Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5eca35e7-324e-4f41-b1cd-3aabdbe53d79.roa
File:                     5eca35e7-324e-4f41-b1cd-3aabdbe53d79.roa (raw, json)
Hash identifier:          fqziRtYECu2DI191+yOXH+he5ug+GXbHC8UoyBu4fUA=
Subject key identifier:   C2:5A:0A:0E:3F:81:84:59:B1:86:6B:B6:E2:5D:10:A4:A0:6C:F1:7B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       52ED0DE89E58192076B3AE3577EC5B45A9D5E7CA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5eca35e7-324e-4f41-b1cd-3aabdbe53d79.roa
Signing time:             Fri 17 Apr 2026 00:00:48 +0000
ROA not before:           Fri 17 Apr 2026 00:00:48 +0000
ROA not after:            Thu 16 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.151.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ed:0d:e8:9e:58:19:20:76:b3:ae:35:77:ec:5b:45:a9:d5:e7:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 17 00:00:48 2026 GMT
            Not After : Jul 16 23:59:59 2026 GMT
        Subject: serialNumber=e309168a957b3ae621cd9ed3aa2f7fa796297b73fbb784134d73f6249396a80a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4a:14:d6:1b:d1:35:55:5e:f7:0f:da:f9:17:
                    6f:b5:6a:f8:15:a3:52:6b:e4:47:ce:b6:97:05:a1:
                    ba:d1:bd:08:f1:e1:94:85:05:47:6b:af:f3:2f:84:
                    d3:20:50:40:77:f4:97:21:3a:d0:5a:85:fa:37:bf:
                    bf:c2:20:98:04:e8:54:ab:bd:09:27:b7:96:b2:a6:
                    c8:05:83:08:c9:59:ae:08:35:79:74:6b:75:fc:e6:
                    1b:01:74:e7:a9:f0:eb:cf:e6:01:28:fe:f1:80:1d:
                    ec:78:69:6c:8e:c1:5f:af:6e:fb:53:df:a2:ed:4d:
                    3d:2d:38:69:af:4d:be:27:8b:65:30:ad:64:62:37:
                    71:42:5b:df:82:d9:43:ff:b8:cf:3f:8c:77:e1:86:
                    b9:16:ba:8c:86:a2:47:52:05:52:42:a8:cd:e2:2f:
                    f7:45:9c:09:8a:c9:61:8a:a0:c8:f3:3f:7f:1d:05:
                    ad:3b:b3:37:6b:61:a2:ec:5a:c0:49:f2:e4:dd:e9:
                    c0:ab:2d:66:4f:87:3e:a2:ea:ff:cb:13:6c:bb:c9:
                    75:5f:60:9c:f7:04:d8:7a:96:0d:79:4c:d9:c1:45:
                    9c:e8:e9:78:fb:3c:d3:b8:2d:47:ca:bc:60:f4:ce:
                    fb:f2:7d:a1:8f:e6:f7:95:d3:8e:5f:4b:43:73:2e:
                    8a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5A:0A:0E:3F:81:84:59:B1:86:6B:B6:E2:5D:10:A4:A0:6C:F1:7B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5eca35e7-324e-4f41-b1cd-3aabdbe53d79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:8e:62:e6:96:6f:b3:a3:ba:ba:7e:0c:4f:6e:70:67:5b:b2:
         d5:4f:62:29:5e:af:e6:37:6c:98:66:d9:fb:30:cb:b1:9e:15:
         1b:77:33:f5:ae:07:06:2d:d8:36:c5:72:b1:5c:a0:b5:4c:e9:
         75:62:e1:d9:8b:d7:0e:87:fb:0e:ff:9d:ea:bd:90:b3:72:1f:
         3a:49:e3:10:ba:9f:31:59:a1:05:c6:89:9c:22:28:7e:24:28:
         dd:87:08:b4:c2:19:fe:54:39:6d:ad:18:27:aa:32:41:f5:e3:
         12:8a:2e:81:f8:09:44:9d:aa:11:e3:71:76:1f:e3:90:db:b0:
         e8:ae:aa:c9:72:c8:5a:6f:9b:09:e1:b8:63:43:88:91:3d:80:
         dd:08:a3:9e:e1:45:ad:28:1c:bb:1b:42:c0:f6:7a:24:07:d3:
         43:eb:a3:6e:da:7e:ed:47:32:e7:7c:93:e5:21:28:a9:99:1c:
         bd:a3:fc:b3:02:cd:f0:f4:3d:01:b2:37:b3:4e:30:2d:f5:08:
         7b:19:8a:ee:d2:91:ab:96:c7:d7:9f:d9:3f:8a:99:09:b1:91:
         24:0d:37:d7:9d:04:f9:25:f9:c8:ff:de:8c:9e:cc:d7:cf:b2:
         aa:cc:de:90:59:c8:e9:b0:92:8a:2d:f4:b7:34:9e:e4:db:dd:
         41:f2:ba:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:43:55 2026 by rpki-client