Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe4dae27-bd0b-4693-9fd3-05309ef5d4ee.roa
File:                     fe4dae27-bd0b-4693-9fd3-05309ef5d4ee.roa (raw, json)
Hash identifier:          /lLe0Ipd2emI+CWWGyfqkZnvZdu1DPoJDuQv7CB7w2A=
Subject key identifier:   F9:7F:12:8C:10:45:2F:D3:D0:0E:76:82:2E:EC:11:78:F4:16:43:34
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4D803EF39FE5715056C446ABBEC2B40E74BB6942
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe4dae27-bd0b-4693-9fd3-05309ef5d4ee.roa
Signing time:             Fri 17 Jul 2026 00:20:43 +0000
ROA not before:           Fri 17 Jul 2026 00:20:43 +0000
ROA not after:            Thu 15 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.181.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:80:3e:f3:9f:e5:71:50:56:c4:46:ab:be:c2:b4:0e:74:bb:69:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 17 00:20:43 2026 GMT
            Not After : Oct 15 23:59:59 2026 GMT
        Subject: serialNumber=14c16434b807d10cb7ad61e0405934a7b331e48bbb66eb95552a61227a17c343, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:49:5d:ff:11:04:39:a4:85:53:ab:12:66:7a:
                    3e:5d:04:93:db:9c:27:6c:d6:44:a8:20:20:2d:2e:
                    0a:26:26:78:f9:a5:02:ad:36:38:03:57:70:df:bc:
                    0f:b9:b8:56:75:b2:e2:35:f5:02:ad:2a:04:58:96:
                    6d:03:53:35:01:01:25:b4:e9:c4:e2:e6:96:92:d8:
                    76:64:79:d5:bd:7e:56:9e:1c:b3:d9:1e:a6:d7:7e:
                    5d:15:03:aa:65:43:9a:f0:1e:1c:fa:1b:76:40:18:
                    67:b4:f7:49:d1:14:f5:95:08:c6:93:d4:86:4f:3d:
                    91:07:9b:c7:73:77:eb:82:eb:d4:9c:f0:bc:3d:22:
                    6c:c8:14:1b:84:d1:c8:dd:43:65:94:28:32:67:e2:
                    14:e1:d6:ba:fc:dc:08:28:1a:f0:80:45:74:86:67:
                    51:db:a2:9f:aa:bf:f4:33:06:10:85:c5:a2:85:f4:
                    9e:cd:76:d1:fb:69:56:9b:cc:f4:39:c5:39:76:f3:
                    2d:36:68:06:f1:4a:33:36:0a:ee:8e:67:01:2c:43:
                    c3:eb:b6:ec:34:45:b8:a2:d8:28:07:4f:0a:30:ee:
                    d3:50:73:35:d3:cc:e2:80:16:52:c7:11:b6:b9:f9:
                    55:7c:f2:43:94:44:6e:07:7a:97:18:59:21:2e:2c:
                    88:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7F:12:8C:10:45:2F:D3:D0:0E:76:82:2E:EC:11:78:F4:16:43:34
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe4dae27-bd0b-4693-9fd3-05309ef5d4ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.181.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3b:a8:43:7f:4a:41:2f:16:66:22:5e:42:1f:50:65:8d:a0:02:
         c5:e7:20:51:a0:18:ca:71:f6:2e:23:71:8f:7f:50:80:76:9d:
         e8:13:c0:48:9f:be:dd:f6:ed:34:dd:9c:01:28:2b:95:49:d9:
         47:17:28:b4:ca:c1:04:21:ce:d1:4b:b8:10:58:aa:b1:2f:b3:
         d3:59:46:6c:de:70:43:3c:d1:ab:b6:42:2c:c7:36:1f:e5:0a:
         17:97:3a:d4:21:6d:0d:78:e3:4a:f9:0e:d5:54:1d:eb:68:7e:
         06:8b:f6:ef:2e:1f:60:23:e0:d4:21:7c:c3:ae:64:7c:f7:19:
         f9:bb:ed:c9:a5:ad:c0:90:28:a1:4a:0b:e0:68:bc:60:cc:b9:
         4b:03:77:30:81:52:f2:d5:ec:56:d6:67:98:6d:4b:7c:50:51:
         24:e1:54:7d:73:40:51:fc:9b:64:b3:2f:bb:08:fd:65:bb:55:
         99:d4:82:3e:b7:ab:77:bf:af:cb:fa:ed:76:ce:60:6d:0a:b5:
         f3:ad:f3:b1:71:01:af:5d:1f:3e:20:42:69:26:74:84:11:7c:
         b8:9d:34:86:0f:3a:77:b3:c1:61:96:c1:fc:ec:0a:0c:b2:d0:
         61:04:0e:c2:5b:6f:d8:f9:3a:71:13:e7:ff:a1:b9:37:09:85:
         1d:74:c6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 12:10:51 2026 by rpki-client