Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5459b61-4765-4284-9582-9c6c304ff03b.roa
File:                     a5459b61-4765-4284-9582-9c6c304ff03b.roa (raw, json)
Hash identifier:          Gs0lMnPdNC3eAIj3kbVcE9sF+43YPx5+VxASa3aK2h8=
Subject key identifier:   5C:59:58:45:3A:E7:47:C8:0E:85:1F:D9:29:E6:BE:91:A8:37:EC:9E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3B55265A968EBFF019100D3DD5C6F08CC3A109F5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5459b61-4765-4284-9582-9c6c304ff03b.roa
Signing time:             Sat 16 May 2026 00:40:39 +0000
ROA not before:           Sat 16 May 2026 00:40:39 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        5.179.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:55:26:5a:96:8e:bf:f0:19:10:0d:3d:d5:c6:f0:8c:c3:a1:09:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 00:40:39 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=4ebdbc4e8e2f2ff13a895c5faf3cfa789bb2742cd6b9b6d4fa12c085071383ea, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:15:11:bf:0e:56:f1:b6:45:da:4d:e1:23:48:
                    b1:11:ff:93:fa:2c:f8:df:6b:74:78:ac:a0:aa:2e:
                    83:64:0c:e7:55:ee:77:fb:ff:df:0a:13:47:09:92:
                    cf:1f:7a:4e:17:66:96:19:2f:5e:21:e9:02:4a:50:
                    ae:4f:3d:2e:27:f6:83:a9:ae:92:85:82:01:e9:3e:
                    4f:92:22:68:5c:33:68:96:27:d7:14:ba:c2:bf:a6:
                    de:ff:a4:a6:3b:0d:05:a5:72:68:27:ac:56:88:3b:
                    d8:d3:49:13:ae:bf:0d:32:5b:5a:07:12:11:31:a0:
                    c6:e0:4e:02:3b:9c:96:63:de:6b:67:9f:36:fe:d0:
                    44:82:de:a2:db:f7:94:a0:c5:fc:ea:18:78:1f:42:
                    f5:9c:85:49:a1:2f:fb:9c:4e:12:bb:b5:ec:57:d9:
                    46:c2:bd:66:fb:48:cd:a8:f2:1e:2f:00:1d:4e:9e:
                    29:66:32:5e:b2:31:52:72:7e:5b:f8:44:9a:b5:e4:
                    40:11:7b:fe:2b:fa:15:4a:f8:35:0e:17:95:f5:9c:
                    d1:ec:76:66:ee:62:36:6d:59:f4:ab:e0:6d:56:1e:
                    4a:c9:05:e8:5c:23:1e:86:ab:c3:6b:c8:27:b8:8a:
                    db:11:8a:93:4d:fe:08:c7:12:8c:1c:55:8e:4e:bc:
                    4a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:59:58:45:3A:E7:47:C8:0E:85:1F:D9:29:E6:BE:91:A8:37:EC:9E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5459b61-4765-4284-9582-9c6c304ff03b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.179.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6b:c2:d5:3d:17:2f:21:0e:10:cb:83:c1:6f:51:e6:22:aa:72:
         bc:89:c6:b6:f2:d8:58:9a:57:bb:4e:0b:ee:41:26:d7:57:e1:
         42:21:80:8a:80:0d:89:31:d6:1a:51:68:df:57:82:34:e9:e9:
         6f:9f:0c:c0:f7:5b:f2:a7:61:f6:ed:73:9e:08:ab:95:f6:7d:
         2c:d0:9e:ad:85:71:fd:e4:66:0f:5a:b0:fe:43:3d:bb:cb:a0:
         d7:b9:9e:c8:88:d6:79:55:9c:a1:27:ee:20:f6:0f:ae:55:aa:
         55:32:bd:43:d3:87:20:8e:fb:83:46:d7:d0:11:f5:3b:47:09:
         18:4e:6b:01:8b:1e:70:4b:eb:a4:6a:a7:69:30:12:3f:12:56:
         01:12:60:d9:09:58:78:72:ed:35:91:da:ce:d6:b4:b4:39:14:
         86:a3:a2:89:b8:97:8b:10:5a:36:7d:42:ff:c6:21:d5:95:3a:
         fd:07:41:a2:34:0f:d0:0d:dd:b0:95:2d:da:18:19:31:c9:43:
         08:b4:be:32:ea:7d:ff:7a:81:cd:34:8d:9c:7f:0a:8a:65:bc:
         74:27:60:8c:02:7b:89:87:50:33:52:3e:4d:8c:4d:70:29:25:
         70:48:1b:23:a7:bd:0c:8b:be:31:fe:46:c1:c2:b7:8e:17:7c:
         2e:bd:26:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:10:10 2026 by rpki-client