Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e511c3ab-a3d4-4344-9e19-ddd5b8c0e102.roa
File:                     e511c3ab-a3d4-4344-9e19-ddd5b8c0e102.roa (raw, json)
Hash identifier:          TPisPQ2yZ7GKCXRsFjMRjqNxc2EYjzVd1jefA+aBgCM=
Subject key identifier:   9E:34:D9:50:3D:99:11:74:82:6E:20:AD:C3:DE:35:07:AE:3B:EA:4C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7C479E4EFCE15F4B894075800C4680750E8A04BE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e511c3ab-a3d4-4344-9e19-ddd5b8c0e102.roa
Signing time:             Fri 07 Aug 2026 00:21:10 +0000
ROA not before:           Fri 07 Aug 2026 00:21:10 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        16.56.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:47:9e:4e:fc:e1:5f:4b:89:40:75:80:0c:46:80:75:0e:8a:04:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  7 00:21:10 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=fffd2a9cacfc1e433e5fe00689908cdcea52fe3debdde09b7e1851b4cb0b5be6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:66:32:56:e2:56:3a:d2:fb:80:ab:8f:56:7a:
                    bd:8b:9e:6f:c9:d8:32:b8:99:82:98:9b:71:18:bd:
                    30:b7:eb:3a:7a:d6:e3:c1:2e:37:4a:ab:ea:32:df:
                    50:17:c2:71:2a:2d:37:52:20:11:9b:a2:e2:b3:57:
                    e2:b0:ee:52:aa:1e:fa:0c:8a:8a:d6:9a:06:82:99:
                    41:74:9e:20:68:17:7d:37:e2:29:58:24:6b:ba:91:
                    0c:fc:3b:af:2e:b0:b6:ff:31:d2:ae:75:b7:33:8e:
                    c6:3f:5f:12:3f:a0:6e:66:04:9e:97:c7:73:86:29:
                    b6:c1:e6:46:6e:b5:32:3e:a5:3a:2d:b9:8d:73:f9:
                    aa:e7:6d:b2:c6:c4:e2:70:7d:ac:6a:5a:f6:9d:0d:
                    83:f4:0e:40:d3:af:7f:47:33:cb:f7:f4:35:7d:a1:
                    d0:48:33:30:01:d1:4d:04:60:da:09:f1:9c:f4:38:
                    eb:3a:bf:b6:a7:10:18:9a:34:3c:9e:fc:d2:f2:50:
                    35:61:6a:71:d7:6e:d6:26:ab:e8:19:ad:28:cb:bf:
                    60:13:11:ad:f7:6b:cf:7b:a3:d9:82:39:ee:01:b1:
                    eb:e9:bd:8a:77:bd:92:31:6a:2f:1b:cc:7c:e2:cf:
                    d9:5b:95:21:1b:3e:1c:a6:4f:0b:31:d3:28:27:76:
                    41:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:34:D9:50:3D:99:11:74:82:6E:20:AD:C3:DE:35:07:AE:3B:EA:4C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e511c3ab-a3d4-4344-9e19-ddd5b8c0e102.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.56.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a5:d8:ef:81:f9:b6:dc:9e:70:5f:90:62:b0:9f:cf:1d:1e:7e:
         60:e1:fa:91:e3:7a:cd:5e:b7:e9:5e:00:e7:a1:f4:d2:96:34:
         be:05:71:83:88:0d:af:19:2d:83:f3:a7:66:29:e9:ae:86:45:
         94:f6:fe:27:c9:4e:4d:c9:d0:47:de:a2:fb:ce:3f:da:58:76:
         71:3d:d1:69:df:6f:42:7d:c3:aa:f9:f1:58:31:d8:b5:fd:b5:
         a8:5b:f5:d6:a7:fa:cf:1c:9b:b1:f1:be:21:8e:68:b5:b4:b4:
         cc:f8:63:72:ae:5e:a0:f9:63:e0:df:19:58:8c:ec:59:9a:cf:
         58:76:1b:46:ae:20:53:9e:0b:18:b5:c8:c0:5b:65:f7:8b:cd:
         02:74:c9:cf:d0:11:30:f3:29:04:03:d9:44:04:39:9b:1b:15:
         c5:1f:58:e2:45:94:ac:b6:da:f7:71:b9:25:eb:f0:dd:14:f7:
         51:bb:f9:0f:74:a1:28:63:f6:f2:9a:ba:dd:1f:3e:1e:1e:e1:
         c6:b7:00:da:36:24:a5:a2:3d:00:a1:1f:f3:68:e0:6f:24:e6:
         5e:9f:be:0f:c8:e3:b4:38:9f:16:40:99:53:e5:9f:39:59:74:
         4e:e2:ae:2f:96:2e:57:d4:1e:2f:02:3c:5b:d7:73:b8:7a:a9:
         33:68:53:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:55:04 2026 by rpki-client