Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83c934e0-e04c-4a64-94a4-cd0e5a2b3c90.roa
File:                     83c934e0-e04c-4a64-94a4-cd0e5a2b3c90.roa (raw, json)
Hash identifier:          2utxAQFG6iJOVEV0lUxJvI1YUEngNWEtBx6R4j5N8CI=
Subject key identifier:   16:08:BE:68:13:62:E8:93:F2:DB:0F:6B:C4:8B:57:2D:DD:2A:65:52
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7F016D08E270A32DFD6415F3DAE55BA9B946703F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83c934e0-e04c-4a64-94a4-cd0e5a2b3c90.roa
Signing time:             Wed 05 Aug 2026 00:30:26 +0000
ROA not before:           Wed 05 Aug 2026 00:30:26 +0000
ROA not after:            Tue 03 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        75.101.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:01:6d:08:e2:70:a3:2d:fd:64:15:f3:da:e5:5b:a9:b9:46:70:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 00:30:26 2026 GMT
            Not After : Nov  3 23:59:59 2026 GMT
        Subject: serialNumber=eb6aeb1b0bf5e1ceb56af54e0a525786262d24e1801ebb23ef0286bb452a8f33, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9d:33:b0:f2:e5:b2:9f:6b:6b:3b:3d:33:b2:
                    77:74:6b:5c:b5:05:4c:07:73:13:7f:00:4c:8f:fb:
                    b9:61:01:5b:6b:0d:34:80:8c:e4:39:84:47:37:6e:
                    40:93:06:cf:62:cf:74:50:dc:b9:65:4e:bf:82:1c:
                    7d:06:8b:da:a6:73:ab:bf:fa:1b:f6:68:e1:5f:84:
                    79:24:8e:14:61:93:1c:11:8d:a4:61:5f:87:d4:1d:
                    22:67:d1:ab:ae:b8:d0:b1:f2:0e:84:2c:c4:fc:1a:
                    f0:a7:dd:7d:18:50:2f:a6:c2:b5:8a:3f:ef:b6:c9:
                    03:27:98:0f:a3:8e:62:66:ee:8a:1d:1a:aa:2d:cf:
                    5f:a2:a0:35:23:95:22:c2:3b:26:32:f3:1f:d8:a6:
                    a8:8c:b2:fe:f4:d7:d8:73:24:68:2c:2d:21:86:f8:
                    fb:81:d1:0d:b9:7f:dd:8f:19:aa:f7:76:82:4f:3c:
                    5b:41:c5:76:1f:e3:7b:cc:99:8a:c4:38:5f:50:af:
                    3b:e1:11:22:c5:3f:a2:e7:f8:fe:b1:da:6a:23:9d:
                    2c:3e:a3:f2:67:14:33:c2:c5:45:c9:bf:64:38:15:
                    5f:fb:5b:29:70:12:4e:73:2c:f0:12:43:f1:65:29:
                    7f:f1:2c:31:86:c1:12:96:52:e0:7d:25:8a:77:06:
                    64:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:08:BE:68:13:62:E8:93:F2:DB:0F:6B:C4:8B:57:2D:DD:2A:65:52
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83c934e0-e04c-4a64-94a4-cd0e5a2b3c90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.101.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         77:bf:45:86:3d:d1:a3:ba:c0:77:c9:54:92:8c:4c:36:7e:c3:
         a6:1c:26:64:7b:e3:e4:ca:29:c5:db:17:97:e5:f0:ff:8c:84:
         cd:c6:da:c9:83:0b:5f:ab:8f:9e:5a:52:85:57:e0:2e:e8:88:
         64:78:32:0d:28:ac:eb:d3:2e:e7:58:b7:35:13:c4:a1:67:4f:
         5b:fa:c9:0b:66:58:a2:c6:73:cb:c1:16:1d:c5:16:ac:24:ae:
         6a:72:c2:bd:1e:eb:3c:81:f4:e6:03:7d:d4:10:dd:0e:53:ca:
         91:15:33:e0:f9:14:bb:0e:f2:e2:46:a8:30:bc:8d:6b:b0:1b:
         26:ac:2a:4e:5d:0a:4c:88:81:5d:68:9f:2c:20:cc:e0:4b:97:
         f3:a2:49:cd:17:a7:dc:c8:d5:ea:db:7e:e1:de:d9:74:c5:34:
         94:dd:bf:51:2b:08:e8:1b:d2:1b:f7:2d:a6:7b:a9:32:d7:4c:
         5f:45:5f:99:58:d8:9b:59:28:61:fa:ba:dd:d3:86:03:83:95:
         02:da:34:d4:51:4a:2c:d2:c9:cc:19:61:03:e5:79:81:7d:6a:
         ab:7f:4b:b7:5a:d0:41:7b:4e:d2:3d:c4:1b:61:6f:59:dd:53:
         b0:12:89:3f:e6:6f:fd:70:38:58:18:8c:cb:c8:d0:43:9f:c4:
         d9:d6:ef:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:18:25 2026 by rpki-client