Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c49f435-d4b8-4748-9d0a-a33d3916c6cd.roa
File:                     0c49f435-d4b8-4748-9d0a-a33d3916c6cd.roa (raw, json)
Hash identifier:          16LnVq/P4cobtA7dG7qEE8Fmj0agvm355UJHboMQgyo=
Subject key identifier:   CD:4F:DA:76:81:B9:18:5E:D8:E4:B8:40:6D:1F:C6:ED:4B:10:88:29
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       593FF76ED356720188F38EDC48B6E4CA0BE10A96
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c49f435-d4b8-4748-9d0a-a33d3916c6cd.roa
Signing time:             Mon 27 Jul 2026 00:20:52 +0000
ROA not before:           Mon 27 Jul 2026 00:20:52 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        75.22.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3f:f7:6e:d3:56:72:01:88:f3:8e:dc:48:b6:e4:ca:0b:e1:0a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 27 00:20:52 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=dc9fef565504516123a6fef96f23397e78410a8afef81cddf0cd77f77287b5a1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:eb:0b:31:24:5c:44:fb:fe:dd:83:fd:35:3a:
                    17:76:3f:27:ce:67:bb:41:f5:1b:83:fa:29:33:dd:
                    68:9a:e8:de:21:ad:a8:56:b2:04:b3:b0:78:a7:43:
                    6d:b1:85:87:ca:44:f6:42:89:c2:28:5d:d2:1d:77:
                    27:91:19:b4:a8:38:f9:a0:d8:ac:ed:a7:03:19:e3:
                    53:58:0b:8a:30:47:c7:da:02:4d:83:b4:86:f1:71:
                    f4:77:51:e9:54:aa:3f:d3:4e:51:ac:30:07:1b:d6:
                    87:23:a3:3c:bc:be:6e:1b:47:d1:1a:15:cf:b4:b3:
                    00:8d:09:49:a8:ce:83:39:aa:18:cb:b9:b6:eb:e5:
                    66:31:3e:b4:c2:ff:ec:f1:0c:08:1f:1f:80:3e:62:
                    2e:96:bc:7f:1a:40:eb:e6:a5:b4:1c:13:35:e8:62:
                    75:6d:89:e9:ce:20:62:d8:cd:83:28:bb:c4:b8:75:
                    90:dc:ae:7e:9c:dc:eb:02:ab:25:19:61:83:20:ca:
                    ce:30:db:f2:93:e3:9d:4a:3b:fd:f2:52:33:e1:90:
                    d5:ac:f2:7c:06:5d:26:18:dc:d7:41:55:cd:f2:97:
                    f0:2e:76:9c:db:34:cf:27:68:94:0b:fb:35:0f:33:
                    e1:2b:7e:b9:07:e6:8e:d9:de:2f:c1:a1:f1:68:e4:
                    99:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4F:DA:76:81:B9:18:5E:D8:E4:B8:40:6D:1F:C6:ED:4B:10:88:29
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c49f435-d4b8-4748-9d0a-a33d3916c6cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.22.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         47:79:c0:6b:bf:50:a3:ef:92:2e:7d:1a:88:14:45:47:e9:bc:
         b0:25:8f:d6:59:83:0c:dc:ac:2f:4f:fd:f9:37:59:e3:4f:dd:
         11:08:59:e1:10:49:b9:57:68:b5:55:93:a3:e3:9a:2b:42:32:
         7b:e7:fe:ab:07:be:0e:1e:6c:5a:e3:f0:a4:b8:84:2c:81:f9:
         5d:57:09:8f:60:f3:05:8f:ae:bd:8a:8d:ef:c3:ab:57:a4:89:
         ca:bf:f2:af:3e:54:56:28:26:a6:47:7e:af:03:dd:66:0f:a5:
         47:a9:e5:9b:f0:95:59:cb:4a:0d:84:79:9d:43:c6:11:89:18:
         b0:3b:92:64:ae:c2:66:2e:b4:7f:33:f3:dd:af:2c:51:21:e9:
         56:d3:27:85:52:5c:78:48:70:54:49:b7:d6:72:40:13:c1:d8:
         14:1c:41:b5:0f:b3:4e:af:ed:1e:fd:0c:eb:ad:63:96:86:69:
         9d:21:9f:f9:6a:38:0a:4d:f4:78:01:3a:b1:07:2f:41:f5:18:
         9f:da:b7:3a:ed:cc:5e:0e:36:6d:96:21:6b:4c:7a:bf:e7:8c:
         3b:39:e5:19:e8:99:de:1c:95:7f:40:ad:dc:5a:07:24:fe:58:
         2d:3b:fb:b8:20:26:01:27:39:28:56:05:52:c2:21:fe:84:94:
         95:12:f7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:08:38 2026 by rpki-client