Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d9d7bd3-1ddb-48f0-b445-7c3d44fa09af.roa
File:                     2d9d7bd3-1ddb-48f0-b445-7c3d44fa09af.roa (raw, json)
Hash identifier:          rnA7BMynJD1fNsnCY/qXhk1eA1Ip5VHK8/9b7nJue1s=
Subject key identifier:   D8:CB:08:32:A7:F0:65:4B:4C:E2:8B:06:31:10:5F:12:D2:CF:67:25
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5A2A11005AC75093F359F9FC8C2F149F5B5D4566
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d9d7bd3-1ddb-48f0-b445-7c3d44fa09af.roa
Signing time:             Sat 25 Jul 2026 00:21:14 +0000
ROA not before:           Sat 25 Jul 2026 00:21:14 +0000
ROA not after:            Fri 23 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        64.113.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:2a:11:00:5a:c7:50:93:f3:59:f9:fc:8c:2f:14:9f:5b:5d:45:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 25 00:21:14 2026 GMT
            Not After : Oct 23 23:59:59 2026 GMT
        Subject: serialNumber=d816f2b9c8f61366788896e0556f9a08e837f198c6e8e4aa6e004515ff662a54, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:07:10:27:f4:86:7d:7d:df:23:cf:0a:03:61:
                    8f:2e:d7:ba:a8:00:f4:de:4d:14:46:1b:a9:54:6d:
                    2d:f4:40:20:62:be:ce:58:22:cd:82:2e:84:bb:3a:
                    b1:e1:a6:00:85:ee:e2:05:57:36:57:e2:4e:f7:df:
                    30:e3:c1:6b:2e:4f:25:6e:c8:fd:05:1d:bd:28:48:
                    17:57:43:67:a1:3a:c2:fc:7e:39:c8:24:d8:71:bf:
                    4a:43:11:4c:ef:54:c7:59:0b:33:5f:4e:56:17:79:
                    e5:22:cd:d9:5d:83:1f:f9:f6:0c:e7:c8:ae:27:86:
                    c7:2b:2a:c5:5d:c0:da:d7:22:96:1f:60:cf:68:9d:
                    b0:84:c6:83:c0:ff:f6:06:fd:bf:ad:c7:8d:65:75:
                    c6:1b:d4:4a:69:67:8f:3f:b9:26:78:1e:c9:21:56:
                    36:76:47:34:83:13:7b:4b:9e:ff:e6:f4:00:23:ee:
                    cd:03:8f:c6:b1:25:03:0d:ff:c6:23:f9:26:0a:5c:
                    75:ee:1a:f7:fe:74:63:d1:a4:9b:2d:f6:88:16:86:
                    cc:5a:28:bb:92:56:08:81:77:05:29:88:15:9c:80:
                    e6:93:75:3e:bb:f3:bc:09:cc:e6:15:55:f9:b0:74:
                    d8:b4:20:bd:0a:a7:a6:af:38:85:22:b8:59:37:9c:
                    95:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CB:08:32:A7:F0:65:4B:4C:E2:8B:06:31:10:5F:12:D2:CF:67:25
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d9d7bd3-1ddb-48f0-b445-7c3d44fa09af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b7:1d:53:0d:e5:a9:61:05:33:2b:30:ef:fc:93:92:6b:4f:76:
         2f:ee:36:c5:10:83:80:9b:62:29:cc:5e:65:8c:b1:92:61:fb:
         67:6b:01:4a:7f:05:10:41:11:25:cd:93:55:60:16:e1:f3:f9:
         4a:a5:9b:6f:79:69:4b:eb:63:4b:d0:1e:7b:e2:ff:fd:4d:0e:
         79:de:af:de:0f:77:9a:47:48:ed:82:28:30:9f:12:c6:00:6c:
         1d:81:61:5f:92:f4:22:97:f3:b4:36:40:ab:2b:5c:30:c2:67:
         b6:86:95:e5:2f:96:5b:be:7f:18:c4:41:14:8c:ca:87:4a:70:
         14:bf:49:5d:26:ac:4c:70:0c:ac:dc:e0:11:79:8c:27:3b:06:
         9b:01:2e:ea:ed:54:34:61:db:c6:ef:68:a6:b6:38:04:6f:38:
         ae:ed:ad:94:f0:78:6b:94:35:b4:fe:5c:8c:34:14:dc:d8:73:
         dc:6d:96:41:34:d6:0e:aa:e7:25:c4:5f:0a:9a:70:f2:61:2c:
         93:91:06:b9:c4:bf:e5:48:6c:67:20:bd:0e:78:a5:10:07:b0:
         4b:95:c3:85:d3:59:09:8c:a2:00:6c:20:ef:c8:06:77:9f:de:
         30:90:a5:a6:e4:e5:0e:7a:0a:0c:91:d3:bb:80:4f:27:ca:a5:
         44:a5:7f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:50:55 2026 by rpki-client