Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c761c83-4fca-487f-8159-56ab4bf2d3f7.roa
File:                     7c761c83-4fca-487f-8159-56ab4bf2d3f7.roa (raw, json)
Hash identifier:          C41fZ2RqN3W08lRqNUiB57SgFdmub5ANw7Zi8OKqCxs=
Subject key identifier:   C2:C0:56:A0:AA:76:F6:CD:46:58:69:74:5B:95:3C:AF:69:A0:8E:92
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1C99A7834BF17253B32E80B2EB897DE7BB761A57
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c761c83-4fca-487f-8159-56ab4bf2d3f7.roa
Signing time:             Mon 03 Aug 2026 01:11:52 +0000
ROA not before:           Mon 03 Aug 2026 01:11:52 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.62.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:99:a7:83:4b:f1:72:53:b3:2e:80:b2:eb:89:7d:e7:bb:76:1a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 01:11:52 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=fd5e38734c9f96b90c73a263361969195faa6e87ca8afebd3519b6932c04783d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:15:bd:27:9a:40:91:4f:9e:6e:89:65:a1:de:
                    fb:fa:f8:a3:ba:dd:ca:39:4b:a5:a2:de:5b:cf:2d:
                    62:c1:e8:31:25:24:95:24:98:7b:66:65:16:47:0e:
                    35:03:07:43:ae:9b:b8:43:46:47:62:ff:80:4e:ff:
                    76:a6:b2:93:62:1b:a4:73:e1:24:b6:7e:c5:28:15:
                    69:10:6a:59:89:15:3c:85:8e:de:3b:a2:1d:e3:cb:
                    a1:95:0e:5b:4c:7d:a0:2b:cd:cb:fb:01:75:1b:4e:
                    6c:fb:f3:a4:8a:48:fc:36:5b:be:16:b5:17:23:be:
                    ca:e4:de:0a:65:22:1d:b4:a7:fd:d4:82:e5:66:2b:
                    b5:03:a6:e9:53:b4:b8:20:81:14:55:6e:a9:2f:77:
                    4f:11:33:1b:13:09:91:ad:e2:2c:a0:db:6a:d4:bc:
                    71:31:39:bd:7f:f3:f7:a5:48:ce:86:44:d8:90:19:
                    7e:90:3e:49:6e:9d:96:a7:2f:af:ea:9f:b1:7d:18:
                    94:6d:88:a2:cb:b7:f0:06:17:91:f7:a2:dd:b9:24:
                    47:da:c9:dd:33:23:52:b6:97:73:69:63:11:c1:16:
                    22:1a:70:6d:b9:ba:54:ed:67:e3:79:0d:46:cb:86:
                    f5:41:fb:69:68:52:84:db:4e:95:27:66:9d:c2:4f:
                    06:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C0:56:A0:AA:76:F6:CD:46:58:69:74:5B:95:3C:AF:69:A0:8E:92
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c761c83-4fca-487f-8159-56ab4bf2d3f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.62.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:34:35:eb:4c:11:d5:7e:37:42:74:bf:24:04:01:2f:8e:5f:
         08:0d:25:53:ca:b5:7f:d8:49:64:d0:d8:bf:66:b9:fc:aa:cc:
         f6:dc:ae:99:c7:58:63:1c:72:02:4a:a9:44:7a:90:1e:bb:56:
         7a:4d:2d:61:ac:8d:72:56:54:a9:87:da:1a:f6:b8:06:11:34:
         7c:18:bd:6b:24:88:87:3e:67:2d:8b:84:aa:4b:93:87:57:00:
         62:49:59:49:04:88:b4:8c:79:c7:aa:e9:7a:44:4e:18:d2:99:
         70:18:b7:1e:36:47:dc:16:06:e4:2a:e5:b4:69:06:f5:5e:b2:
         22:dc:6b:aa:71:25:58:99:4f:f1:e7:b9:6f:84:77:93:e2:33:
         69:d4:4c:58:e7:2f:1e:16:4d:65:dc:dc:16:b8:48:03:b7:ba:
         3e:8c:84:4c:77:d6:13:80:93:d4:34:99:30:a9:b7:1c:b4:db:
         f6:0b:14:c7:e2:75:83:d5:e8:43:2f:bf:95:85:af:7f:b6:8e:
         2d:e2:77:e0:75:1a:e9:a3:3a:48:27:2d:f1:d0:45:a4:40:5b:
         a9:8d:85:25:ab:92:15:86:58:8f:28:43:23:e1:c8:67:96:c6:
         05:39:40:60:c8:bf:c4:0c:af:f5:56:2a:90:60:5a:6f:22:88:
         cf:ba:5d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 11:38:00 2026 by rpki-client