Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d9802f5-2b41-4e83-b0d2-b35ec68f6bb8.roa
File:                     1d9802f5-2b41-4e83-b0d2-b35ec68f6bb8.roa (raw, json)
Hash identifier:          s1lFaQzy2Cc8jRHeBFOROaNrtDOvqxsbe86u9RLmf30=
Subject key identifier:   1D:05:F0:9A:64:E0:30:2E:C1:FF:C1:EC:68:59:D3:5A:05:55:2E:CF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       58AEC8549160A642F02F87EC27FD6ECEC883E0AD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d9802f5-2b41-4e83-b0d2-b35ec68f6bb8.roa
Signing time:             Fri 15 May 2026 00:50:35 +0000
ROA not before:           Fri 15 May 2026 00:50:35 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        161.178.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ae:c8:54:91:60:a6:42:f0:2f:87:ec:27:fd:6e:ce:c8:83:e0:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 00:50:35 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=ae331260ba7cfee0f81e0826e8ae216136e4df0e00042386d7dc8f9c18defa7e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:63:67:2d:d0:06:9b:b4:16:13:ed:c6:72:67:
                    cd:c1:f4:6e:46:e0:d6:7c:fb:21:5a:41:ab:d8:3b:
                    79:5a:a5:1b:0b:e7:41:cf:ce:dd:ef:85:8c:55:44:
                    7c:7c:18:8c:21:0d:1c:fb:5a:21:28:d4:11:8b:5e:
                    2c:ff:d7:f8:c1:40:c0:3d:dd:c3:12:f0:1a:0f:60:
                    7e:10:f8:dc:f4:8c:f9:df:a6:8f:2f:05:fb:0b:da:
                    09:f3:20:f1:80:41:0c:5f:aa:7f:55:c6:a4:19:f3:
                    12:36:a6:0c:ac:47:8c:a7:46:be:8e:cc:c7:3c:da:
                    58:48:51:2b:56:ef:dd:8f:22:99:8f:1b:27:9b:94:
                    69:df:7e:80:a2:19:f4:9e:a4:a3:12:ed:c2:36:ba:
                    1a:5d:ef:3a:79:41:3d:bb:f8:92:fe:26:8c:58:cd:
                    3c:95:6f:e9:a9:c5:5a:99:88:4f:af:11:32:9d:dc:
                    ef:6e:be:f9:7b:2c:12:d4:69:85:80:5c:45:4e:8f:
                    60:3e:b4:ce:64:68:22:3a:4c:eb:58:de:71:c7:2c:
                    d0:50:e9:ee:85:ca:92:d7:85:d6:1a:5a:f4:ec:67:
                    2a:9c:61:b7:5f:01:79:51:a4:7d:46:12:01:40:e8:
                    72:39:dc:e0:ce:76:71:99:2a:84:f5:c7:69:bd:4c:
                    2f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:05:F0:9A:64:E0:30:2E:C1:FF:C1:EC:68:59:D3:5A:05:55:2E:CF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d9802f5-2b41-4e83-b0d2-b35ec68f6bb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.178.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         19:d3:56:b7:49:b2:9c:a5:d8:89:9a:d2:b4:47:2e:f8:b9:63:
         6a:17:ad:57:6a:c3:e5:ed:d9:39:36:54:58:c9:74:4a:6b:de:
         ff:fc:39:28:46:06:39:bf:07:d5:a6:7c:73:82:fc:e2:d5:72:
         ee:8e:2d:76:c9:d8:66:52:57:5b:ef:15:65:f8:21:73:76:72:
         a8:25:70:b8:69:d8:f0:30:cf:40:97:25:a8:57:b9:83:ba:2f:
         07:7a:dd:07:f5:7a:7a:fe:9b:0b:5f:fd:a1:ea:60:49:55:ac:
         74:2b:ca:bf:11:55:cb:6f:14:23:1e:4b:ff:5e:c9:9a:d4:89:
         32:34:4c:a0:2c:6f:59:8f:30:ba:59:13:ea:ae:ca:4d:a2:da:
         1a:bc:6b:ec:c2:2f:5f:d3:a4:70:00:54:88:1b:9a:5a:c6:1b:
         45:40:5b:0f:d9:f6:76:2e:9d:55:27:91:fd:7b:d6:63:81:f1:
         8c:54:90:48:57:98:b4:a1:03:25:f2:bf:a5:86:78:16:74:2a:
         c2:a2:63:c2:d3:90:b8:b0:42:a4:7f:69:31:7c:1b:3f:18:ba:
         19:9e:16:ca:e7:0b:74:b6:97:83:b5:5c:57:08:95:f2:fe:ca:
         91:5f:fd:11:ee:bb:6d:1c:87:16:b4:65:c1:e1:d3:40:08:74:
         4c:07:ed:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:15:08 2026 by rpki-client