Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87aae395-beb6-4158-898d-1b8343392bd1.roa
File:                     87aae395-beb6-4158-898d-1b8343392bd1.roa (raw, json)
Hash identifier:          5lIZq1kYa6FRxlEWwmiex0hy3IjtpC5S3xhAX5Q1N1g=
Subject key identifier:   03:39:9D:FA:4F:AE:FF:BE:F0:1B:A1:56:FE:0D:B2:DC:D8:46:E1:F6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       44380282CC3705B1B6B392E6B3C2DA8F07B84C5D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87aae395-beb6-4158-898d-1b8343392bd1.roa
Signing time:             Fri 15 May 2026 02:21:29 +0000
ROA not before:           Fri 15 May 2026 02:21:29 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        107.22.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:38:02:82:cc:37:05:b1:b6:b3:92:e6:b3:c2:da:8f:07:b8:4c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 02:21:29 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=79ccf9e2a2aa02366f52b609c6004434fa6308da8f14eefe4f5d7417b98c561d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ff:7a:8a:dd:f0:b5:fd:cf:ca:e8:2d:0a:b9:
                    a1:f3:dc:d3:8a:18:b7:dc:ae:27:67:41:85:66:05:
                    6c:5c:49:0d:2c:8b:10:fa:b9:ca:cd:66:68:da:e7:
                    ae:37:ab:c4:1e:ad:b0:a8:52:a5:8d:d1:16:9a:6a:
                    a9:d7:c2:b1:e4:7f:be:23:b1:9b:72:f1:b0:74:b5:
                    71:79:71:a9:7a:7a:20:40:92:35:7f:ae:af:c6:fc:
                    b4:db:e3:68:07:cc:e6:6a:4a:28:87:7e:fb:71:28:
                    05:c9:f9:88:1d:c8:4b:95:58:c9:ff:1a:70:62:79:
                    db:25:4d:e8:a4:ee:40:b8:a6:10:ab:1e:05:5e:91:
                    ae:56:94:5e:17:c6:5a:46:00:7b:fd:a0:e8:0f:87:
                    b6:d7:7c:17:dd:45:07:2b:da:4d:c9:60:07:8c:ca:
                    7c:8a:43:9e:94:c8:bf:ce:9a:36:47:0d:19:fb:01:
                    ac:58:c2:0c:cf:8a:00:0d:dc:aa:47:0e:3f:8c:7f:
                    c3:67:0e:c5:b3:35:39:b2:71:af:03:df:2d:83:8b:
                    66:c4:a5:1a:b0:70:70:c5:31:9e:68:50:58:62:fd:
                    4c:a0:4d:d8:b0:6c:06:f5:f5:0f:cd:22:77:bb:ef:
                    2d:fd:dd:80:31:23:fc:bc:78:35:b2:43:4e:03:2c:
                    18:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:39:9D:FA:4F:AE:FF:BE:F0:1B:A1:56:FE:0D:B2:DC:D8:46:E1:F6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87aae395-beb6-4158-898d-1b8343392bd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.22.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8d:3a:7b:47:ea:57:f9:b8:cf:8c:f0:b6:de:bb:05:73:c2:82:
         3c:ca:35:c0:4f:42:e5:5d:6e:b6:3a:39:84:fa:11:63:25:03:
         f7:4d:95:e3:ca:52:51:fe:09:cd:ad:0e:71:71:1f:f7:22:29:
         ac:c2:91:30:32:0c:ab:4c:43:de:d2:8d:49:17:d0:54:7c:f9:
         6f:45:3f:e5:c2:ce:8e:6b:c9:7f:8a:43:65:4c:e4:fd:18:eb:
         db:4e:07:df:9b:79:71:43:81:f2:fb:cd:48:34:ad:d7:88:85:
         4d:22:99:4e:ff:ed:70:7c:59:27:f6:4f:b3:a8:95:10:f9:e6:
         d3:c8:47:a8:72:8a:8a:9d:50:26:ae:8c:a2:e6:bc:f2:47:f1:
         a8:2e:af:d1:19:62:28:fa:c5:84:43:77:de:04:14:3a:35:d4:
         bb:2f:af:50:7b:ac:9d:7f:a9:ef:ef:48:58:8a:5f:17:bd:ea:
         26:c8:aa:1c:86:94:dd:85:83:0e:10:2d:f4:df:24:5e:80:6f:
         c5:83:97:24:09:d1:d9:76:2a:d1:7c:ba:1b:0b:ac:7b:7b:0c:
         46:60:96:1b:e1:74:64:c1:6e:69:c0:4f:20:b9:43:a6:a0:b9:
         8c:40:c0:65:b0:e2:cc:e3:fb:5b:c0:4d:c8:8e:55:48:50:ac:
         72:d7:48:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:31:16 2026 by rpki-client