Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c39d5c58-914d-4d17-9204-d6652dbcef48.roa
File:                     c39d5c58-914d-4d17-9204-d6652dbcef48.roa (raw, json)
Hash identifier:          AwM+wp43cNNlAKsxGv5fOn964D3PsWBNG2lYexok2QY=
Subject key identifier:   C2:14:5B:49:DC:0D:82:52:7E:03:E5:11:EC:CF:31:C9:5B:31:0F:E4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       485D2B4876183F2A228CB8F1BD215FC8965AD7BB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c39d5c58-914d-4d17-9204-d6652dbcef48.roa
Signing time:             Mon 27 Jul 2026 00:10:12 +0000
ROA not before:           Mon 27 Jul 2026 00:10:12 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        78.12.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5d:2b:48:76:18:3f:2a:22:8c:b8:f1:bd:21:5f:c8:96:5a:d7:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 27 00:10:12 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=3a67ac3238d54caf8f11993b74e73ea68dd493dddbf63935aa5053150f84ff6d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2d:db:64:16:6e:1b:a5:ec:d6:c0:9c:ce:b9:
                    47:0f:d0:c1:b9:fb:b9:8e:c3:fc:d1:03:bc:17:42:
                    41:3b:b9:45:3e:dc:de:0c:01:c2:29:53:b4:92:b5:
                    bc:45:a0:4c:93:de:ff:fe:89:03:fc:ca:4c:f9:76:
                    5d:b4:49:a0:72:36:fb:b1:c0:cc:0f:e5:16:af:e4:
                    5a:60:9c:d4:18:70:06:0f:f5:b7:42:76:3f:06:e5:
                    53:7c:a6:33:9d:24:18:a5:60:96:b8:da:c9:94:e8:
                    3b:0c:27:72:d8:d8:97:84:42:5a:6b:53:5e:b6:92:
                    26:77:dd:16:cf:90:21:72:25:d1:83:2a:7b:fd:72:
                    e5:40:32:cb:d3:b3:70:f0:f9:13:83:58:a5:39:de:
                    a2:d3:79:bb:ce:99:6e:7d:66:ac:91:0e:e2:b8:09:
                    9f:13:80:d9:66:e9:4c:25:fc:dd:5b:30:f5:82:7b:
                    4d:37:fe:97:73:9b:c4:ee:ff:10:66:e4:f9:f3:49:
                    02:cc:73:81:65:bb:c5:4d:ad:0e:23:9f:04:29:e6:
                    96:43:fa:59:27:91:72:e7:55:2f:5c:da:3b:00:2d:
                    85:40:a3:b5:74:30:93:ed:01:77:4f:b0:12:a9:97:
                    3a:93:a2:e2:82:c4:80:2a:a6:2b:3d:3b:26:bc:0c:
                    db:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:14:5B:49:DC:0D:82:52:7E:03:E5:11:EC:CF:31:C9:5B:31:0F:E4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c39d5c58-914d-4d17-9204-d6652dbcef48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.12.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:7e:f3:d1:44:c8:b3:93:d6:a0:60:71:ac:70:21:a8:5f:9b:
         f2:44:74:2d:35:22:59:d1:06:0a:78:99:c9:0b:f8:86:80:13:
         1f:c0:10:4f:07:46:b5:e4:f3:c0:1d:07:3a:a0:32:84:12:c9:
         8b:6e:78:cc:9d:f4:6e:c8:14:d3:82:61:f1:f3:3c:d0:f2:25:
         53:a4:f6:16:75:c3:ac:67:00:ee:25:c2:ea:9f:be:55:78:40:
         67:20:89:8c:17:60:f2:ce:1d:b5:af:5b:98:4b:a3:2c:66:a0:
         0c:43:70:51:7e:04:11:4c:4d:a6:ab:ec:10:d0:b8:f8:1e:8d:
         a0:7a:aa:58:77:30:8b:26:57:b8:c9:e8:e5:6d:d5:09:e4:ed:
         74:41:cb:ac:42:70:59:72:d9:93:57:1c:88:c8:9b:1f:f1:36:
         23:e8:cd:96:ab:c1:85:80:90:de:69:0b:6a:64:ee:72:2e:06:
         c5:c4:4c:b3:20:64:59:94:82:10:d9:8b:b3:7f:5e:ce:75:4d:
         ab:ef:cf:5b:89:61:a5:7e:c9:60:4b:55:52:61:2e:90:5e:1e:
         5d:55:bf:2d:d2:6c:4b:44:5f:6b:8b:6e:e5:d4:cc:15:b9:11:
         8e:f4:6d:fc:e6:bd:72:27:04:77:80:11:28:f5:01:36:f9:f9:
         5a:e2:87:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:51:31 2026 by rpki-client