Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3b37376-bf16-4f7e-b9b5-c70c5f517ac5.roa
File:                     c3b37376-bf16-4f7e-b9b5-c70c5f517ac5.roa (raw, json)
Hash identifier:          er2Y9zmQ2j0eh1Mf1nDKZ6EDw09/FHUA0YVdIIAFGJc=
Subject key identifier:   D5:77:27:3B:70:AC:79:4A:9E:16:93:02:0D:2D:B6:D5:16:07:1C:0D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       06E582663E4387B6F0358EB49B9B9FE1ABC8BBD6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3b37376-bf16-4f7e-b9b5-c70c5f517ac5.roa
Signing time:             Fri 15 May 2026 01:51:07 +0000
ROA not before:           Fri 15 May 2026 01:51:07 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        149.128.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e5:82:66:3e:43:87:b6:f0:35:8e:b4:9b:9b:9f:e1:ab:c8:bb:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 01:51:07 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=60b1f00343a0fa71827c4313b4ddff6c41077ed0bf697f3512accb8ec88567ed, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:06:62:d6:88:25:d3:1a:5e:32:2b:d3:75:ef:
                    24:47:7b:28:c0:aa:6c:d9:c4:1e:63:db:5b:81:25:
                    bf:65:a3:fd:0b:06:17:ca:20:b8:ba:a1:6c:51:94:
                    71:5b:0c:33:0c:5d:a4:74:55:bd:f4:89:45:8e:b2:
                    72:6e:78:a5:4c:17:e4:23:38:00:58:b8:a9:69:a6:
                    a7:f9:f7:06:7d:a3:55:3e:b1:cc:09:c7:d3:25:ab:
                    d6:59:9c:94:61:56:c9:49:ff:47:d9:88:88:2a:79:
                    46:e2:15:98:f6:0b:96:c6:dc:11:64:6b:e8:a3:28:
                    d6:23:f2:82:ab:1d:11:d3:77:e4:43:b7:de:2d:76:
                    35:d2:65:9a:ab:8f:fb:5f:cf:42:5c:75:e0:59:c8:
                    72:99:39:51:e2:ee:01:9e:5e:b6:fa:d8:86:c4:06:
                    ed:38:42:69:1c:7c:80:d2:f1:36:6f:c6:5a:4b:ab:
                    07:35:4e:a9:6e:33:f1:14:ae:58:83:00:9b:25:89:
                    c3:25:d0:60:95:6a:d1:33:ce:18:0c:24:fa:cf:e2:
                    de:06:d8:85:70:8f:7b:d1:b3:d1:8f:48:3e:c0:91:
                    e2:49:86:d6:e0:50:7e:4c:f7:25:49:94:ae:09:6c:
                    1c:32:c3:30:e2:81:dc:4c:73:1d:4f:8f:8c:80:f3:
                    87:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:77:27:3B:70:AC:79:4A:9E:16:93:02:0D:2D:B6:D5:16:07:1C:0D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3b37376-bf16-4f7e-b9b5-c70c5f517ac5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.128.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cc:d9:68:73:18:9a:ee:2a:e7:76:cc:b2:44:a5:46:76:18:c4:
         c4:12:5a:cb:d5:39:82:68:dc:b9:ed:76:56:e0:fe:3a:2d:a1:
         61:cd:ab:1a:e4:81:28:4d:73:2d:44:79:c6:91:26:40:f4:fe:
         68:52:5c:df:83:cd:ef:f3:ac:1e:bb:0b:72:47:1f:75:b5:f8:
         3c:8a:7f:61:c5:ab:d7:df:8b:ce:61:73:99:b9:41:6a:42:f9:
         45:c2:5b:f4:97:fd:7d:cf:8d:99:b2:49:78:fe:82:51:56:68:
         7b:fe:a0:3e:5b:9b:d0:21:f7:d1:1d:92:8c:96:b6:a3:d5:40:
         c9:87:d4:ef:f9:f6:80:55:70:72:46:5f:da:75:99:98:44:a0:
         20:8e:0e:e8:64:26:f1:9e:f7:11:c0:0c:a5:9f:2e:60:dc:37:
         39:d7:88:0d:a6:97:31:4f:6f:9c:be:fe:1f:86:a4:a0:34:3c:
         37:3a:a7:08:13:8e:9f:13:2b:67:01:3c:6d:73:60:fa:c3:2a:
         be:68:12:10:21:38:c0:06:25:73:9b:e9:97:cb:1f:0f:f9:a0:
         b5:70:94:6f:83:31:34:8b:27:d6:d9:a6:33:12:cd:39:0b:73:
         34:34:d2:d5:ce:d9:a1:bf:a6:78:7b:9e:02:c1:1d:f5:a7:c9:
         75:44:0d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:58:07 2026 by rpki-client