Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07c65c13-dbcf-4fb5-8589-d17ea47669c8.roa
File:                     07c65c13-dbcf-4fb5-8589-d17ea47669c8.roa (raw, json)
Hash identifier:          65SoC8MXmIhbxXrRufcX6K2M9CFvFSFFqLnShreMDYA=
Subject key identifier:   93:BB:EF:6F:66:D5:A2:8F:7A:3B:9A:19:58:2D:A4:8B:7E:32:0B:CA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1EC31A0BA245AA824B79DC405A0B9DC477EFF264
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07c65c13-dbcf-4fb5-8589-d17ea47669c8.roa
Signing time:             Thu 16 Apr 2026 00:00:42 +0000
ROA not before:           Thu 16 Apr 2026 00:00:42 +0000
ROA not after:            Wed 15 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        173.245.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c3:1a:0b:a2:45:aa:82:4b:79:dc:40:5a:0b:9d:c4:77:ef:f2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:42 2026 GMT
            Not After : Jul 15 23:59:59 2026 GMT
        Subject: serialNumber=af51d6d7b473c675dc0bfbab55ed0ef0337cc0e8c3a38accda90ff3c59f4ba98, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:19:a7:29:29:31:ac:6f:cf:10:5d:47:e1:1a:
                    17:02:cf:07:f8:38:bb:88:ab:18:aa:f2:0c:b2:0d:
                    83:a9:12:c5:71:89:91:c1:4e:b3:bc:bf:d5:c9:22:
                    11:be:92:52:36:ae:aa:2b:68:ed:5a:fd:26:87:bd:
                    24:e2:95:4e:cd:6d:f2:f0:03:8c:12:42:3c:62:94:
                    d9:aa:c0:73:ba:42:7d:8d:ea:a5:46:bd:bc:45:37:
                    2b:03:f2:08:13:be:41:6e:3b:97:a4:31:4b:9f:5a:
                    9f:d0:2d:c6:f9:47:00:6a:4e:11:2f:c7:d5:2a:1e:
                    b4:06:6c:0a:16:92:6f:f8:8f:8e:91:7b:4c:62:b2:
                    c9:a1:e3:d4:90:53:65:42:29:eb:22:c9:83:c2:c9:
                    f1:07:c5:28:92:00:80:25:28:56:61:51:94:1f:66:
                    02:b5:7c:b3:53:24:8d:81:45:0c:d3:5a:89:b1:b7:
                    cc:46:b7:87:c7:cb:f4:6e:6e:81:d7:bc:f8:66:a2:
                    19:61:23:4b:4e:57:a4:95:67:f5:fe:6f:a1:4e:51:
                    7b:dd:21:49:a0:e6:a1:d2:af:ba:57:df:09:ca:9c:
                    62:8a:2b:5b:04:fe:89:1d:17:3d:c3:71:fb:7d:dd:
                    fb:02:59:ce:dd:16:33:ee:7c:f7:44:1f:8e:47:29:
                    d2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BB:EF:6F:66:D5:A2:8F:7A:3B:9A:19:58:2D:A4:8B:7E:32:0B:CA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07c65c13-dbcf-4fb5-8589-d17ea47669c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.245.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:5e:a4:08:de:ec:c0:97:21:ee:c3:68:ee:64:90:69:eb:83:
         9c:a7:ed:30:1e:74:2c:c0:f7:6e:bc:6d:87:fd:c2:6e:7a:d8:
         a3:8c:0e:d4:15:59:ae:50:29:48:be:82:42:5f:19:77:90:05:
         8a:44:99:2d:17:7e:12:b6:17:8f:ec:aa:10:00:ff:f8:d5:21:
         a2:a8:a6:a3:e5:76:21:d7:ce:58:9b:42:11:f4:08:a6:9e:1e:
         43:39:89:ab:84:1c:90:3a:52:8f:cb:a3:a0:17:81:9d:86:84:
         c9:a7:3b:af:87:65:43:5f:17:20:64:9d:fc:f6:d2:e8:4f:f9:
         31:a1:2c:33:97:81:85:9d:5b:fb:14:80:dc:fd:25:bf:e9:08:
         ef:90:09:ed:0b:d7:e5:67:bb:a9:7a:b3:75:99:85:c1:69:f9:
         2e:ff:97:82:02:19:1d:86:9a:56:55:9a:ce:d6:e7:f4:c8:b8:
         48:32:09:e9:eb:43:bb:a7:c7:26:09:c8:74:4f:cc:c2:39:f9:
         c7:31:a7:00:d0:d6:75:a2:cb:a4:92:4c:c6:92:3f:55:d3:1e:
         9a:38:77:d7:d2:21:04:80:e4:c8:70:9e:74:22:f3:b3:2e:ed:
         18:ee:c7:70:e7:70:21:d1:70:a5:49:6b:cd:aa:f9:fb:40:85:
         65:b6:c1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:19:08 2026 by rpki-client