Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d54ad74-2704-45d9-8ca4-b1cec7b03f75.roa
File:                     4d54ad74-2704-45d9-8ca4-b1cec7b03f75.roa (raw, json)
Hash identifier:          QSRuZPw0K4qad1OlmggcCUO4tm2hVGr4skZQSLdsncQ=
Subject key identifier:   72:21:14:EC:E7:B9:94:F1:3B:FE:48:57:8B:10:4D:5A:C8:0C:52:F3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5FC161AF78834626AB838AD2AA20B76882232EDC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d54ad74-2704-45d9-8ca4-b1cec7b03f75.roa
Signing time:             Mon 27 Jul 2026 00:32:05 +0000
ROA not before:           Mon 27 Jul 2026 00:32:05 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        78.12.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c1:61:af:78:83:46:26:ab:83:8a:d2:aa:20:b7:68:82:23:2e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 27 00:32:05 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=0649a6ba5d683c0ac5c5c3572b69cd0891a276c85af75e40b97bbdc418b47690, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:39:6d:c4:9b:4e:a8:df:a5:a3:e0:82:65:76:
                    f8:e5:93:96:69:14:4e:17:29:00:63:15:8d:0e:38:
                    a0:e5:e2:04:35:e2:ea:37:15:c7:4c:41:3a:05:9b:
                    d3:a7:40:ed:5c:90:fe:7a:cd:42:56:1b:c8:da:26:
                    1e:9e:97:23:2c:96:3b:b4:79:2a:45:d7:d5:4c:ba:
                    69:19:9a:fe:51:ca:6e:e9:ac:a1:d3:a1:cd:3c:ad:
                    7e:62:83:bc:81:5f:2e:ce:01:10:d7:9b:e2:a1:15:
                    e3:37:39:eb:76:3d:88:a3:87:86:04:4f:d0:a7:ba:
                    c6:69:77:83:17:71:37:b4:21:e1:9d:da:00:16:4d:
                    83:ef:d2:3b:c1:44:b8:f1:f3:db:9e:98:3c:6d:52:
                    20:80:d1:03:d0:c4:53:2a:67:59:ea:cf:83:cb:6f:
                    62:3e:9a:50:33:62:1d:97:2e:2a:5b:06:2b:33:75:
                    a3:9b:e3:bd:5c:63:e0:85:bd:87:27:8e:6c:fb:a8:
                    93:36:32:3c:5f:52:bf:fb:0b:3b:08:a2:3f:4f:19:
                    6c:2b:56:eb:2e:90:ac:2e:f5:ce:8d:d0:19:07:2b:
                    88:7d:1b:a4:11:e4:5d:5a:d2:89:92:08:d4:ed:98:
                    a9:84:f1:93:57:66:2b:6f:13:86:ef:4d:81:12:d6:
                    38:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:21:14:EC:E7:B9:94:F1:3B:FE:48:57:8B:10:4D:5A:C8:0C:52:F3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d54ad74-2704-45d9-8ca4-b1cec7b03f75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.12.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:19:d6:e1:22:84:0e:61:8d:dc:43:7b:03:ea:de:82:df:6e:
         54:0a:e8:a6:26:b6:dc:52:62:3a:08:07:28:a5:8b:eb:23:3c:
         c6:cc:fd:0b:e2:61:41:a0:d5:b8:f1:8d:78:df:eb:32:f1:62:
         dd:10:85:c2:18:8e:16:b5:8a:a5:6e:5d:dc:76:8e:37:1b:22:
         ca:db:32:7d:a5:c8:02:af:20:6e:fd:1c:b3:5c:4f:9d:13:53:
         d6:87:d7:02:ff:cf:27:78:a4:05:15:46:a5:13:7c:c5:32:4b:
         9a:14:25:a8:f4:c0:2d:3d:ca:97:47:69:38:c4:39:12:5e:31:
         d3:93:2e:1e:1a:ed:1f:d9:47:b8:48:bd:2b:34:77:de:e5:95:
         d0:e5:fa:3c:2b:f5:dd:2e:31:a4:9e:cc:4d:8f:96:15:af:b5:
         06:a9:f1:e0:10:12:3a:42:27:ea:98:62:37:ce:49:70:b4:f5:
         d4:1a:1e:ad:4e:5d:08:92:14:9c:ef:36:79:6b:1a:a2:26:77:
         47:90:8b:9e:87:32:9f:c3:80:30:76:da:2a:bb:02:3f:ec:f6:
         ad:64:f5:1a:54:1c:6d:ec:16:81:2f:3a:0d:7b:43:6c:8b:05:
         25:6e:42:6a:24:0f:d4:2e:c5:25:40:67:c7:0c:4a:67:bc:15:
         eb:1c:ee:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:50:58 2026 by rpki-client