Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ec3d9fb-97af-4d5a-9505-babad7d3b04b.roa
File:                     5ec3d9fb-97af-4d5a-9505-babad7d3b04b.roa (raw, json)
Hash identifier:          76gy2JRAghuNQrRYyAeYlb1lxsMIV2cusSXalzvQ4eM=
Subject key identifier:   7C:82:D6:21:39:95:41:68:AD:84:0D:ED:2C:31:57:02:D3:E3:44:4D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0CC74D5342A265A56105806D8E773B29F1EAC257
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ec3d9fb-97af-4d5a-9505-babad7d3b04b.roa
Signing time:             Fri 24 Jul 2026 00:31:02 +0000
ROA not before:           Fri 24 Jul 2026 00:31:02 +0000
ROA not after:            Thu 22 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        209.92.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c7:4d:53:42:a2:65:a5:61:05:80:6d:8e:77:3b:29:f1:ea:c2:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 24 00:31:02 2026 GMT
            Not After : Oct 22 23:59:59 2026 GMT
        Subject: serialNumber=d25da9ae414aef4900f43fc9cdb40c66025b8af02929590a3322fb36f4bd04f0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:38:24:20:a1:45:51:28:8d:11:43:f3:82:31:
                    18:71:93:a6:c6:f1:54:53:7d:b3:d4:59:7d:ed:d9:
                    89:cc:67:31:ba:19:0c:b7:e6:61:04:c6:ca:97:8f:
                    a5:ed:5b:35:7f:47:2a:da:33:9c:cd:1e:b1:2f:1e:
                    77:d6:0e:81:35:53:8c:7a:c8:f9:f7:43:dd:00:9a:
                    02:4d:4d:c6:b2:13:3e:f9:2b:e6:65:57:9c:47:2c:
                    97:03:87:fb:20:f9:7c:e8:0e:03:2e:19:2e:89:bb:
                    37:34:83:52:d5:08:39:17:eb:82:f7:ba:ef:93:c5:
                    f4:24:cf:a3:3e:06:cf:40:00:ea:08:76:a4:02:ca:
                    1a:ae:d8:da:9b:af:31:4d:fc:f6:ef:c8:ed:78:7c:
                    a1:9f:88:ce:39:f0:1b:80:79:d9:71:8c:db:58:58:
                    7c:8d:27:34:80:66:55:85:73:3b:23:fd:79:f6:9e:
                    74:b0:21:3d:f1:1b:3e:b9:d6:22:2e:70:22:14:f9:
                    94:95:02:35:11:c6:f0:8a:44:70:0e:81:e7:de:1c:
                    c4:27:97:ab:da:35:e2:e8:31:7f:1d:cd:a3:22:62:
                    da:d8:91:98:32:18:e6:8e:3d:50:7b:10:84:f0:9d:
                    dc:05:6b:4f:37:e3:2f:4a:83:c7:2c:fe:dc:ef:86:
                    42:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:82:D6:21:39:95:41:68:AD:84:0D:ED:2C:31:57:02:D3:E3:44:4D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ec3d9fb-97af-4d5a-9505-babad7d3b04b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:2e:60:73:da:1d:2b:b3:a5:81:96:7b:05:14:ca:0a:ed:0c:
         4c:6a:69:76:94:ff:d9:9b:69:ac:f5:33:ba:25:10:a9:e3:50:
         9d:b6:1d:a1:5b:9c:59:f4:ef:2a:61:48:1c:22:a8:d1:25:83:
         fd:5b:90:07:f5:11:be:f7:6a:d6:e8:ba:8a:4c:37:b2:67:03:
         65:9a:3d:09:c7:2e:10:78:cb:5e:f0:0b:1d:9b:47:4f:52:1c:
         76:34:cf:a6:c2:59:4d:63:f6:bd:38:d2:2e:c0:46:cb:67:62:
         fd:3a:3a:3a:bf:58:38:2f:dc:b9:1f:37:65:03:80:d0:4e:31:
         38:a5:85:f7:40:e2:49:3d:63:df:8f:fa:f1:6f:72:95:7e:60:
         ba:c6:ca:ae:a1:ba:e7:e6:82:86:a8:d1:0a:ef:ae:c4:be:df:
         aa:79:6c:e4:6c:ff:29:07:9a:fc:21:d8:f6:1a:ff:02:2f:44:
         c2:98:37:d3:f2:b1:4e:b2:10:62:a2:b6:80:54:29:7e:8e:d4:
         0d:1b:f3:77:91:43:2f:ae:cd:e3:f4:43:39:ac:fd:4a:e6:28:
         2a:ae:95:e0:fb:5e:25:35:2e:f5:e7:77:62:a7:7d:07:04:5e:
         4a:ef:e6:5e:cb:0b:42:ae:77:6c:00:70:ca:fd:81:41:c5:ab:
         df:a4:c9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:51:29 2026 by rpki-client