Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe061fe4-7f72-4eb7-8ef9-28f55bb762e6.roa
File:                     fe061fe4-7f72-4eb7-8ef9-28f55bb762e6.roa (raw, json)
Hash identifier:          TntqDxVAtc4B0xt5udzTxz82IpP4JGslGNAUtnM6G0g=
Subject key identifier:   0D:93:FB:EB:5E:89:7E:58:88:15:28:D9:6F:85:D8:8D:A3:B3:E3:62
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       752B50B8BDD7A50EEAF3E47898AF6BFF5B142496
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe061fe4-7f72-4eb7-8ef9-28f55bb762e6.roa
Signing time:             Mon 03 Aug 2026 01:11:48 +0000
ROA not before:           Mon 03 Aug 2026 01:11:48 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.78.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:2b:50:b8:bd:d7:a5:0e:ea:f3:e4:78:98:af:6b:ff:5b:14:24:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 01:11:48 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=7b4b267ec8fca5f92bd902f8eee83cf3730114bd7d50def8192f2bdacd1776a7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0f:91:69:c1:8d:18:29:75:4e:84:ce:6a:f8:
                    05:3d:db:98:29:82:17:80:7a:25:e5:85:c2:00:7f:
                    88:4c:8b:df:1e:ff:fd:49:13:c5:bb:10:2a:19:dd:
                    a5:41:27:34:7e:1a:4f:d4:43:4f:11:29:1e:61:c9:
                    d6:ac:ae:f4:2b:7a:73:28:a7:7b:36:82:97:74:34:
                    a3:8d:92:a2:9f:f4:f0:a7:61:0f:32:00:b9:5c:ae:
                    e9:6c:c9:b4:ab:e9:c5:eb:fe:39:27:4e:1c:58:3f:
                    25:43:4a:8d:0f:79:5b:87:2b:aa:b4:65:91:15:e8:
                    2b:80:94:ea:d9:af:07:05:7c:13:fa:e7:89:f4:7d:
                    ad:e7:52:19:b1:bf:4e:06:7b:9e:d8:eb:c5:15:41:
                    0d:eb:5a:0f:b4:7d:6a:00:cc:20:22:bb:b5:74:ba:
                    0b:d2:d3:a2:5b:84:1c:54:a4:c5:70:45:50:34:95:
                    48:39:2d:ce:4d:2b:91:b9:35:89:db:97:ac:3a:1a:
                    9b:e4:f2:aa:bc:38:6e:cb:8d:83:e7:fa:c4:b0:51:
                    12:38:9a:79:27:e6:15:9e:a1:4f:81:3c:4a:4b:de:
                    e7:32:a7:04:44:bc:c2:68:09:3b:ba:a1:15:55:3c:
                    c3:75:cf:8e:14:4b:62:ab:3f:2c:af:64:bf:1c:cd:
                    38:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:93:FB:EB:5E:89:7E:58:88:15:28:D9:6F:85:D8:8D:A3:B3:E3:62
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe061fe4-7f72-4eb7-8ef9-28f55bb762e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.78.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         85:ed:11:78:05:21:a3:5c:1d:e4:bf:bc:6a:0b:67:8d:b5:7a:
         bb:7f:8e:49:55:ef:1b:c6:f8:f1:f6:1c:39:c3:a7:b0:5e:59:
         bb:5f:84:b8:bd:d1:75:a4:e8:63:a9:de:d5:3b:5a:bf:00:b8:
         ef:0c:9b:70:7b:c9:8e:f9:56:45:20:8c:30:24:cc:37:b5:df:
         7f:89:de:09:8e:a1:fe:0b:50:0f:b9:41:f8:96:1a:d0:87:7f:
         9b:16:fa:be:77:fe:d8:26:7e:50:89:30:ef:27:69:a1:33:63:
         5b:b4:af:55:85:f3:6c:ba:00:c3:4f:40:e7:bc:5a:46:44:11:
         93:96:66:64:9a:67:32:94:99:ae:ba:c5:4f:f3:dd:f8:22:65:
         7b:4d:e2:30:50:31:33:af:0e:e4:ab:4c:c5:42:ed:a0:01:16:
         d7:01:f3:4e:47:12:fa:86:3f:52:09:d8:3f:44:2c:9e:24:d2:
         39:d3:c9:34:9d:f5:96:70:be:95:49:68:92:19:14:2a:ce:b7:
         e3:53:bf:5a:a0:b2:9a:93:e3:16:f4:1c:51:62:fa:b7:b7:a5:
         e4:e9:2c:17:48:81:95:b5:b1:c0:9f:62:05:07:22:ab:88:34:
         00:81:5c:d0:83:bb:72:a0:cd:1d:24:8c:97:45:75:07:cf:27:
         9b:3b:d9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 12:45:25 2026 by rpki-client