Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88b40f69-efe5-4d98-ae3e-41a2ca558bee.roa
File:                     88b40f69-efe5-4d98-ae3e-41a2ca558bee.roa (raw, json)
Hash identifier:          4eYlOzIdnlR9tJ6juCPbE4pB7P7fpfUEvDU+VZF6Dxg=
Subject key identifier:   7E:DF:7E:25:7D:3D:C6:A0:B0:30:14:15:1A:C0:2E:A3:6B:CF:7B:45
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       11528685C46F279453B65DAC510D2C5D5ED7C04F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88b40f69-efe5-4d98-ae3e-41a2ca558bee.roa
Signing time:             Mon 03 Aug 2026 01:20:40 +0000
ROA not before:           Mon 03 Aug 2026 01:20:40 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.61.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:52:86:85:c4:6f:27:94:53:b6:5d:ac:51:0d:2c:5d:5e:d7:c0:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 01:20:40 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=306c77272bc13ce6d1b57e0b233a20a84de2b4d0a99d24bc62346702f666765f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2b:73:1b:48:98:54:79:32:78:a2:e4:80:b0:
                    73:01:d2:e1:74:8b:c8:c3:10:a3:f4:8e:5e:49:9d:
                    c3:af:6d:36:37:7f:58:f4:78:b1:94:42:09:f3:7e:
                    86:ee:39:bc:6f:97:9a:79:0f:78:c1:e8:d0:01:d2:
                    78:dd:85:6a:f1:bb:56:ac:f7:c6:4f:8d:fe:5b:c2:
                    08:c4:53:3b:13:20:6e:9a:e4:f2:2a:24:4e:32:c7:
                    7c:f0:60:70:46:9d:0c:56:56:c6:68:30:ad:61:f6:
                    53:b6:95:fc:af:a3:70:7a:45:dc:65:f7:d9:d7:b4:
                    09:b6:41:ff:ec:b4:1d:c2:3f:36:20:21:6a:a3:34:
                    c3:9b:99:6b:81:65:66:a3:d6:36:16:18:ad:4f:64:
                    bb:79:aa:90:d2:84:79:6f:eb:f0:22:dc:6a:f2:44:
                    d7:63:60:15:10:e9:32:bf:93:62:8d:36:3b:5a:c2:
                    e5:74:f8:e7:ce:8c:e8:b2:06:75:90:08:ca:45:ef:
                    22:bf:e9:ae:4c:6e:1d:27:2f:0c:c9:31:24:a8:e5:
                    d0:91:30:f0:94:84:9a:cb:68:cb:bb:e0:4d:33:48:
                    29:ba:df:e4:0d:ce:57:08:e2:1e:be:d8:3b:f1:e3:
                    74:c1:e1:84:94:c5:ad:19:d2:22:56:6c:3f:8c:e2:
                    e5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DF:7E:25:7D:3D:C6:A0:B0:30:14:15:1A:C0:2E:A3:6B:CF:7B:45
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88b40f69-efe5-4d98-ae3e-41a2ca558bee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.61.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7d:f2:01:46:20:4f:0f:6f:9a:a4:f2:c0:52:ef:90:2d:cb:4d:
         e5:8a:f6:e6:02:d5:4b:2a:06:4f:55:36:f7:e0:44:4b:29:f4:
         48:b4:b9:39:16:f0:fc:3c:b5:4c:52:47:9b:02:7d:56:7c:67:
         20:42:05:bb:4a:4f:cb:6b:56:c3:cf:c6:aa:bc:65:9e:8b:c6:
         fc:d9:2e:62:67:80:88:6a:77:5c:e1:d1:35:b9:d2:cd:c3:bb:
         77:25:90:ce:a7:d2:c7:c9:4f:73:31:72:45:bf:75:38:fe:7e:
         d6:14:53:7e:06:54:77:39:e6:51:72:78:52:a5:72:c0:d0:ed:
         6c:04:b1:00:84:8e:65:d6:5d:fc:dc:4c:0f:49:d7:b1:0c:93:
         f2:f7:ae:2f:49:49:6a:4e:df:5f:ba:c2:4c:2f:1a:16:0a:89:
         40:75:3f:23:74:73:9d:8c:bb:dc:d3:80:36:7c:6f:f9:92:24:
         4e:73:d5:7e:45:ba:88:9f:b5:2d:56:66:ac:a0:97:e9:b0:a5:
         65:21:8f:69:06:cc:31:27:ac:d3:31:0f:3a:4d:80:38:e4:6c:
         e2:c3:dc:7b:0f:6b:82:8b:88:ed:d0:88:66:18:d1:16:dc:89:
         4a:d5:9e:21:d6:32:c6:43:ce:d8:f2:d7:fe:d4:14:66:c8:47:
         1b:72:df:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:37:53 2026 by rpki-client