Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f388bd7a-04db-402d-be25-8724438527ac.roa
File:                     f388bd7a-04db-402d-be25-8724438527ac.roa (raw, json)
Hash identifier:          R+Vtk4vVOy+GefygjTCV/XxB3y4Orp5buNRy4EL7ed4=
Subject key identifier:   58:0C:85:73:9C:A3:16:A5:7C:9C:21:23:CF:BE:01:1B:6D:8B:27:DD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0ABAD74F78A5ADEC7C4BF052BAE787ADF7B3E3E3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f388bd7a-04db-402d-be25-8724438527ac.roa
Signing time:             Mon 03 Aug 2026 00:50:35 +0000
ROA not before:           Mon 03 Aug 2026 00:50:35 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        119.12.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ba:d7:4f:78:a5:ad:ec:7c:4b:f0:52:ba:e7:87:ad:f7:b3:e3:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 00:50:35 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=d8b352525554a4a5026f3d0978539242b8353efd5026f9dda588c79470ad0a3a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c0:4b:aa:74:f3:2e:c7:69:a7:9a:fc:5a:f9:
                    ad:0b:8c:14:1c:30:d7:51:a7:23:53:b0:bb:b2:6e:
                    75:6c:01:7d:aa:a1:c2:e7:7e:2b:11:95:9a:5e:91:
                    d2:c0:7e:7c:75:c6:b8:b3:d8:21:67:08:0e:a5:bf:
                    87:23:8b:e5:17:53:18:ef:da:5c:a1:42:a6:69:d5:
                    f0:1f:e3:8e:ed:b9:34:e5:bf:df:c5:f2:ff:54:33:
                    bb:5e:63:89:48:1c:d9:5a:9e:8e:65:78:b0:2e:ca:
                    6f:94:c3:84:91:4b:07:c1:86:1c:05:80:db:88:c8:
                    b2:94:4d:de:18:58:d7:b4:37:d2:6c:f6:00:4e:a7:
                    2a:22:62:93:db:d1:76:58:ed:ac:95:97:c8:97:56:
                    94:a2:69:f5:74:8e:4f:c1:38:2d:eb:53:88:78:22:
                    79:83:09:54:97:74:60:e8:6d:29:b1:62:e7:4f:dc:
                    f9:f1:2a:f2:db:f6:32:51:42:4d:fe:20:25:2f:14:
                    d4:c4:aa:fc:81:03:86:82:14:6a:0d:dc:39:d2:d8:
                    f0:93:67:e0:c0:2f:3a:e7:1d:68:fb:ac:b3:63:98:
                    8c:95:b5:93:f6:17:5c:8f:89:1c:0c:af:33:68:13:
                    bf:d0:a3:45:96:cf:3e:15:53:c7:32:36:4f:a3:a4:
                    52:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0C:85:73:9C:A3:16:A5:7C:9C:21:23:CF:BE:01:1B:6D:8B:27:DD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f388bd7a-04db-402d-be25-8724438527ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.12.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:0c:9d:d1:ee:d6:0a:33:29:52:cd:1b:86:54:38:ad:fe:a3:
         34:a3:ef:00:5f:a7:98:c2:50:1c:37:71:48:08:56:aa:3a:16:
         ad:39:a2:2d:3c:67:21:a4:d7:29:8c:6d:43:41:1c:84:2a:78:
         6e:4b:f8:20:8b:34:72:36:53:a1:4c:db:e8:aa:79:d0:ca:4e:
         d3:a0:56:9e:62:36:27:de:05:6f:9e:e1:ec:c9:bc:b3:fb:58:
         a5:d6:1b:72:4b:ee:b5:f8:57:c5:f8:3a:4f:c3:e3:dd:99:d3:
         37:62:6c:43:7f:85:7f:84:f0:45:18:40:7a:aa:b5:45:b6:eb:
         67:38:2c:5d:dd:c3:4a:3e:cd:ce:dc:83:ff:50:8a:2a:42:9d:
         cd:9d:5e:f2:4e:e0:b0:4c:8e:4e:87:a7:56:be:1f:66:0a:ea:
         81:80:08:28:9c:a1:b5:fe:a5:58:f7:20:80:ca:70:ac:e1:15:
         c2:8c:2e:fb:62:c6:3b:28:09:06:47:57:62:a2:ba:64:99:bd:
         06:05:87:94:20:c2:02:f0:96:f9:f7:b6:0f:1f:c2:89:03:88:
         ca:2f:29:fc:19:9a:34:2c:12:0f:ce:ac:fa:07:b4:d9:4f:6d:
         b8:fa:57:48:06:5f:ce:b0:03:54:99:5a:44:1b:aa:5e:69:c7:
         fc:cc:3d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 13:23:51 2026 by rpki-client