Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/14a01d73-a88d-4b4c-ab35-9079175c3927.roa
File:                     14a01d73-a88d-4b4c-ab35-9079175c3927.roa (raw, json)
Hash identifier:          yQmsFwyRFcBu8+Vtcd7aNpPsZJQGzubFx/TxmYn8fg4=
Subject key identifier:   C6:3E:C3:B4:D0:03:5B:95:2C:B3:46:1D:25:38:62:34:12:99:14:A9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       60301D4A49BE4267A0684783A4A2CA64B91CC2EB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/14a01d73-a88d-4b4c-ab35-9079175c3927.roa
Signing time:             Fri 18 Sep 2026 00:00:03 +0000
ROA not before:           Fri 18 Sep 2026 00:00:03 +0000
ROA not after:            Thu 17 Dec 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        54.115.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:30:1d:4a:49:be:42:67:a0:68:47:83:a4:a2:ca:64:b9:1c:c2:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 18 00:00:03 2026 GMT
            Not After : Dec 17 23:59:59 2026 GMT
        Subject: serialNumber=02cdb25a5610ea18d5238387fcb458d35715e8c9a62259dc6f1856d9677976cc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:29:b7:eb:40:45:cd:b6:a8:72:da:f2:a6:72:
                    30:05:92:b1:16:5c:c4:37:d8:98:50:ea:98:64:cf:
                    eb:6d:ef:1c:69:5b:95:a0:15:3c:52:55:24:24:23:
                    51:2d:8f:6b:df:28:56:e9:dd:ef:6e:f0:50:56:f7:
                    c8:62:2e:0a:df:0c:90:94:c4:41:8a:79:d9:23:cb:
                    b0:b3:6b:bb:27:f0:47:93:58:1f:d1:64:54:ec:4f:
                    7a:ca:79:8d:13:0e:b5:2e:0a:a3:da:89:ba:20:a9:
                    3c:36:bb:6d:57:04:6d:7f:81:5c:cc:c7:c1:f1:f5:
                    6d:3b:7f:4c:85:20:23:e0:34:af:3c:a1:f2:ec:92:
                    fd:e2:27:14:9a:b9:5f:da:85:93:47:15:1d:63:be:
                    c2:a8:10:13:87:65:d1:3f:d3:98:50:56:eb:16:55:
                    5b:58:85:e8:60:38:fc:29:fe:8d:e6:0f:77:dc:1b:
                    af:f6:66:b5:ee:49:93:c4:e1:65:25:b2:71:5c:e8:
                    8d:a3:98:f2:c6:39:5a:f6:da:a2:62:5d:02:73:ab:
                    c7:9f:bb:94:6b:56:de:91:0d:a8:46:fe:31:39:41:
                    36:30:99:ea:d1:a7:80:e2:c0:93:2a:00:c2:40:32:
                    2d:cc:93:43:f8:63:45:a3:25:4f:b3:4c:38:fe:79:
                    e6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3E:C3:B4:D0:03:5B:95:2C:B3:46:1D:25:38:62:34:12:99:14:A9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/14a01d73-a88d-4b4c-ab35-9079175c3927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.115.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:8c:71:4d:95:81:a2:0d:77:86:69:2f:7a:84:65:a6:0f:b2:
         ff:ef:b7:0c:50:1c:a2:66:4b:e9:54:9d:69:9e:24:5f:c9:90:
         c0:34:44:b0:e8:c8:37:f9:bc:4c:17:99:1e:4a:c8:94:30:28:
         dc:c1:51:cd:a3:f0:e0:7c:6d:f8:8e:0e:9b:d1:eb:58:af:40:
         51:55:55:36:d6:ca:7e:57:dd:a5:02:0c:33:d6:97:d2:ef:fe:
         bd:f3:c3:88:ec:88:93:07:0e:86:b8:02:c2:6f:c9:f5:53:37:
         ae:7d:bd:8c:a9:77:c2:9d:2b:52:a9:c8:14:2a:7c:5f:08:db:
         3e:6b:a6:38:63:5c:5d:eb:60:dd:74:34:b4:4e:f6:94:3f:f2:
         bb:21:9c:ce:15:04:8f:5b:bc:e6:85:f9:51:cc:85:bd:f1:86:
         a7:a2:30:0f:c0:7e:13:df:07:ee:8c:63:eb:80:27:b2:82:fb:
         5c:06:92:91:7f:ce:33:ca:4d:0c:65:fd:d6:5f:80:8c:f6:bc:
         ff:d0:e0:52:a0:7a:a1:f6:62:74:c5:89:5b:ba:1e:60:b7:b6:
         c2:0d:f0:bf:9e:fa:eb:ce:df:6f:1d:fc:86:4f:af:74:b2:1c:
         8e:02:15:a3:17:0f:6f:57:f2:8f:c6:fe:34:93:30:c6:66:d8:
         a2:ad:d3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:11:31 2026 by rpki-client