Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1dce6296-99fd-4ae1-81cb-e0cfe3ab9a58.roa
File:                     1dce6296-99fd-4ae1-81cb-e0cfe3ab9a58.roa (raw, json)
Hash identifier:          8rVtuSqLyIBVssqRVvjtWTUD+ZhB2pw9hY51MrUy724=
Subject key identifier:   BB:D7:D0:C4:F3:CA:F0:0E:8E:B9:DC:7D:91:45:07:A4:C6:66:E6:56
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       494C6BE021DA020CDC0C63CA4E5383CCA11D26D5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1dce6296-99fd-4ae1-81cb-e0cfe3ab9a58.roa
Signing time:             Wed 27 May 2026 04:32:09 +0000
ROA not before:           Wed 27 May 2026 04:32:09 +0000
ROA not after:            Tue 25 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        23.234.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4c:6b:e0:21:da:02:0c:dc:0c:63:ca:4e:53:83:cc:a1:1d:26:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 27 04:32:09 2026 GMT
            Not After : Aug 25 23:59:59 2026 GMT
        Subject: serialNumber=67a812c06f25d7eec9ec5cfd75d0f85876fe3b24077943dc164d6a4708acb919, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:75:95:ba:0d:4d:4a:3e:db:4f:5c:88:86:9b:
                    84:30:ba:4f:ef:60:00:f7:7e:38:ba:bf:22:b8:bc:
                    60:5f:a6:bb:00:9c:19:1c:19:78:4a:62:3f:ed:45:
                    25:ae:84:07:ff:5b:3f:d5:b2:29:12:96:75:7e:57:
                    65:51:0c:40:5f:86:a3:13:76:ec:88:d8:57:d2:82:
                    97:0a:41:10:7f:3c:0a:d2:0e:b1:3e:bc:48:b7:a2:
                    f6:ec:23:23:bf:df:f2:09:3f:1d:9b:78:65:d6:d4:
                    ca:d7:be:b5:10:3c:87:52:fc:8a:40:d4:aa:a7:e5:
                    3d:1a:ea:10:1d:75:f4:f3:26:be:12:23:34:a3:3b:
                    ce:34:79:e4:0c:8b:5a:46:73:33:af:1a:20:14:28:
                    5d:73:c9:6e:de:d8:de:7e:fe:98:14:68:c8:18:fa:
                    35:c9:49:4e:58:ec:42:c5:4d:7d:fd:e8:bd:09:28:
                    4d:f8:bc:b9:b2:80:88:71:83:f1:51:4b:17:42:96:
                    ca:ce:46:2e:d5:c9:1c:d5:15:d7:d5:2e:3f:ce:f5:
                    12:be:76:34:4d:d7:af:07:99:1e:83:bf:7f:71:2b:
                    e6:c1:c0:cb:f1:4b:d5:8d:d3:6d:cb:c5:29:b9:eb:
                    7f:0e:43:2e:9b:ee:f5:48:13:bd:ce:b6:d3:f1:6b:
                    77:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D7:D0:C4:F3:CA:F0:0E:8E:B9:DC:7D:91:45:07:A4:C6:66:E6:56
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1dce6296-99fd-4ae1-81cb-e0cfe3ab9a58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.234.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:e9:04:fb:a8:3f:56:cd:94:86:d7:ef:d4:82:0c:df:05:45:
         7b:0d:14:06:54:5a:b8:b3:62:9a:7f:88:4d:90:7d:8b:1f:28:
         f9:e2:d1:41:60:10:08:31:93:9b:6b:74:ee:be:21:f5:29:b8:
         c2:6c:cf:de:96:bd:e7:8d:25:77:dd:07:a9:d9:df:4b:85:cc:
         34:53:1c:fa:92:3a:45:15:77:ce:f2:32:30:ac:bb:98:f0:59:
         2a:63:6e:d3:49:08:88:ac:4d:ef:26:29:07:9e:2e:5f:21:43:
         0c:08:f0:9f:bf:5f:61:b7:cc:3f:ce:8b:27:01:0c:13:5b:14:
         1c:e5:44:b1:25:20:f6:ab:fd:9e:4e:42:38:2d:0a:13:01:55:
         ef:22:2c:84:a7:4b:41:a4:1e:b3:bf:58:9e:0d:25:c9:88:9c:
         21:f9:64:3b:cb:db:49:f3:03:41:b0:1b:02:a6:92:df:8f:f2:
         05:54:94:67:2b:07:d0:4b:a2:f7:99:6b:6c:a5:c5:a0:f5:c7:
         78:9f:6e:d9:37:58:ce:2e:e7:9c:ec:5b:96:f2:9b:d5:ed:75:
         b4:c3:b7:e4:76:d2:44:20:9d:89:60:36:c2:23:c8:f3:12:d6:
         7b:9c:05:59:d6:56:9a:c1:66:fa:a8:c2:ec:bf:88:f1:31:5e:
         05:90:bf:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:26 2026 by rpki-client