Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b50e29db-8ea8-465e-b77b-6bb4903e7932.roa
File:                     b50e29db-8ea8-465e-b77b-6bb4903e7932.roa (raw, json)
Hash identifier:          SAIYLPUIRgc0GrsDqUbVASU+9qVbY8QO/3ejhIBnm+U=
Subject key identifier:   53:8F:95:21:43:48:6A:E8:90:07:55:EA:3C:48:B3:BA:EF:41:1F:81
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5CF7DBAF0642845D9E84E7BCEF0AE367EAB45C95
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b50e29db-8ea8-465e-b77b-6bb4903e7932.roa
Signing time:             Sun 17 May 2026 00:20:57 +0000
ROA not before:           Sun 17 May 2026 00:20:57 +0000
ROA not after:            Sat 15 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.215.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f7:db:af:06:42:84:5d:9e:84:e7:bc:ef:0a:e3:67:ea:b4:5c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 17 00:20:57 2026 GMT
            Not After : Aug 15 23:59:59 2026 GMT
        Subject: serialNumber=8c4a7126b72b7f1dcd928610950a391dd05d79c93923054dbbbb49e5633815e9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4d:bd:97:fd:d4:4d:7c:58:a0:f7:8b:bd:c6:
                    ba:38:b4:41:31:e3:5e:1b:28:a9:54:ff:a7:35:fb:
                    42:00:93:f4:51:02:05:f3:e3:ce:7c:e2:9c:8e:ff:
                    b7:0e:cd:cb:bd:63:c3:84:87:e1:34:59:e9:78:2a:
                    0d:d8:e5:e3:2b:93:d4:b2:4f:e7:66:06:f7:b9:81:
                    25:79:09:10:22:c2:bb:af:d4:ce:cf:a3:0c:ea:e5:
                    68:67:ad:14:15:ed:46:0e:e6:ce:7d:fe:14:72:41:
                    d3:d8:df:4f:f7:a1:81:3c:7a:f3:6a:b0:b9:37:87:
                    cd:cc:8b:6e:38:bf:75:18:40:35:90:80:77:6c:6d:
                    47:12:69:02:1d:56:4f:80:f6:2e:81:7b:8b:5d:b5:
                    9a:51:85:f9:82:25:94:96:1d:6c:a0:b1:8d:5b:1e:
                    3a:0c:14:4c:15:1c:ba:c6:d7:8a:62:2b:81:21:f6:
                    16:46:77:f8:1e:a2:d6:eb:2f:8c:63:ed:8b:1e:0e:
                    30:a0:af:4e:8d:a8:01:e4:05:30:1a:bb:aa:8a:73:
                    9e:8a:df:67:7c:d1:dc:89:3f:af:42:ba:f8:8a:b2:
                    9d:39:de:d1:7d:51:55:5d:43:2c:e7:05:9d:8e:fc:
                    de:ee:66:50:0b:ff:4e:4f:8e:ad:74:cc:02:c7:3e:
                    4a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8F:95:21:43:48:6A:E8:90:07:55:EA:3C:48:B3:BA:EF:41:1F:81
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b50e29db-8ea8-465e-b77b-6bb4903e7932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.215.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b2:0d:66:7e:6f:07:32:d3:c1:e1:5c:f7:48:ed:f9:98:46:7f:
         6a:f2:af:63:ad:40:a3:d0:ac:09:37:0c:7e:bb:5e:d1:dd:22:
         8c:68:f6:cc:88:27:e1:1c:14:78:11:88:a2:12:42:12:54:20:
         40:c4:93:5e:2c:88:96:7c:40:3e:28:fe:b7:fc:ed:c6:23:3c:
         72:79:b4:64:0c:0d:ed:9b:2f:10:5e:7a:d6:45:1a:48:95:5f:
         7c:76:14:26:91:20:78:62:80:d0:a6:0b:0f:94:55:41:32:44:
         d0:09:d2:5d:7f:54:3c:cf:2f:15:8f:b2:14:68:80:10:18:36:
         ac:84:7d:f7:1b:e7:22:ad:2d:bc:7a:05:62:4a:64:be:4d:65:
         ff:ed:50:4f:27:40:6c:3b:66:33:90:3a:bf:5f:a7:a1:e8:8c:
         f8:ab:80:38:d4:e5:f8:4d:53:bc:4f:fe:25:a5:48:6d:b4:df:
         46:f2:0f:9f:0f:51:d2:96:a5:b4:d1:88:b2:84:0a:40:3e:a7:
         d6:9c:4b:65:7b:54:bf:e8:0f:c6:42:bf:da:28:06:c3:84:30:
         2e:b3:67:33:13:7a:16:11:b5:14:db:b4:6d:7a:03:75:a7:65:
         9a:95:f1:e0:8d:b8:1c:e9:57:94:75:ee:03:0b:96:26:46:0f:
         c8:11:9d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:12:17 2026 by rpki-client