Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c371f96-b6a2-4545-bc1d-b411650f7a7b.roa
File:                     1c371f96-b6a2-4545-bc1d-b411650f7a7b.roa (raw, json)
Hash identifier:          P961wA4xqPuxp/eqbMV6yruHBodvvnUNUSl8yBVsA/M=
Subject key identifier:   0A:FE:F1:62:71:C6:00:01:D4:1A:9D:58:B0:46:FB:34:47:89:BA:EE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1FDAACE67219AB1CA5AFAC5354A56D522F96802E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c371f96-b6a2-4545-bc1d-b411650f7a7b.roa
Signing time:             Mon 27 Jul 2026 00:20:50 +0000
ROA not before:           Mon 27 Jul 2026 00:20:50 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        24.110.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:da:ac:e6:72:19:ab:1c:a5:af:ac:53:54:a5:6d:52:2f:96:80:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 27 00:20:50 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=8e821b9fc63fcfc223ece00c5379193adfa5cd47e74e4f2c163703d8dce5cad7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:56:ab:f8:0e:46:d0:dc:1f:9e:c3:72:f0:d2:
                    97:49:82:91:ea:91:af:2c:32:db:01:d7:3f:11:51:
                    0b:11:d5:52:15:c1:1e:2b:1c:83:dc:4e:f2:6d:1a:
                    b2:30:bf:2c:d8:c1:87:3b:eb:ba:f2:8b:53:20:9f:
                    90:bd:45:f1:c7:e6:1a:fe:81:af:e4:b7:5c:a7:81:
                    e0:7d:95:3e:6e:a1:e7:5d:dc:43:9c:6e:16:5a:b5:
                    45:80:b1:ad:80:d8:ec:c5:3d:4d:03:7c:c3:24:bc:
                    53:a3:b5:09:cf:a4:5c:53:35:4f:c1:07:d3:e8:bf:
                    c4:89:aa:eb:c3:ef:fb:46:03:5c:07:db:68:cf:9d:
                    6a:a6:8d:aa:41:f2:60:68:ec:f2:73:fa:5c:cc:0b:
                    24:11:0d:91:76:fd:91:ab:90:d6:b2:e2:fb:f0:39:
                    ec:7b:5d:7d:b8:4b:60:44:a2:11:24:07:0e:c6:3b:
                    8a:10:09:62:88:60:1b:d6:a3:cf:05:f9:f1:8b:10:
                    83:54:cf:7b:2d:9d:4d:e4:f7:0a:ac:d6:70:3a:0a:
                    d2:9b:74:6c:aa:15:26:c1:a0:b2:94:d1:5e:97:2b:
                    a9:f0:a9:d0:ef:90:c1:cf:dd:3e:98:53:bf:71:f7:
                    77:a2:0d:21:ee:34:bf:59:ee:1d:86:c1:00:c3:0c:
                    d7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FE:F1:62:71:C6:00:01:D4:1A:9D:58:B0:46:FB:34:47:89:BA:EE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c371f96-b6a2-4545-bc1d-b411650f7a7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.110.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:c1:4d:55:a4:61:79:64:78:41:50:05:ca:fb:c7:49:e8:45:
         6f:1f:ae:18:27:ea:d2:9a:ce:5c:8d:ac:f4:7b:8e:e3:56:e7:
         e6:0a:38:3c:7e:ff:ce:dc:6a:31:03:7d:d9:a0:9d:05:a6:c0:
         be:7e:4b:37:29:0b:f1:b0:f8:a6:34:74:f5:ba:81:c1:fd:db:
         d7:e3:18:34:58:4d:1a:7d:1c:b4:db:e5:31:d7:92:ce:fe:54:
         ea:e3:a7:f1:18:c9:54:10:b5:38:2d:35:7e:e2:f7:f8:09:05:
         f3:6f:96:a8:f3:77:8f:b6:2a:de:24:eb:a3:6f:58:91:20:91:
         1f:d6:23:e6:32:b1:26:cc:00:d9:4a:7e:53:b4:30:37:3f:67:
         2f:8c:99:df:1e:21:29:cc:c1:31:26:79:47:4a:7f:c6:b0:e0:
         76:3e:41:1d:8a:25:80:93:3c:4c:de:ce:54:ae:c3:4e:55:d6:
         8e:52:03:61:e0:97:79:19:65:86:be:01:c9:9d:66:dc:b3:d1:
         d5:62:b3:0d:59:18:8f:46:c0:be:2e:02:15:04:a8:bf:41:7d:
         f1:08:cf:99:a5:fc:50:03:2a:eb:61:71:67:2f:8d:89:7b:5e:
         7a:c9:8b:28:fc:e5:05:f6:e9:07:68:5d:2d:c2:49:03:db:7f:
         e5:d8:bc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:51:42 2026 by rpki-client