Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c37772e-ef8a-4dc2-9dcb-94f90c7e760a.roa
File:                     6c37772e-ef8a-4dc2-9dcb-94f90c7e760a.roa (raw, json)
Hash identifier:          Pta48NGauzf3kP5hrAgpwRLZrkYUaQz5EJLvYlww9+w=
Subject key identifier:   E8:AF:7D:56:AC:8C:49:58:7E:1B:06:A9:82:ED:4D:21:C7:E7:FE:D1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       352EFC6126C9031DF53875399BD1BD118DD06B83
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c37772e-ef8a-4dc2-9dcb-94f90c7e760a.roa
Signing time:             Tue 14 Apr 2026 20:51:40 +0000
ROA not before:           Tue 14 Apr 2026 20:51:40 +0000
ROA not after:            Mon 13 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        1.179.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2e:fc:61:26:c9:03:1d:f5:38:75:39:9b:d1:bd:11:8d:d0:6b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 14 20:51:40 2026 GMT
            Not After : Jul 13 23:59:59 2026 GMT
        Subject: serialNumber=baf76d8cf9f665d87390084de2005ed0d3916bab4e6193fe40276c6a2e73117d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7c:67:55:56:88:89:c4:a7:e9:99:9b:14:17:
                    f8:9b:17:bf:59:b8:b2:9e:69:13:43:0d:55:48:92:
                    eb:c2:1d:c5:60:cd:6b:2a:6b:a0:25:5b:d9:86:56:
                    e4:f3:14:e7:64:7e:c6:7f:5d:e9:fa:1f:fb:bf:e4:
                    8d:a8:ae:32:08:7a:b0:0e:e7:a8:48:f2:c7:20:ae:
                    7e:aa:04:e4:4c:89:c4:4d:f5:4a:b8:f4:cb:4e:05:
                    8f:3c:b3:07:97:d3:09:c5:9b:7e:d6:f7:43:ce:cd:
                    2d:61:10:65:5a:6d:18:dc:1e:58:53:33:f6:c8:21:
                    d0:14:e1:ea:38:f4:39:13:83:c5:9c:db:7a:49:11:
                    48:56:87:c2:f3:04:c5:25:3a:46:15:4b:14:9b:be:
                    6f:c7:5a:d9:e0:e2:d1:21:6a:a7:cc:35:37:7d:b2:
                    8a:1a:24:0b:65:da:63:51:24:c9:6e:3e:e4:07:30:
                    cf:78:e2:0f:06:c0:05:50:bf:2b:6a:3e:bf:22:28:
                    b2:53:f6:f4:49:50:b0:17:cd:28:b7:e2:3b:0b:7b:
                    3a:80:93:e4:bd:c3:75:8b:7d:37:eb:7c:28:25:24:
                    ee:ec:44:e0:a8:90:44:f5:e5:af:21:07:6b:05:79:
                    ca:75:4b:bb:81:45:64:f9:08:5a:8a:a0:59:bf:cd:
                    3e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AF:7D:56:AC:8C:49:58:7E:1B:06:A9:82:ED:4D:21:C7:E7:FE:D1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c37772e-ef8a-4dc2-9dcb-94f90c7e760a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.179.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:32:9e:df:e1:30:e0:55:d6:94:d1:b7:7e:4a:8b:3b:f9:02:
         9a:77:7d:59:cb:c5:55:2c:eb:3a:16:ad:cb:47:72:37:f8:dc:
         58:aa:7b:3f:22:4b:e6:ca:b6:fa:44:14:e4:34:0c:e4:58:21:
         88:45:4f:05:33:e8:4a:de:cd:b7:ca:23:61:eb:33:da:eb:7a:
         21:22:62:27:77:3f:aa:ec:a8:c4:18:bb:32:12:fd:f7:1d:8e:
         83:f9:d2:bd:be:84:46:15:b0:b6:f0:0b:67:cc:c7:3f:29:41:
         17:d8:c0:f0:ba:f5:42:83:45:66:5d:6f:0e:f4:2a:77:76:8f:
         c3:3f:66:f7:9f:9f:fb:93:96:d9:aa:cf:d8:d4:14:c8:81:6b:
         23:3d:3e:3c:1c:ec:7a:3e:29:b7:7d:ab:a8:59:de:f2:e2:dc:
         f5:48:93:44:f8:07:e0:8a:79:62:dc:65:13:36:bb:2c:6a:aa:
         08:ff:38:25:1f:01:f1:36:b6:4b:dc:c1:2e:8d:c4:d5:be:f6:
         fe:d0:f2:c5:ea:28:18:5f:f0:3a:64:d8:66:9b:9b:56:f1:16:
         28:ab:a8:38:3f:86:f8:88:cd:5b:1f:ff:78:06:bc:30:59:c8:
         77:c7:c4:92:a4:0d:fc:3b:f2:10:5d:a0:8a:dd:ed:52:87:cd:
         ce:5c:75:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:33:40 2026 by rpki-client