:9d:07:ec:b2:
         3e:87:d5:d6:74:06:15:27:f1:6e:16:9f:7e:e3:c8:44:6f:b9:
         1f:6c:61:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 13:28:10 2026 by rpki-client