Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/942b7589-0ee2-4f4b-b8b4-f938452b1983.roa
File:                     942b7589-0ee2-4f4b-b8b4-f938452b1983.roa (raw, json)
Hash identifier:          +tejb/aeUDVphd8pSdSggkiebzeTtidsKe3d/eRYreY=
Subject key identifier:   61:A3:BA:13:96:B1:C0:DE:35:A5:07:5D:60:16:1C:50:7B:F5:E0:E7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       79C3024AEAE12CBF0ED14E52C0EA84901724C5F5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/942b7589-0ee2-4f4b-b8b4-f938452b1983.roa
Signing time:             Fri 15 May 2026 02:20:58 +0000
ROA not before:           Fri 15 May 2026 02:20:58 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        108.136.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c3:02:4a:ea:e1:2c:bf:0e:d1:4e:52:c0:ea:84:90:17:24:c5:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 02:20:58 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=2859910b09a37561eb64f3ccc0ba51a87ab80171e48eb20a166422b565e4278d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:71:70:9c:24:79:be:75:01:9c:39:8e:97:e5:
                    20:fb:07:75:31:32:eb:42:ae:9e:c4:75:4f:b5:dc:
                    f5:49:c2:b1:67:06:48:e2:97:d0:cf:4f:32:61:9a:
                    c0:ce:76:1b:6f:bd:01:84:fd:19:3c:10:c2:33:59:
                    74:b4:bc:c4:70:06:ba:c9:e8:88:3a:98:0a:36:21:
                    58:0d:55:9f:28:03:0f:47:3b:1e:a0:f8:2a:7e:1f:
                    ef:4f:bf:67:8b:82:fe:7a:bb:c4:fa:1b:5d:de:4c:
                    eb:ff:5f:a1:4b:9d:1f:3b:a6:06:ea:ba:ca:d9:91:
                    77:36:37:4a:f2:ab:42:3f:ae:2e:b2:92:4a:76:67:
                    d3:f9:2c:0e:01:19:57:48:f7:f2:c5:1c:9b:d5:2f:
                    c8:bd:51:a5:d8:b7:10:28:b5:a5:12:9a:ab:11:1a:
                    57:3f:64:fd:90:a6:da:4a:e7:33:ae:38:74:85:ac:
                    b4:e0:a7:72:00:25:ea:48:ee:ee:63:33:0e:ce:85:
                    f6:18:69:f0:c6:ec:f5:00:ba:7f:b8:fa:08:51:5e:
                    b6:08:1a:12:19:26:c5:95:c4:e2:4d:f6:fb:4c:44:
                    85:43:c9:cc:38:30:68:48:60:13:0b:61:ab:86:44:
                    9b:80:70:93:99:53:dd:30:36:87:c5:22:38:b8:dd:
                    a8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A3:BA:13:96:B1:C0:DE:35:A5:07:5D:60:16:1C:50:7B:F5:E0:E7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/942b7589-0ee2-4f4b-b8b4-f938452b1983.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.136.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3c:8a:77:93:fb:c1:17:7e:32:f9:9e:1e:66:f6:c1:9f:13:72:
         db:31:9e:1e:4f:c4:48:ac:e1:07:b9:ee:1d:d9:d6:92:24:8b:
         3e:e4:cb:04:bd:3b:b4:4c:28:a0:8e:3d:89:33:1b:4c:7d:99:
         36:88:02:50:d8:03:33:2d:11:20:ce:04:f3:8d:ca:33:85:b2:
         1f:db:c3:a7:b2:64:e2:ec:bb:ec:52:0e:9a:df:e9:4b:f4:08:
         da:6e:89:fd:cb:e4:f4:96:3f:d0:66:d6:9b:d3:c6:5c:70:4b:
         50:e3:45:c8:22:be:7f:10:9c:f8:c3:32:98:10:e0:10:f5:19:
         24:c9:bb:e5:b9:77:39:15:85:a7:f6:8e:e1:81:52:91:7e:e7:
         d8:50:57:fb:e2:f0:f5:9d:92:d6:05:6b:cb:2e:44:29:dc:e3:
         7a:d6:38:81:d1:c0:ac:bc:b3:18:49:fb:71:75:ba:23:3e:44:
         62:43:eb:83:6f:ef:52:c6:02:49:5f:4c:f6:10:77:ce:48:70:
         55:98:75:fc:1d:d3:bf:81:ef:e7:e4:f1:76:30:bd:1e:38:77:
         5d:49:b4:dd:18:ee:b6:5f:60:08:53:1d:2c:63:98:d1:e1:93:
         3c:20:48:18:6a:db:67:ee:97:da:e1:c5:17:20:94:89:12:32:
         c2:5b:16:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:50 2026 by rpki-client