Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2629315-55fc-4ccb-bd08-0655076226c5.roa
File:                     c2629315-55fc-4ccb-bd08-0655076226c5.roa (raw, json)
Hash identifier:          DNs4r9xOr7mxOp18HxktNYYWf1zkMOE1fNYhSlFoCrM=
Subject key identifier:   2D:B3:6A:65:83:70:5A:E0:CC:68:AC:94:B1:E5:81:DD:36:C9:73:F6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       42E7C469EC2EFEBFB400531533D2F0868A329B28
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2629315-55fc-4ccb-bd08-0655076226c5.roa
Signing time:             Tue 19 May 2026 00:20:45 +0000
ROA not before:           Tue 19 May 2026 00:20:45 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        24.110.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e7:c4:69:ec:2e:fe:bf:b4:00:53:15:33:d2:f0:86:8a:32:9b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 19 00:20:45 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=a9b79ddb3d3f4c9dba71a4c80f48461a1f52c3aeac459e7f6062ebb2c4ec75d8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8a:e2:5a:52:18:5e:fb:46:dc:6a:a1:10:c6:
                    2a:89:1c:79:ea:d4:00:95:b8:ff:45:6c:84:a6:2f:
                    79:3b:82:b1:0d:f5:e6:e8:b0:f6:8f:f0:d7:c7:ba:
                    b1:86:e6:76:be:77:fc:e0:ab:ca:41:4b:28:f2:44:
                    68:db:a0:8d:c2:8c:f1:89:b6:ad:19:76:61:8d:77:
                    c1:dc:47:8e:ef:0a:3f:97:3d:cb:1b:ae:b5:95:44:
                    8c:a4:9e:1c:58:c5:72:47:f6:50:f4:d7:da:8f:31:
                    16:ed:1d:19:9c:87:16:bf:7f:46:6e:a8:c0:f9:90:
                    f1:e4:9c:12:81:c6:95:93:4a:a9:8d:79:92:e3:61:
                    34:8e:ba:65:c0:eb:3f:53:e1:e8:a1:42:7a:c1:64:
                    69:29:09:08:78:3b:e5:84:ac:3c:c9:0e:73:2a:d0:
                    16:41:fa:9e:17:9f:4c:c6:47:60:2d:9f:91:a6:f3:
                    45:c2:06:93:02:7e:9f:c3:96:dc:8d:ec:e6:a4:8b:
                    8d:f2:ef:42:5e:4f:3b:db:20:db:89:d0:e7:84:10:
                    9c:11:7a:87:51:47:95:9b:8a:a3:4b:27:93:c4:06:
                    3c:27:bf:5f:9e:ce:7f:b9:73:73:1d:88:13:cb:13:
                    a1:72:ae:73:50:1c:0e:26:13:89:66:c6:16:ff:cd:
                    d6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B3:6A:65:83:70:5A:E0:CC:68:AC:94:B1:E5:81:DD:36:C9:73:F6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2629315-55fc-4ccb-bd08-0655076226c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.110.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:5b:ea:25:e3:e9:a0:ef:7a:88:80:d6:82:bd:9b:7d:d7:c4:
         ef:e8:c8:38:d1:ac:c8:d2:f6:f8:18:8a:dd:bd:c1:1f:22:fb:
         40:22:c8:bd:80:c8:3d:dc:0a:64:48:58:73:3a:7c:12:00:fd:
         e2:b2:73:7b:93:59:33:d1:66:e0:ef:58:ad:39:cc:76:dd:3e:
         e8:e8:20:c3:a8:57:ab:51:95:05:aa:59:60:76:8c:cb:32:9c:
         bc:cb:43:f0:02:12:65:a1:bc:ec:19:eb:46:b3:71:39:87:bb:
         2c:44:eb:2e:1c:4f:88:6a:73:f6:b9:5e:85:a6:d5:af:86:11:
         b2:1f:a0:68:a9:84:a8:10:d6:ec:3a:4e:d3:1d:83:53:df:50:
         55:7c:c3:2c:4b:f4:89:96:00:34:62:48:29:7d:cb:67:21:14:
         d5:fc:5d:4e:24:0f:8d:02:9a:59:a7:3a:2a:07:7c:e6:02:0c:
         aa:1d:8e:92:5b:2c:cf:8c:a5:c9:46:24:5a:2f:7b:01:43:95:
         2b:f6:24:f6:88:c0:18:44:55:73:66:2f:58:58:78:fb:1a:c2:
         c4:0c:41:12:50:a0:79:b8:ff:10:08:24:3c:6a:0a:2c:57:76:
         14:96:bc:6d:81:15:0b:56:c0:e1:f9:da:89:67:a3:16:62:c3:
         51:e4:b5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:08:46 2026 by rpki-client