Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6eff0ad6-4f5e-4853-baa9-a5c08ed33bd9.roa
File:                     6eff0ad6-4f5e-4853-baa9-a5c08ed33bd9.roa (raw, json)
Hash identifier:          SiMK1T/6Kx9MJbRPzbfD19EKwkyEwYnbJACSLUS8Z/4=
Subject key identifier:   88:5C:A9:90:5E:D7:9A:39:3D:72:06:40:E2:EC:6A:3B:AE:19:78:11
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       64BE8A7A22F3F5AE08A66131CF681A25A4B848F1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6eff0ad6-4f5e-4853-baa9-a5c08ed33bd9.roa
Signing time:             Sun 17 May 2026 00:40:07 +0000
ROA not before:           Sun 17 May 2026 00:40:07 +0000
ROA not after:            Sat 15 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        63.32.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:be:8a:7a:22:f3:f5:ae:08:a6:61:31:cf:68:1a:25:a4:b8:48:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 17 00:40:07 2026 GMT
            Not After : Aug 15 23:59:59 2026 GMT
        Subject: serialNumber=b39356c3148389599a0153474322f7773344ff3788b851853aa0245ee1149aa0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ed:45:db:ac:c0:74:db:8a:d2:f9:fa:6e:98:
                    5a:b1:a3:92:c2:67:df:4d:46:65:ee:06:28:cc:97:
                    2a:92:65:42:cf:6b:c2:a3:01:52:a4:f0:01:bf:07:
                    91:ab:40:61:70:94:27:e1:8f:00:99:31:3a:42:c4:
                    44:79:1f:37:24:24:cb:71:64:cd:f0:73:56:07:58:
                    8e:24:f2:09:a1:10:b0:be:0b:2e:13:c2:6c:a6:7f:
                    d3:4a:a7:92:d4:c1:1e:ab:53:91:8b:3e:25:98:d7:
                    56:f7:3d:c4:ee:cb:95:b4:0a:6b:f2:49:81:72:03:
                    e1:85:e9:7b:3b:0d:af:dd:98:6c:5a:c5:93:55:a2:
                    3b:5f:b2:54:e5:95:44:2c:ca:c0:f8:b0:42:5b:3c:
                    61:5e:c5:94:44:ff:db:e7:a3:95:90:44:a4:ac:43:
                    92:fa:ab:0b:17:de:cb:e0:18:31:74:09:cc:13:40:
                    44:ce:41:90:f7:68:31:1b:87:1c:5f:11:07:3b:ad:
                    01:ef:1b:c3:1f:e1:ad:56:72:24:42:fd:84:49:b5:
                    64:23:9b:03:0e:9f:3a:f2:7c:b7:bc:49:1d:fb:27:
                    7d:3e:a1:0e:de:84:96:e6:cf:66:9e:5a:dc:b1:a2:
                    29:fc:3a:e0:a4:a7:28:92:23:16:4d:e9:1f:58:fd:
                    5d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5C:A9:90:5E:D7:9A:39:3D:72:06:40:E2:EC:6A:3B:AE:19:78:11
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6eff0ad6-4f5e-4853-baa9-a5c08ed33bd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.32.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         ce:a1:53:f2:e7:6f:30:a4:2b:20:13:17:9c:59:5a:f1:8a:07:
         1f:d2:6d:ea:65:c1:d4:b0:ae:8e:da:10:e7:11:17:25:cc:4c:
         a3:53:ba:4d:5f:b6:7f:9a:f3:6c:da:59:47:3c:32:65:91:7c:
         59:dc:b7:8d:7c:d8:6d:3c:f8:09:d0:16:fc:5d:81:3e:de:b2:
         7c:5e:5a:e9:52:f7:52:62:31:da:ac:76:76:da:55:fd:04:fd:
         34:f9:97:e2:27:59:68:a2:bb:4f:62:1b:70:66:c4:bb:60:b1:
         16:9c:1d:65:64:74:07:b8:e9:fa:57:38:3f:43:af:88:19:ec:
         9d:ce:b9:ac:9a:1e:f7:fa:6e:2f:f0:c1:57:c3:d3:9a:46:f8:
         0e:25:b8:63:80:64:b9:49:98:cb:b3:3a:16:45:60:2a:22:0f:
         40:09:72:9a:62:54:7e:ef:0c:63:22:49:ff:92:d7:e5:66:7c:
         7a:18:af:c4:aa:fd:9b:5a:0a:23:20:0e:e5:90:77:66:5a:4e:
         04:af:33:a1:c0:73:8b:ec:be:bc:bd:93:75:13:10:6c:96:a6:
         91:aa:40:51:ed:6f:8c:30:6a:f7:92:f0:2a:15:44:92:38:12:
         c3:d2:c5:10:47:c9:ab:2b:d3:26:db:1c:5c:e3:ce:49:9e:bd:
         67:f8:0c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:54:25 2026 by rpki-client