Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0771010-91d2-4b1c-aa8a-ae0cfc86e21f.roa
File:                     a0771010-91d2-4b1c-aa8a-ae0cfc86e21f.roa (raw, json)
Hash identifier:          0rNG+MlcuwDadrZWykGomUjC3XJeoJ5Mp0TnqEAjJYI=
Subject key identifier:   DD:4D:DE:B7:FF:C2:FC:46:D9:AA:F5:49:03:01:47:AC:28:DA:57:6B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3CB5D1079EA7EAB8E985B55F2CDA2DF6F08F43C9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0771010-91d2-4b1c-aa8a-ae0cfc86e21f.roa
Signing time:             Sat 16 May 2026 01:40:06 +0000
ROA not before:           Sat 16 May 2026 01:40:06 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        210.56.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b5:d1:07:9e:a7:ea:b8:e9:85:b5:5f:2c:da:2d:f6:f0:8f:43:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 01:40:06 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=0247cf00c52f1c96c58d1cba63fe3af198a2c705e63072e0ecea649f3b4c4f29, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8a:f7:30:a8:e4:7b:a4:e2:d2:b8:8d:81:d6:
                    37:82:54:f5:ba:a0:e2:8c:a8:7a:7c:f2:5e:29:0a:
                    a2:51:67:f6:ec:c2:a0:3c:b0:93:0c:7b:63:c4:55:
                    f3:6b:e3:40:ec:3a:c8:3f:0a:02:af:b0:72:e8:87:
                    cc:e1:9d:65:7c:be:94:38:fc:76:2d:c5:0b:01:1e:
                    0a:dd:c5:3b:13:97:39:a0:4c:0f:08:84:25:f4:24:
                    bf:0a:af:2a:bd:89:24:7c:c3:eb:62:f7:07:29:3f:
                    39:20:c9:06:27:20:2b:65:bf:3d:e3:ad:13:d5:ef:
                    5a:a2:13:6e:3f:e9:ec:47:df:31:fe:5b:8f:58:d4:
                    52:99:ba:46:09:8c:e4:0e:19:b3:bc:ca:1f:56:f8:
                    50:7e:94:0a:2f:c0:98:2f:bb:59:e6:76:87:20:aa:
                    9f:a0:ab:c1:ee:ed:8f:bd:36:c6:02:c5:a8:03:2a:
                    86:b4:8e:3a:0b:d2:99:92:68:35:27:16:b4:3f:80:
                    b7:74:b5:81:61:53:a2:d1:25:ec:57:3a:7c:2d:d4:
                    14:4a:19:be:f4:64:14:b2:6d:4b:4a:80:2c:10:d9:
                    61:95:d2:2a:30:25:a3:e1:44:40:62:ae:88:78:8b:
                    5f:6e:7e:bb:ce:1d:37:76:06:bc:77:67:91:cd:e7:
                    62:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4D:DE:B7:FF:C2:FC:46:D9:AA:F5:49:03:01:47:AC:28:DA:57:6B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0771010-91d2-4b1c-aa8a-ae0cfc86e21f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.56.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:eb:f1:49:f2:c7:3a:e2:c8:aa:ca:63:ad:75:d6:7b:5d:80:
         76:a2:f6:78:63:c8:2e:a7:8b:ca:74:38:e4:a1:5d:c3:39:4e:
         0f:52:e6:ce:12:25:a9:e8:98:92:ef:8f:d4:43:e2:23:a6:22:
         56:a9:a5:ac:b2:1f:93:4a:b9:b6:f7:e7:88:9d:79:8c:e0:99:
         c7:cc:9c:20:ca:e2:52:40:40:31:f6:7e:23:76:8e:38:8b:cf:
         7c:a6:c8:77:89:a5:78:5f:4a:dd:42:5f:63:95:2d:9e:6f:f3:
         a3:ec:54:66:f1:8c:80:ee:a1:de:aa:d9:19:2f:50:92:ce:af:
         e5:f2:4d:32:01:28:ad:d5:24:3c:74:bd:ea:0e:c7:37:90:3a:
         26:5a:c5:1a:83:d9:05:50:94:30:4a:b0:28:1f:47:44:c0:65:
         2b:3c:d9:cb:bf:ca:91:87:54:3d:c1:29:10:ae:6a:44:64:42:
         49:ce:86:18:86:bf:28:a1:7b:dd:0e:44:7d:05:60:43:aa:04:
         82:a7:ee:7d:29:83:95:a3:b8:03:ee:e5:9f:1a:42:37:84:9a:
         91:0e:5b:15:97:d0:cd:10:12:4d:03:a4:76:55:c1:cc:70:11:
         9e:82:86:ca:17:c9:41:94:3b:80:19:aa:33:42:1a:1e:ee:3a:
         7b:d3:4b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:15:54 2026 by rpki-client