Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4460c29b-6af6-4d15-bee1-65deb7aba765.roa
File:                     4460c29b-6af6-4d15-bee1-65deb7aba765.roa (raw, json)
Hash identifier:          03GdfAGPX+3ssIWJq0yybS6tDpwvHaQB6xkiH4hJgrs=
Subject key identifier:   A1:19:0C:0A:3E:50:5A:C0:E6:1D:E2:32:4F:58:15:2F:02:11:8C:28
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3B18AF139FA856A08A22FE956B3F2B5C6A2EDB55
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4460c29b-6af6-4d15-bee1-65deb7aba765.roa
Signing time:             Sun 17 May 2026 00:10:35 +0000
ROA not before:           Sun 17 May 2026 00:10:35 +0000
ROA not after:            Sat 15 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        75.101.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:18:af:13:9f:a8:56:a0:8a:22:fe:95:6b:3f:2b:5c:6a:2e:db:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 17 00:10:35 2026 GMT
            Not After : Aug 15 23:59:59 2026 GMT
        Subject: serialNumber=d0db14f306a1ce9e4ce9e484c18a43ce8c10e51191d62af812b6180db6c9bfd5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:57:95:4a:52:de:23:09:30:bf:bc:e5:07:79:
                    f1:20:1b:15:15:8e:7c:f3:08:56:37:50:44:03:80:
                    a7:e1:93:99:40:7c:4a:ba:b4:ed:59:b6:58:b4:04:
                    a0:07:a3:4b:e0:94:0d:3f:67:d5:f3:c2:94:63:2f:
                    58:34:78:14:44:e9:76:71:cc:4e:70:e2:f2:65:31:
                    4a:4a:21:a9:80:b5:ae:8a:d7:c4:05:1a:52:1b:a0:
                    0c:62:2e:a9:3d:9a:fe:d7:4c:f2:ba:be:f5:95:1d:
                    3b:f6:6e:ec:fc:29:bc:22:4d:ed:a6:75:5c:f8:94:
                    1b:c3:c6:cd:20:13:b9:25:19:80:3d:bd:55:77:45:
                    ae:d8:da:a4:db:e1:23:c4:fb:0a:2d:de:94:aa:5e:
                    a2:f6:7b:65:ea:0f:a2:f2:40:83:b3:91:e2:05:b8:
                    46:ee:fd:b8:83:db:79:34:52:af:bc:19:a1:87:f6:
                    40:5b:d5:c9:91:8a:37:5b:be:02:42:1d:6a:c5:38:
                    14:0b:78:59:04:9b:0b:9f:88:cc:48:05:7d:a6:d3:
                    a1:00:28:e8:0c:3a:f9:6f:9d:2c:d7:55:44:e0:32:
                    78:0f:49:c0:69:9b:b2:d3:ae:64:f8:8d:36:6c:76:
                    ea:a1:af:69:8a:c3:a4:2d:cc:96:3f:a0:b1:c4:80:
                    2c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:19:0C:0A:3E:50:5A:C0:E6:1D:E2:32:4F:58:15:2F:02:11:8C:28
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4460c29b-6af6-4d15-bee1-65deb7aba765.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.101.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         20:a2:d2:5a:ab:05:73:ba:71:c5:83:0c:6a:62:85:1d:be:c5:
         26:c0:b2:40:d7:73:fb:7b:3f:28:00:e2:5d:da:f6:4d:a4:65:
         e5:42:37:e8:48:57:bc:36:ac:49:a4:53:00:c6:df:94:fc:31:
         47:b8:fa:c3:5c:4f:c5:c3:01:99:cb:26:9b:ee:22:c7:89:33:
         63:00:85:13:34:e8:62:de:cf:c3:a5:2f:36:33:66:f3:19:b7:
         24:ca:03:71:ed:6b:e7:37:cc:e2:cd:7c:b1:1f:1c:10:fb:7c:
         ac:55:21:78:36:8b:12:a7:3a:bb:0e:16:2a:a8:f5:fc:ba:91:
         da:70:a1:af:ee:af:a6:ff:a8:cd:a5:fe:8d:8e:03:4e:e5:9c:
         4e:26:f9:a9:18:81:f3:c0:6d:f4:1e:26:ed:ac:70:d5:b0:3a:
         2f:0c:e9:ec:d3:2a:01:5f:79:8f:9f:08:fe:20:12:ce:75:e3:
         e5:57:30:9d:24:51:05:48:79:8f:f3:54:a9:33:f5:3a:05:27:
         b4:f1:a5:3b:de:dd:e0:b8:69:00:21:6a:7b:12:dc:52:3a:b9:
         21:4c:38:18:14:e6:e1:81:66:a5:a0:04:0a:dc:2b:20:a0:b6:
         76:23:9c:9b:6d:6b:df:c6:dc:9e:4a:6e:3b:e5:1e:c5:17:75:
         3a:3b:6e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:51:57 2026 by rpki-client