Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89211abe-9240-4efc-92fe-7c47fa40d9b8.roa
File:                     89211abe-9240-4efc-92fe-7c47fa40d9b8.roa (raw, json)
Hash identifier:          2tqDV9ngHdD26ew0xzPCjoDk/rnah6/TEczS00dGKck=
Subject key identifier:   F5:D4:F3:1F:97:7C:5F:A2:CF:B1:21:F0:35:EB:D2:B8:D8:12:57:B5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7EE8F9248483C0740E17186D7DB5195992C316A9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89211abe-9240-4efc-92fe-7c47fa40d9b8.roa
Signing time:             Wed 20 May 2026 00:20:44 +0000
ROA not before:           Wed 20 May 2026 00:20:44 +0000
ROA not after:            Tue 18 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        202.174.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e8:f9:24:84:83:c0:74:0e:17:18:6d:7d:b5:19:59:92:c3:16:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 20 00:20:44 2026 GMT
            Not After : Aug 18 23:59:59 2026 GMT
        Subject: serialNumber=b54e1efcdcf567e74224f5110d34a78d7ba54b8f8ae5ff74ccacd0a6cd68d688, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c3:5b:a0:4a:f4:94:ba:54:79:b3:f7:fa:e9:
                    f4:c6:f8:e0:f7:3d:3a:1c:27:e1:0a:f1:fc:56:26:
                    c4:f2:a8:f7:5d:1c:c5:2b:37:52:06:1a:5f:8e:0e:
                    20:6d:63:aa:60:d0:61:04:1a:d7:e2:c8:30:89:e6:
                    74:ea:15:6f:89:12:bb:bc:89:53:61:cf:36:6b:6b:
                    56:f1:78:d8:08:a7:80:ed:1c:d9:49:ea:db:ca:52:
                    0c:5e:c8:84:dc:3c:5e:d7:13:9f:be:c3:f5:f9:d7:
                    47:05:d2:66:f5:46:f1:ae:95:b3:0d:b3:eb:40:3f:
                    66:e9:7d:0c:b6:1a:ae:04:d6:54:e6:e6:18:af:36:
                    0f:12:7e:91:31:b9:21:ab:7f:75:36:50:67:33:89:
                    3b:77:9e:5b:a8:00:ed:da:6e:e4:de:39:cc:9d:93:
                    24:d7:7a:69:4d:46:ec:4d:b8:10:f8:b0:b8:e4:c9:
                    bb:52:35:68:c4:f1:c6:8a:c8:e5:93:f2:fc:cd:3e:
                    ca:77:f1:3a:77:45:de:51:ef:d8:d0:30:9d:2a:84:
                    ec:a2:32:a0:41:09:c6:ad:c4:45:a7:d8:98:d9:d9:
                    5e:64:22:7f:c3:cd:ca:aa:21:ac:2f:65:c9:26:37:
                    98:a2:4b:4e:8b:72:cf:c9:dc:bb:a0:37:d0:5b:4b:
                    0b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D4:F3:1F:97:7C:5F:A2:CF:B1:21:F0:35:EB:D2:B8:D8:12:57:B5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89211abe-9240-4efc-92fe-7c47fa40d9b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.174.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:eb:01:40:c1:1c:50:69:01:b5:ee:e5:10:f2:10:a3:ad:9c:
         17:09:7b:95:a6:7f:85:ba:68:4a:f2:c9:16:c7:7a:9b:9e:89:
         f8:60:eb:cc:30:4c:4a:d2:ca:ed:e1:f0:5e:d8:cf:c1:24:0e:
         12:b0:15:3c:ac:0a:17:18:41:51:3d:bf:25:ba:b5:06:55:a3:
         60:81:c4:6a:0e:38:9b:c0:1d:6c:94:66:df:57:e8:aa:a7:6c:
         88:eb:2d:a9:1c:9e:c3:9e:84:09:94:fa:ac:65:ea:b6:d6:b2:
         7b:e0:a7:a1:b7:20:20:eb:53:d0:2c:85:94:5d:5d:00:a9:f2:
         81:1d:a3:7f:80:26:bb:5e:26:4d:c9:7d:9e:ab:e6:bb:76:d1:
         5d:34:27:9a:e8:2a:8a:53:01:17:a8:85:82:ef:3c:15:7c:d5:
         a7:6b:1a:7f:ab:4d:f7:63:48:b1:6d:40:cf:65:48:03:fe:ac:
         16:eb:81:fb:02:d8:ba:64:f4:5b:87:1f:34:18:8e:27:74:97:
         7c:60:58:c2:31:ba:9b:a7:ee:4f:71:2a:c0:33:99:99:a9:c4:
         cd:55:59:7a:20:5a:35:29:5a:d4:c1:f9:c2:05:5e:bb:24:b2:
         4d:4e:9d:74:b2:8a:73:b8:1c:57:4e:98:9b:54:4d:30:e2:a6:
         ee:31:52:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:09:15 2026 by rpki-client