Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b971328c-a37b-45b1-9c93-c0934a356378.roa
File:                     b971328c-a37b-45b1-9c93-c0934a356378.roa (raw, json)
Hash identifier:          McFURChPvSA7XsqxvW3pBcpwbOfPSFvSRA9tdIIlHzk=
Subject key identifier:   7C:C5:13:40:CF:E4:32:62:5F:9A:89:E5:94:20:A6:B3:E2:8B:64:3F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       32F8748B290CF2DDBAADBB85BE2A621DCDA1D80F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b971328c-a37b-45b1-9c93-c0934a356378.roa
Signing time:             Wed 20 May 2026 00:20:10 +0000
ROA not before:           Wed 20 May 2026 00:20:10 +0000
ROA not after:            Tue 18 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        57.84.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f8:74:8b:29:0c:f2:dd:ba:ad:bb:85:be:2a:62:1d:cd:a1:d8:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 20 00:20:10 2026 GMT
            Not After : Aug 18 23:59:59 2026 GMT
        Subject: serialNumber=f5bfce6cc8169f30af7b55bedd030307496e92158e7831d900163fd18aab52b2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:af:82:c4:06:d6:a4:d4:b3:ea:89:7b:ac:5f:
                    95:05:2e:ca:05:bb:26:3b:a5:fd:ba:62:01:91:97:
                    e3:0d:19:bb:9a:ce:a1:9f:ff:0e:cc:7c:ff:66:39:
                    18:f5:1a:e5:7e:06:62:a9:07:a2:3e:5c:f0:b4:72:
                    bb:58:6a:46:2c:3c:97:ed:ee:3e:8d:37:06:e9:f1:
                    14:da:80:b4:16:d3:87:ee:18:eb:c8:63:e8:db:73:
                    f2:e0:37:3a:79:75:96:4a:cf:2a:02:f2:fc:ca:78:
                    09:c9:97:fe:83:37:1b:92:ad:f1:6b:ea:b1:23:9f:
                    06:90:07:f6:05:dd:ef:08:49:40:71:3a:6f:25:19:
                    60:14:07:b6:bd:f6:e0:20:94:6d:b4:0d:95:68:1b:
                    b8:90:f1:1a:07:8e:16:67:77:ef:89:5c:83:62:d8:
                    d8:c3:55:de:90:67:7c:10:c7:6a:b6:99:05:1a:97:
                    b3:2a:da:37:d5:eb:34:5d:eb:3c:13:05:81:d3:c5:
                    6d:fb:2b:d3:d4:d6:b8:50:7a:af:fb:15:ec:02:6c:
                    6c:1f:08:8a:18:09:88:b4:61:0e:18:85:e1:7a:b8:
                    87:4d:b9:91:d0:de:6d:9b:59:87:7b:d8:dd:8a:95:
                    f0:97:e7:b0:b1:f7:72:76:16:be:c6:fd:2c:fc:eb:
                    d9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C5:13:40:CF:E4:32:62:5F:9A:89:E5:94:20:A6:B3:E2:8B:64:3F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b971328c-a37b-45b1-9c93-c0934a356378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.84.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         83:98:6f:60:b0:88:eb:ff:09:e4:62:14:fa:99:12:ba:7c:6e:
         36:fb:0f:43:d6:99:b7:03:a2:1f:02:5a:98:19:bd:d3:9e:ea:
         da:2c:4c:a8:4d:a2:77:d5:b4:fe:0d:a9:17:0a:31:ba:c2:ba:
         46:86:37:98:dd:6a:e9:04:f3:25:e6:38:6d:a2:f0:6b:f3:e5:
         c7:73:49:46:38:d3:6e:77:85:3a:d8:e0:e1:9f:54:fe:4b:dd:
         6a:13:46:82:2d:2f:e6:e5:96:d4:79:e1:c8:69:e7:27:4c:e7:
         e8:63:98:d1:3c:b9:c2:9b:30:db:3b:3d:ee:6a:6c:78:6c:b2:
         9f:f5:33:46:e3:a7:40:c4:9e:fc:9d:ab:b1:fe:58:71:10:6c:
         86:33:5d:7d:60:10:db:84:37:36:7a:80:ec:60:82:4a:eb:35:
         bc:56:4b:ab:78:65:d4:62:dd:60:f0:61:ba:7c:c0:32:f5:01:
         88:0a:94:80:63:63:65:17:ee:58:f8:3b:da:26:b2:e3:6e:ab:
         16:57:3a:70:6a:fd:2d:50:6c:c4:bd:64:e5:05:89:10:7f:0c:
         5f:d9:be:8b:b2:c2:6f:4e:41:7a:74:19:68:27:cc:27:a7:ec:
         46:80:c9:f5:4f:c0:11:c9:86:3a:2c:a6:6f:94:23:c7:ba:ea:
         17:56:e9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:16:32 2026 by rpki-client