Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bfdfc37-13e7-4b3d-b083-7c1d8cf07ad8.roa
File:                     7bfdfc37-13e7-4b3d-b083-7c1d8cf07ad8.roa (raw, json)
Hash identifier:          AXNMX2lrsXBtkPxmhpU/Tgbgje++T2giJgW1aqSD2q8=
Subject key identifier:   2C:EC:B9:6F:ED:67:6D:8C:E3:27:FE:BF:08:75:F8:6D:D1:A5:B5:33
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6816397FEB04AA28BA43F8C3191D82024F2F34EB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bfdfc37-13e7-4b3d-b083-7c1d8cf07ad8.roa
Signing time:             Mon 05 Oct 2026 00:11:00 +0000
ROA not before:           Mon 05 Oct 2026 00:11:00 +0000
ROA not after:            Sun 03 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        16.53.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:16:39:7f:eb:04:aa:28:ba:43:f8:c3:19:1d:82:02:4f:2f:34:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  5 00:11:00 2026 GMT
            Not After : Jan  3 23:59:59 2027 GMT
        Subject: serialNumber=cc2c18dd8e915efdaf5680e3ef139cdd2fbb62c892de2cd7219b25fdea3e1f0d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:10:d9:7d:b3:c4:1a:3a:91:f0:a7:92:33:11:
                    c1:a7:3c:e7:9c:0b:aa:aa:af:74:a3:d2:64:7f:b0:
                    f8:b3:45:6b:f9:4b:16:9f:8d:fd:98:20:e4:01:25:
                    6f:1f:e3:42:11:a4:d0:c7:32:4c:e1:3a:4c:2c:b3:
                    29:c3:38:b4:70:04:22:63:2a:06:7c:32:31:32:93:
                    47:eb:d6:39:07:3e:fa:15:80:88:0c:63:58:0a:52:
                    70:c6:9a:e1:73:ea:af:1a:5c:d9:ef:21:8e:51:dc:
                    37:be:fd:7c:33:17:d3:98:41:a2:3d:bc:d4:76:ce:
                    6e:43:5b:40:af:20:6f:ae:94:06:9b:65:ce:00:ff:
                    d2:b9:86:dd:29:57:54:bb:a9:70:7a:25:07:b1:9d:
                    2a:f7:54:30:6b:01:6a:3b:04:f9:f6:09:7a:4c:5f:
                    46:d9:51:35:fe:e3:94:26:55:06:3d:65:26:f7:5b:
                    f0:2d:41:d5:90:5d:0f:33:38:28:1b:d8:77:ae:18:
                    88:be:40:c3:21:3e:12:0a:6c:9c:5a:0c:c8:9f:8a:
                    1b:c8:16:cc:d7:45:6d:44:af:6e:5c:7b:9d:0d:ca:
                    41:3a:46:ca:9c:df:33:b3:e8:38:30:fd:d4:16:d9:
                    85:02:33:4e:49:72:7c:99:02:38:ae:e3:20:22:a8:
                    4c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EC:B9:6F:ED:67:6D:8C:E3:27:FE:BF:08:75:F8:6D:D1:A5:B5:33
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bfdfc37-13e7-4b3d-b083-7c1d8cf07ad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.53.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         42:39:d6:82:c7:62:44:c4:56:1d:29:dc:89:06:53:33:0a:80:
         42:23:37:59:ce:ba:aa:12:f0:a1:5c:48:72:33:10:ff:55:f6:
         4e:d5:5b:69:0f:d4:4f:f9:45:ee:df:74:32:64:d1:f5:6b:18:
         a1:10:c2:4f:cc:69:4d:1c:b0:43:c0:50:03:c6:8b:93:ad:59:
         75:df:ec:bb:ba:16:ad:bd:e3:41:a0:9a:f3:c9:4f:58:ed:c6:
         d6:34:32:da:10:cd:55:eb:51:ec:6d:ce:36:c9:4e:14:23:ee:
         7b:91:ab:f4:7f:18:bd:ab:49:00:d1:6f:19:de:ad:d7:72:76:
         41:ce:f3:13:ef:3c:0f:e6:22:c6:de:f5:52:e2:5f:b4:1b:56:
         28:cc:e8:63:37:57:fb:41:0c:00:e8:6d:9d:4d:fe:88:aa:8d:
         ef:f3:8f:82:6d:4a:a8:b1:9f:ab:35:8c:ce:e3:13:b2:9e:76:
         56:83:c8:a0:d8:d0:d3:92:5f:45:c9:35:fe:91:75:8f:e4:58:
         9f:20:b1:de:16:a9:ae:d4:f8:fd:ea:f0:fd:88:50:84:c5:2a:
         35:4c:63:c8:6a:3c:c4:ec:9d:1e:2a:9b:45:a6:33:38:4d:54:
         3e:aa:d1:70:7e:80:47:aa:99:cf:23:41:2c:67:c2:ca:e3:f8:
         13:01:8f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 01:25:50 2026 by rpki-client