Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c666f3bb-8006-48c6-9739-ccb862593274.roa
File:                     c666f3bb-8006-48c6-9739-ccb862593274.roa (raw, json)
Hash identifier:          udgc0ru2INbfgcZYtvNQf5aha3eciFFI4hngdRqmer8=
Subject key identifier:   A7:D1:A9:E1:55:D2:1E:24:E8:78:F3:42:95:75:23:1F:2D:F6:9B:A2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6CD2CB73C0D7A6B0AF76AEA1F8DD991C14E687D3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c666f3bb-8006-48c6-9739-ccb862593274.roa
Signing time:             Mon 27 Jul 2026 00:41:22 +0000
ROA not before:           Mon 27 Jul 2026 00:41:22 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        74.201.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d2:cb:73:c0:d7:a6:b0:af:76:ae:a1:f8:dd:99:1c:14:e6:87:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 27 00:41:22 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=075fe0dcfb2c823fbafc1abcd22414e9e6e18d8a04926a3e6e0c96658fc20727, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9d:ac:47:d3:df:25:22:90:f9:e5:37:a9:9c:
                    48:ad:9f:d6:8e:16:bd:4f:d5:c7:83:b4:8f:f6:11:
                    27:e2:ae:61:ee:66:82:55:c0:80:39:09:8b:66:b8:
                    e0:07:76:2c:63:da:33:de:30:35:c8:3b:5d:a5:76:
                    42:a5:98:4c:9d:4f:72:49:d1:50:28:e9:49:10:ba:
                    e2:3d:9d:6d:48:30:97:fc:b6:51:18:ff:e9:13:3c:
                    a2:26:4e:ee:59:b9:db:3e:e6:22:bb:68:09:04:2b:
                    eb:3b:12:f1:9d:6f:d0:d3:e7:b9:5f:d7:84:84:41:
                    8a:ea:f2:62:bc:b6:86:82:74:35:67:28:f4:a0:be:
                    b5:41:85:41:02:be:7d:f3:20:8f:0b:53:bf:83:e0:
                    0e:f5:f6:ed:42:71:5f:ac:90:d9:1a:c0:42:12:58:
                    50:7a:53:9e:83:6d:2f:df:dd:26:c6:00:63:f3:85:
                    6a:41:38:22:df:77:27:bf:4b:06:69:4a:f9:23:3b:
                    18:21:fb:a9:d0:39:31:50:3f:5b:9f:fd:8b:72:81:
                    c8:80:8f:93:bd:f5:ad:83:07:87:60:5f:99:d7:2e:
                    f8:2b:1f:04:b1:9e:3a:68:34:85:cc:b7:d3:98:ea:
                    a7:49:59:da:62:4a:42:0a:5d:ad:0c:98:d2:ff:0b:
                    79:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D1:A9:E1:55:D2:1E:24:E8:78:F3:42:95:75:23:1F:2D:F6:9B:A2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c666f3bb-8006-48c6-9739-ccb862593274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.201.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d2:78:99:88:83:7a:ec:fe:47:66:05:f4:38:94:67:52:38:12:
         8e:b9:43:c2:46:0b:fb:cc:e7:22:96:4b:74:96:11:ba:fe:12:
         1a:d4:d1:c3:60:ac:49:6e:92:4d:c6:f5:b3:23:52:9c:2b:ce:
         9c:da:69:db:82:56:b8:25:54:c7:5d:14:3d:ec:dd:81:c2:57:
         2c:ca:ad:9c:1b:4c:86:e3:d6:8a:b0:43:0f:d2:5c:4f:30:1b:
         30:cd:77:e1:13:34:f0:e3:19:a7:a5:0b:ab:3f:26:b2:bb:32:
         32:70:09:c0:94:ad:85:6f:92:bb:a5:00:09:41:a5:e8:29:33:
         ac:45:5b:f1:5f:d7:5c:2f:af:68:e7:b4:14:5d:e0:3e:ba:9a:
         f9:8e:07:94:54:3a:0a:ec:7d:be:b6:55:eb:4c:e9:e5:95:35:
         5f:e0:cc:c0:1e:e1:5f:a6:c4:62:fb:b3:be:98:0e:a1:25:f2:
         ba:ca:3b:b5:8b:af:fe:4a:a6:96:2d:d3:66:22:e1:05:27:f5:
         54:ba:d3:22:26:e6:43:bd:f9:4b:d7:58:76:48:77:cc:6f:bf:
         02:94:5c:a7:bc:47:53:01:6f:9d:8d:5c:d6:0b:f0:6d:19:d4:
         01:21:03:bb:41:ed:7a:c7:36:36:09:9f:da:6a:3a:f4:a5:dc:
         00:85:e0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:53:06 2026 by rpki-client