Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9515184d-12a2-49fb-b12f-8c4dfdddf2ad.roa
File:                     9515184d-12a2-49fb-b12f-8c4dfdddf2ad.roa (raw, json)
Hash identifier:          3VxUuCMr7eiKVXrbmRmvtTc54CVexSlXX/98KQA/RQQ=
Subject key identifier:   D7:52:F3:7B:F2:C4:E2:8F:48:C9:36:D5:9D:04:E4:2C:89:0C:B2:90
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       67390D44AD25FDDA44106CA54FF224FF59988927
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9515184d-12a2-49fb-b12f-8c4dfdddf2ad.roa
Signing time:             Tue 28 Jul 2026 00:20:12 +0000
ROA not before:           Tue 28 Jul 2026 00:20:12 +0000
ROA not after:            Mon 26 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        202.174.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:39:0d:44:ad:25:fd:da:44:10:6c:a5:4f:f2:24:ff:59:98:89:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 28 00:20:12 2026 GMT
            Not After : Oct 26 23:59:59 2026 GMT
        Subject: serialNumber=511ac2b7e1d372506784dbf2cc653d8f1b7cdc0704393474755fb596ea57ddab, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dd:0d:c0:48:4f:05:de:b6:a4:30:43:ef:2f:
                    69:c3:14:3d:7e:4d:6b:cd:95:a0:47:e4:a5:e4:73:
                    86:19:06:5b:59:a8:db:b5:8c:14:b9:f8:45:7d:b5:
                    0e:ab:27:7e:c7:32:6e:78:e4:36:18:97:cd:be:92:
                    5b:de:ef:70:c3:77:7c:51:c9:f5:e5:e5:97:0e:a2:
                    8c:0f:93:75:ec:94:cd:55:0d:72:22:98:7c:e2:d2:
                    3e:a9:f7:62:b4:0e:52:5b:7d:51:6d:1a:38:b4:92:
                    75:d8:71:37:13:4b:93:a1:59:29:83:84:4c:78:59:
                    c1:58:92:fa:2b:5e:ae:ae:20:d7:7d:01:e7:d1:b4:
                    85:80:45:b2:8b:88:13:07:66:23:bc:9e:f7:b5:ab:
                    2e:a0:6b:65:66:e5:98:10:bf:7b:a7:46:ac:1a:a0:
                    ca:7a:51:54:f7:05:58:b6:4d:e5:20:6f:50:89:b5:
                    1a:c4:9b:09:6d:e9:c6:32:82:fe:d6:b8:16:4a:c2:
                    b3:04:66:5b:69:a5:3e:8e:bc:13:36:12:07:c7:03:
                    5d:09:b5:cc:06:b5:bf:7f:1a:af:63:2d:21:f4:70:
                    6b:4f:0b:b1:63:58:b7:32:a0:3b:8e:fe:16:8d:d7:
                    d4:62:aa:76:46:f1:14:df:69:85:78:01:57:07:0c:
                    1c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:52:F3:7B:F2:C4:E2:8F:48:C9:36:D5:9D:04:E4:2C:89:0C:B2:90
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9515184d-12a2-49fb-b12f-8c4dfdddf2ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.174.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:f3:fb:0e:29:02:0c:1b:79:19:23:db:81:b1:fd:0e:68:1f:
         23:44:03:9a:ec:7b:d2:8b:cf:00:6d:ee:e6:3b:f5:3e:b2:82:
         98:1b:10:d8:32:3a:d1:8c:3d:fd:65:33:61:a8:13:fa:48:29:
         ca:60:20:63:b9:d4:d6:f9:0e:05:a7:e7:04:33:f7:62:6a:fa:
         86:3d:9a:01:c5:cf:8c:48:6c:4a:bb:1a:bb:31:86:07:ec:8b:
         84:5b:05:13:c4:77:be:2b:35:76:c1:14:2f:33:f3:92:99:a7:
         b6:bb:b1:b3:c8:3a:30:6d:30:e4:5c:e9:8e:f6:7b:ad:0a:cc:
         f1:ac:ed:2a:5b:02:90:34:e5:52:a9:ff:88:8a:ec:0d:d4:e3:
         85:20:01:37:ab:5c:eb:f7:89:91:81:53:25:f0:c7:d9:18:bc:
         7f:fa:98:03:f5:fe:12:c8:be:dd:4d:34:7c:54:6c:e1:9d:18:
         3f:17:ba:e9:d6:1f:8c:9c:34:29:65:b4:ec:0b:26:d4:45:93:
         7f:1f:7c:9a:81:c0:8a:d7:50:fa:fe:49:b5:e8:44:27:a8:0a:
         36:c0:aa:c5:8b:5b:86:db:ec:7a:0b:41:f4:92:8d:0e:3a:7b:
         57:0d:3f:e0:7f:6d:11:a8:0d:8e:3a:99:d5:74:78:ae:c1:bc:
         7a:65:9a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:51:04 2026 by rpki-client