Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9dbc247d-8b36-439c-91d1-b8d7a94dd73b.roa
File:                     9dbc247d-8b36-439c-91d1-b8d7a94dd73b.roa (raw, json)
Hash identifier:          cdDI6V+P13+Vt8TmpWSZC5ycSQFwrpWiRc2mWo2Ohe8=
Subject key identifier:   12:27:59:BF:9B:2F:9F:33:6D:11:D0:3F:65:E2:B0:81:6C:5C:9D:25
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       11173BACDB40EB217856D5FED754FC2A9A7081F1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9dbc247d-8b36-439c-91d1-b8d7a94dd73b.roa
Signing time:             Tue 28 Jul 2026 00:20:09 +0000
ROA not before:           Tue 28 Jul 2026 00:20:09 +0000
ROA not after:            Mon 26 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        149.144.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:17:3b:ac:db:40:eb:21:78:56:d5:fe:d7:54:fc:2a:9a:70:81:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 28 00:20:09 2026 GMT
            Not After : Oct 26 23:59:59 2026 GMT
        Subject: serialNumber=13796dae925292261724138645713774b7f832dbc5fa5a19d80ca69cb8b7031e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8a:b3:d0:80:5d:dc:69:c9:75:b1:9e:d2:df:
                    d7:ca:4f:78:9b:c8:6f:e0:8e:b5:e4:6d:3e:95:31:
                    51:c4:70:6e:a3:af:c9:07:dc:e0:f2:5e:55:b9:44:
                    01:7f:1b:fd:84:6c:44:da:4e:ee:03:e3:0c:b2:97:
                    d0:8c:6f:2a:40:6f:79:7c:a7:b0:f8:41:1d:04:12:
                    c2:88:8d:0b:13:b4:dd:95:7d:65:e1:cf:f9:01:4c:
                    99:2e:98:30:93:17:fb:9f:9e:ed:af:91:de:19:0c:
                    8c:f4:10:01:14:af:bf:6f:b8:6f:21:66:0e:90:4c:
                    8d:42:5d:54:24:41:ea:9c:bf:09:28:bc:b7:ab:08:
                    54:f8:3f:5c:51:ae:54:88:fe:e2:eb:5d:c7:88:81:
                    86:f6:70:a4:1d:bd:ad:f9:4a:54:8e:ab:9c:7b:8c:
                    ae:1e:98:90:b5:14:0d:ef:b4:51:4a:5f:5e:26:72:
                    d2:01:6a:7a:1a:5b:d3:f9:e9:b2:2a:8f:2d:f0:44:
                    fb:6b:0c:d4:c2:01:01:4b:3a:58:82:c6:6e:5f:10:
                    a1:52:b5:fb:53:6b:3a:78:66:d2:17:1f:86:28:c0:
                    e2:e1:60:e2:48:de:c2:f3:d1:d5:86:0b:23:01:bf:
                    7a:62:a3:53:fa:00:d7:e6:aa:ec:5e:cb:fe:e9:61:
                    d2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:27:59:BF:9B:2F:9F:33:6D:11:D0:3F:65:E2:B0:81:6C:5C:9D:25
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9dbc247d-8b36-439c-91d1-b8d7a94dd73b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.144.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c2:9d:1e:b7:bb:5a:97:e2:d5:ae:43:71:dd:c0:52:f3:dc:8f:
         ed:53:5d:fe:8f:0d:41:81:9c:5d:46:0f:5b:a1:0b:71:ae:d6:
         6e:0b:41:6e:63:43:e0:0f:9e:52:3b:84:77:52:89:f3:8e:ad:
         ea:88:f2:b5:e1:26:06:a4:73:8a:ae:7e:d2:fb:0c:83:37:87:
         7a:29:88:19:33:fe:b7:55:a2:55:4d:91:de:0f:6a:1b:b0:7d:
         25:72:c1:35:d1:8f:88:28:80:65:b8:5a:03:33:f8:b9:71:b0:
         21:c1:72:2d:fb:d2:e8:95:43:7c:27:ef:3b:17:26:64:2b:a6:
         2d:43:32:18:21:b3:e2:82:dc:72:d9:eb:69:8e:a6:fb:3c:94:
         e3:ad:ba:f5:43:e8:d6:6e:16:98:cb:79:e0:52:f0:d6:2a:61:
         14:37:fc:57:ea:50:0d:ab:27:49:d2:20:79:c1:42:aa:89:0e:
         d6:dc:e5:05:7c:37:63:52:75:b5:35:b5:5b:3a:9d:8a:57:64:
         47:b8:2d:43:f4:64:84:2a:07:71:c4:ec:a7:a0:8b:ce:9e:9d:
         df:98:5f:cb:5d:27:01:af:ed:84:68:ba:ca:ba:0d:bb:59:6e:
         b5:6a:cb:25:58:cb:a0:bf:a8:d5:06:9b:7a:58:35:53:17:46:
         0d:ef:66:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:34:57 2026 by rpki-client