Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4f1db8b-fd75-4a1a-be0e-f47422ee0ed7.roa
File:                     e4f1db8b-fd75-4a1a-be0e-f47422ee0ed7.roa (raw, json)
Hash identifier:          qzqMfZy3qBXBrTS/Is24v0/+fMyqC+oteBMSGm06Ce0=
Subject key identifier:   C8:1F:CE:52:BA:71:25:D0:61:1C:B2:3B:CF:9E:24:5A:DF:31:9A:66
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       156BCCB09A39E6741ED9A7920F6779AB0D7D0841
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4f1db8b-fd75-4a1a-be0e-f47422ee0ed7.roa
Signing time:             Mon 03 Aug 2026 00:41:00 +0000
ROA not before:           Mon 03 Aug 2026 00:41:00 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        107.22.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6b:cc:b0:9a:39:e6:74:1e:d9:a7:92:0f:67:79:ab:0d:7d:08:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 00:41:00 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=5c45bd310fec6f3781e66f061ee43f262ae0d4a44bbc6549b444ce1936426074, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5d:84:0c:f5:4e:67:35:4b:4e:fa:a1:42:dd:
                    d4:14:80:d2:a1:1d:38:22:ce:ab:98:cb:43:74:9c:
                    71:1f:3b:a5:2f:5b:80:36:68:cd:61:8d:a2:31:36:
                    6b:42:25:58:22:3c:c9:79:f9:51:a0:4d:c5:3d:a6:
                    19:d8:ce:87:a5:25:c6:84:b6:1f:eb:e6:9f:28:2e:
                    e2:69:43:31:dd:49:86:49:8b:d3:9c:52:0e:e1:e9:
                    c6:0d:eb:09:10:60:1d:82:c8:b9:ed:51:1b:29:86:
                    c6:d9:90:dd:43:74:05:b4:c6:0c:3c:ef:fe:c0:8e:
                    80:08:38:c3:16:2b:36:08:a2:51:4a:a7:26:b1:df:
                    32:da:61:e2:38:b0:50:ce:44:8a:ed:42:07:c7:79:
                    33:63:0a:8d:0c:dd:b6:a5:7a:e9:7d:70:7a:44:09:
                    c3:55:e7:c6:e8:20:72:5c:53:ab:b6:82:fe:7d:a3:
                    f7:b2:a1:08:c8:ed:51:d8:31:f6:17:fb:50:60:07:
                    d5:64:2c:73:75:38:5c:16:8c:e3:99:5b:b2:8f:e5:
                    0a:45:fd:65:e1:d3:1f:d9:b2:0b:a2:7d:65:a2:84:
                    e3:aa:b6:80:ef:9e:6e:34:b6:1c:5b:c0:4a:35:7e:
                    ba:3d:6d:4e:91:f6:7a:51:fb:66:09:7d:f9:7a:c2:
                    d6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1F:CE:52:BA:71:25:D0:61:1C:B2:3B:CF:9E:24:5A:DF:31:9A:66
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4f1db8b-fd75-4a1a-be0e-f47422ee0ed7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.22.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:b3:39:e6:30:0a:48:bf:ff:24:87:31:b0:8d:3a:2a:d8:95:
         3c:bb:cf:da:ba:53:a6:aa:15:8a:27:e1:11:3c:2f:04:a8:51:
         a6:64:a3:aa:b3:ca:c3:b0:88:a4:21:0e:00:39:c8:b2:ce:d7:
         9d:fe:36:31:9a:76:1e:56:54:7b:ee:98:39:7c:56:7b:3a:82:
         38:3b:6d:ad:22:80:29:ae:02:96:80:7b:ff:76:ff:68:f0:12:
         38:04:87:ca:02:36:ce:80:71:e0:e1:70:c4:4e:ce:38:bc:b5:
         f9:12:ac:b3:ec:3e:be:79:ca:dd:b5:62:fa:e1:07:e7:c1:98:
         fb:bf:53:7b:93:9b:97:db:ae:ae:e5:f3:69:a2:1f:3b:34:09:
         f7:66:eb:f8:b3:cc:63:fe:f8:5c:0d:13:ea:34:0f:98:e5:d0:
         74:81:21:3a:5c:e8:9a:6a:ec:45:e1:95:6e:32:2c:e8:3a:4b:
         91:66:f2:3e:fa:41:47:1d:0e:73:d6:4a:c9:b7:73:b4:5f:8d:
         ef:1d:4e:6b:67:6a:fc:7a:7e:01:27:d9:5a:3c:86:63:1e:c0:
         4d:d7:60:74:2c:b2:dd:b8:eb:ad:8b:07:2f:88:13:69:8f:43:
         40:bc:66:65:94:1c:99:14:ee:5d:bd:8e:1a:13:87:53:76:7b:
         f7:7a:f5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 13:23:14 2026 by rpki-client