Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/884a8c0d-72de-41fb-885a-1c084a948135.roa
File:                     884a8c0d-72de-41fb-885a-1c084a948135.roa (raw, json)
Hash identifier:          IGsmvGh4Gc0sF+88kpwekAa1/y0rx3Me+VbwRI71oUU=
Subject key identifier:   73:E6:D8:B7:36:72:45:31:E3:49:C4:AD:9B:C5:CD:A3:AD:F2:CC:A1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       68D5CA60645BCD0E614C2DA6DFCBDCA8B0ACFDCC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/884a8c0d-72de-41fb-885a-1c084a948135.roa
Signing time:             Mon 03 Aug 2026 01:40:47 +0000
ROA not before:           Mon 03 Aug 2026 01:40:47 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        202.147.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d5:ca:60:64:5b:cd:0e:61:4c:2d:a6:df:cb:dc:a8:b0:ac:fd:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 01:40:47 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=12cc8e6e867cbef8e8f0bf4fab8c3741fb64ca17f98fb2c5b8b114dc0d10d7a8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:20:da:6b:48:df:08:d4:f2:42:6d:de:c8:c5:
                    47:f8:b7:87:56:a7:f6:95:77:6c:da:bf:00:7c:a5:
                    36:b8:bf:66:4f:6e:a7:bc:c8:cb:a3:2a:f5:58:d8:
                    00:5a:2f:89:fd:48:ec:de:8e:5d:80:48:b7:8f:cf:
                    c4:b5:c1:42:1f:4d:8e:af:43:94:52:b9:69:69:17:
                    fc:2c:05:48:2d:d2:19:b4:14:1c:f3:53:53:a4:bc:
                    aa:6c:0e:a9:c0:dc:ab:83:e9:fb:f6:c3:0e:7f:69:
                    ba:b9:be:34:bf:53:e9:fe:ac:d9:aa:ce:d3:92:dc:
                    d1:5d:a8:0f:5f:4c:a3:c1:bf:72:7a:7d:30:71:6b:
                    ac:d5:45:5f:e6:27:1a:78:12:c0:dc:bb:50:1c:fe:
                    79:1d:83:34:f1:3c:50:b3:bc:a1:32:b4:11:a8:8c:
                    7e:74:9e:f7:4a:2a:16:64:df:3d:a5:04:4d:f3:90:
                    ee:4a:34:4f:5e:dd:29:37:b5:54:75:85:97:a1:72:
                    ca:26:da:0f:7a:c2:81:d1:fd:90:35:24:b1:ba:8b:
                    aa:5e:e0:f7:66:d9:77:72:60:4e:11:bb:06:13:28:
                    80:7f:f5:b4:c1:ca:56:ee:ea:37:ae:91:ad:13:14:
                    f2:48:af:59:49:4b:6f:e0:57:36:4b:22:ef:24:4c:
                    d0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E6:D8:B7:36:72:45:31:E3:49:C4:AD:9B:C5:CD:A3:AD:F2:CC:A1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/884a8c0d-72de-41fb-885a-1c084a948135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.147.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7a:a3:a3:80:85:09:e9:87:7a:98:8e:dd:14:c5:54:2b:52:2c:
         e0:a6:8e:2c:72:ca:84:63:0f:f5:e0:9e:04:58:46:15:0d:5e:
         d0:88:78:1b:4f:63:52:d9:b1:97:7b:78:01:3f:7e:ce:24:0b:
         99:43:b7:7b:8a:4f:33:9e:e6:00:c9:a1:34:23:0f:78:a2:14:
         e1:6d:c9:ed:69:be:38:2d:d0:de:c1:24:19:e8:f4:ec:8e:e5:
         da:8b:9d:7c:1b:32:08:5f:88:5b:29:e4:da:ba:f5:dd:12:e6:
         32:a7:c0:66:99:10:b9:1c:f6:b4:ae:1d:6a:93:29:50:98:94:
         7a:43:33:b3:fb:18:16:e4:67:10:9b:32:19:53:6f:9c:f2:d3:
         10:b5:a8:49:12:35:b0:cb:ca:43:30:eb:0e:e0:72:5e:df:fc:
         bf:db:11:66:d7:bb:bc:d1:0b:d8:59:93:90:2f:3f:84:8f:06:
         ea:0f:46:76:c0:42:86:f9:10:46:4b:9a:b4:b6:06:1b:69:4e:
         b8:0a:a6:b8:04:45:92:1c:61:7a:72:fd:cc:97:8a:6f:f8:b2:
         dc:d0:33:41:ed:d7:8d:61:5e:c3:a4:e9:80:f3:68:60:42:6e:
         bb:fa:2e:8a:8b:9a:c7:31:c4:9f:91:2b:c1:ae:da:3c:30:ae:
         62:1d:38:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:44:39 2026 by rpki-client