Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa
File:                     aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa (raw, json)
Hash identifier:          h1h611VI0JRi1Gi3ZZJFYb7l4oK0jOIFpt+ioS6emAU=
Subject key identifier:   D3:19:B4:A5:6F:9A:3F:5C:6F:2A:D9:60:5D:6F:ED:12:49:43:1B:49
Certificate issuer:       /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Certificate serial:       6FBF33C669F9CBB189F4356423ABC9939EF181DB
Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa
Signing time:             Tue 04 Aug 2026 00:10:06 +0000
ROA not before:           Tue 04 Aug 2026 00:10:06 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        198.41.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:bf:33:c6:69:f9:cb:b1:89:f4:35:64:23:ab:c9:93:9e:f1:81:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
        Validity
            Not Before: Aug  4 00:10:06 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=5cb826c10dedd724126aee2b37fea5db5602be6437fb2a986eb7279dc634f21b, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:20:1f:af:da:85:52:f0:04:76:e7:d6:75:93:
                    05:39:c2:d4:d6:58:f5:4a:1d:ab:c2:78:62:dd:19:
                    7c:42:09:64:22:4f:86:8f:3c:6a:3f:ad:bb:02:5f:
                    ea:65:1c:e5:8e:f6:97:40:e6:8f:cc:61:12:27:ab:
                    fe:0b:6a:ae:18:34:ec:54:b2:c0:53:cc:de:72:fe:
                    db:04:84:97:d9:0f:d1:cc:c2:08:d3:ca:8d:7f:49:
                    3d:9a:c1:ab:77:ca:7f:f0:e0:c9:11:32:93:98:ab:
                    14:8e:d7:8b:18:51:0a:08:f1:15:1e:6d:e9:1b:f9:
                    74:ff:a9:7b:94:fd:ea:71:e1:02:1a:9d:73:c0:22:
                    4b:35:77:a5:af:14:95:6a:84:60:99:65:4a:82:ed:
                    5f:de:87:6e:fa:7a:25:30:ba:96:10:de:7d:7f:36:
                    a4:d1:68:e4:76:8e:ee:d9:7b:7e:ee:77:b7:b9:f9:
                    b5:31:6e:c3:46:88:fe:a1:db:33:ae:46:86:13:c4:
                    6d:fb:68:e2:ee:5c:7c:2f:51:18:1c:18:b6:b0:9b:
                    e1:d4:d9:3e:fb:f6:7e:2a:b8:67:da:4f:a9:41:6a:
                    11:6f:f9:c3:bf:0d:38:42:2b:c1:e2:fc:ef:3d:62:
                    28:73:d2:3a:ba:64:e0:ab:f3:55:98:d0:ee:dd:f0:
                    e2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:19:B4:A5:6F:9A:3F:5C:6F:2A:D9:60:5D:6F:ED:12:49:43:1B:49
            X509v3 Authority Key Identifier:
                keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:11:f2:86:7f:2f:5c:b7:d2:a8:80:62:9f:cf:05:5a:ca:ac:
         86:19:81:9e:b2:3f:cf:a0:65:c0:5f:e5:3a:b1:53:64:1a:a0:
         d5:0a:7f:42:ec:1c:0c:d6:0f:08:96:06:95:ba:72:51:86:fd:
         f3:d3:ac:80:89:29:f8:60:38:ab:c8:ee:10:6d:e8:bb:55:51:
         4a:11:48:14:ad:cc:6b:23:86:bc:30:0b:27:b7:58:17:42:cb:
         24:fd:2c:ab:bd:fb:b7:0c:a1:1a:fe:06:28:d4:cb:d7:08:b9:
         c4:d0:ff:3e:b5:6f:54:67:0e:6e:23:69:5a:d5:48:de:71:77:
         96:60:26:c5:e6:1d:ce:8f:4c:d0:bf:c9:b9:59:7f:bf:42:64:
         cf:7b:db:57:2e:5b:c2:ab:c7:f1:38:ba:e1:94:03:4b:79:6d:
         61:a0:3e:8c:4f:0b:56:2e:4b:91:93:c5:0f:fc:21:87:f3:81:
         f4:19:02:40:d8:67:fc:33:a9:23:a1:a5:06:ea:67:0a:ba:67:
         bc:bd:90:64:d3:55:74:24:b9:f6:3a:49:c5:30:e3:1a:fe:74:
         6b:66:e9:f4:e3:2d:c0:f9:9d:44:88:f7:3e:12:8b:27:46:3d:
         72:27:e7:34:ad:be:00:f9:20:7e:09:b4:3e:8b:fb:a7:63:c5:
         3e:51:79:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:40 2026 by rpki-client