Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83c934e0-e04c-4a64-94a4-cd0e5a2b3c90.roa
File:                     83c934e0-e04c-4a64-94a4-cd0e5a2b3c90.roa (raw, json)
Hash identifier:          RPjsurRyWlvlRW6/+68XiRDOTskB3xqcPZbxFYSTCaU=
Subject key identifier:   76:AE:F2:8D:E3:FF:87:FE:DC:7C:13:30:81:73:2A:0D:72:8F:24:99
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       55A6CA2D6FA5EA8F65B7B5A4F0F1D4446CA8CE7D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83c934e0-e04c-4a64-94a4-cd0e5a2b3c90.roa
Signing time:             Sun 17 May 2026 00:30:11 +0000
ROA not before:           Sun 17 May 2026 00:30:11 +0000
ROA not after:            Sat 15 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        75.101.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a6:ca:2d:6f:a5:ea:8f:65:b7:b5:a4:f0:f1:d4:44:6c:a8:ce:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 17 00:30:11 2026 GMT
            Not After : Aug 15 23:59:59 2026 GMT
        Subject: serialNumber=0c1b813d29e3732b94a4f5ddcc64ca352dbb321be5fd9b01d9517a698d508825, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:57:eb:dc:cc:cd:bf:3d:3c:2e:c0:a7:c3:6d:
                    81:68:0e:b5:83:df:c0:11:9d:0b:17:ca:7f:26:2f:
                    71:d7:b2:8a:4a:a5:bb:e7:6f:1e:b7:4e:ae:4f:f6:
                    a7:cc:bb:bb:c3:62:44:d8:ed:46:d9:1e:fa:0b:9f:
                    9d:6b:c4:88:96:cf:50:9b:9f:11:c6:b7:0e:1b:9c:
                    0e:a8:b2:5d:9c:47:a5:3f:cf:da:f3:b2:83:ab:3d:
                    7c:b8:9b:dc:1e:98:dd:b6:68:91:5c:48:e1:e0:4e:
                    08:8a:23:1a:8b:ac:c8:85:66:bb:34:e6:db:c1:c3:
                    9c:7a:ab:17:b9:50:9e:2b:00:e0:ae:6c:81:ea:58:
                    bb:74:df:00:88:e5:35:9b:95:5e:8e:d8:cc:19:52:
                    4c:87:59:4f:b4:02:60:83:9e:bd:f5:b5:36:93:c0:
                    b4:46:e5:80:15:66:3d:ed:da:ad:29:5b:09:22:c8:
                    d5:0a:b0:1d:f2:df:17:1f:c3:d2:3f:d3:92:9e:ef:
                    6c:96:b8:77:38:a5:27:8b:2f:d7:55:b5:6d:94:94:
                    2d:5a:c3:27:e0:e9:62:49:06:0c:1d:fd:fd:22:02:
                    15:2a:d0:c0:52:40:c4:dd:d8:d1:33:95:2c:10:89:
                    0e:a8:c0:1f:2a:fd:4f:c1:0c:43:d6:45:a2:3b:d7:
                    2d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AE:F2:8D:E3:FF:87:FE:DC:7C:13:30:81:73:2A:0D:72:8F:24:99
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83c934e0-e04c-4a64-94a4-cd0e5a2b3c90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.101.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         58:a8:87:ab:66:8b:b2:f0:4b:e4:e4:33:d8:9b:aa:e7:65:53:
         f6:f5:37:a3:43:06:a6:be:2c:9c:ba:f4:6f:22:17:1d:e0:6b:
         aa:19:f1:f4:bc:99:6f:74:bd:ef:3f:3b:e7:37:2d:23:33:b2:
         f1:2c:c1:04:c4:19:98:da:16:4e:71:ba:d3:18:44:bf:2d:d5:
         f3:57:fc:0c:e0:20:9e:af:7c:c8:53:2c:d1:c3:6f:4b:da:78:
         5c:dc:e8:b5:96:1b:ce:55:b3:53:8d:03:c7:34:e4:eb:2f:ca:
         44:8e:a6:5e:9d:e5:1c:fe:b1:d9:7a:6f:3b:58:09:9a:30:6a:
         8c:fd:22:f8:9d:ed:de:bd:e7:ed:0c:57:c2:11:da:dd:ee:06:
         50:0a:cd:33:64:ff:22:f2:d8:28:7b:b0:d9:4c:35:9f:66:5b:
         ac:60:06:01:cd:4b:cf:02:9c:5e:69:6a:d8:c3:7c:92:e6:d0:
         7e:6f:f6:3a:9a:c9:a9:c6:6c:a8:54:c1:02:ab:b5:ff:50:86:
         7b:a7:96:44:86:43:f9:d5:4e:8d:8c:27:5a:13:9f:85:11:68:
         db:ec:bc:71:2c:98:66:1e:82:18:d9:97:bd:6a:ff:96:a8:30:
         89:af:3b:34:6a:84:49:87:2a:78:a8:98:2d:24:59:2e:77:16:
         5f:5f:e9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:04:46 2026 by rpki-client