Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f801a4f-8f39-41cb-9994-794acc617667.roa
File:                     5f801a4f-8f39-41cb-9994-794acc617667.roa (raw, json)
Hash identifier:          RpURIfCl7Og7wSIKE+GXXBrB3OT5Bn8JKX4VdNkkoF4=
Subject key identifier:   7C:30:A5:21:BE:83:C2:55:E0:06:D4:1E:FA:1D:95:B4:BF:76:9C:96
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       726BD29990AC8A655530380FE80EC31D2FE73B05
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f801a4f-8f39-41cb-9994-794acc617667.roa
Signing time:             Tue 02 Jun 2026 00:00:11 +0000
ROA not before:           Tue 02 Jun 2026 00:00:11 +0000
ROA not after:            Mon 31 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        100.52.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6b:d2:99:90:ac:8a:65:55:30:38:0f:e8:0e:c3:1d:2f:e7:3b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  2 00:00:11 2026 GMT
            Not After : Aug 31 23:59:59 2026 GMT
        Subject: serialNumber=cc198eaf1c3568019a920aacc66dde8b0114615ee2cdf25ed8cbc1eeb8912246, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fb:44:dd:fb:75:06:2f:59:f5:3d:2f:4a:c1:
                    4c:4c:ed:5a:37:34:59:c4:26:00:e0:35:c0:d6:d0:
                    bd:9a:32:f0:a6:d1:68:c0:57:fd:f9:44:0d:c6:dd:
                    9e:eb:e3:43:af:10:e1:a1:9f:46:48:5d:ee:c9:52:
                    98:e0:31:e9:05:c9:a0:f6:93:51:74:ba:96:15:24:
                    4e:c7:84:6d:10:e2:82:de:23:56:df:20:79:1e:a6:
                    23:77:e8:b1:1d:cc:16:6f:a7:7b:fc:22:6e:a1:3f:
                    c9:c6:fb:1a:b9:08:5a:f4:8f:6e:12:ad:52:99:61:
                    12:58:96:b7:a4:a4:4a:1e:1a:41:3a:b6:fd:b8:57:
                    e1:fe:7c:f0:1f:4b:9b:0f:4b:a8:c5:dd:2b:d9:88:
                    e4:53:e5:f6:14:9d:72:5a:3d:14:e7:00:18:13:47:
                    b9:14:40:80:c6:d7:a9:9c:fa:bc:9a:ff:c0:43:73:
                    2c:74:63:0f:f9:e2:62:85:17:f1:71:ec:d6:40:8d:
                    7c:79:97:da:b0:1f:06:e4:9c:17:7c:0c:08:1e:bf:
                    fb:11:fb:46:a6:1c:ae:7c:5e:e7:98:78:72:32:45:
                    d0:9c:23:62:dc:a0:d4:e6:53:e9:dd:e9:50:45:33:
                    19:4b:1c:2c:fa:f0:d7:26:71:87:24:2c:e4:44:02:
                    76:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:30:A5:21:BE:83:C2:55:E0:06:D4:1E:FA:1D:95:B4:BF:76:9C:96
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f801a4f-8f39-41cb-9994-794acc617667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.52.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cf:9c:90:cf:3c:29:c6:38:5c:e3:4c:1d:34:a4:9f:fd:19:3e:
         ac:67:47:35:2b:fa:74:64:b2:fa:dd:69:1a:3d:75:09:19:8a:
         ba:68:8e:20:a4:74:c4:77:4e:b6:b2:56:ab:8d:72:8c:2c:8c:
         c6:d0:1d:4b:3e:e3:ea:c9:e0:8f:42:0e:66:5e:8e:0e:73:44:
         ff:96:21:07:6d:eb:60:2b:fa:b1:c5:47:11:dd:42:a9:fa:5e:
         21:23:3e:c7:5c:ce:e1:f7:60:e6:44:73:1b:84:d7:24:d1:07:
         21:c5:1f:fc:71:50:2c:db:d9:d2:27:45:f7:f8:f9:e3:ce:8d:
         96:61:5b:cb:4c:80:be:d5:f8:c2:f1:4d:10:2e:28:98:cf:d6:
         08:3a:a8:d8:13:94:72:ea:f4:ed:1e:4c:98:72:fd:b9:5f:b6:
         1d:ce:33:5b:34:65:1d:b0:ce:1a:7a:f6:30:25:9f:25:0f:d8:
         04:38:b8:6c:5b:a4:77:44:aa:b6:fe:51:df:c6:b3:96:4c:ed:
         7a:bb:9d:38:84:49:68:b3:be:92:2c:59:d7:f2:28:14:71:b8:
         07:cc:78:a3:96:8e:fa:73:33:46:ff:9a:11:0b:cb:05:6c:a0:
         af:76:12:39:4e:74:f6:77:aa:fa:ba:92:32:b0:c6:3e:89:f0:
         0a:60:52:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:20:49 2026 by rpki-client