Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4314907-a293-452a-8393-4b578c9f3645.roa
File:                     d4314907-a293-452a-8393-4b578c9f3645.roa (raw, json)
Hash identifier:          gDtDHjolpOcH39bIgWWeUHmaPgUDp14nRZeOwsoV844=
Subject key identifier:   19:E5:93:4E:F3:DA:15:FF:B2:B7:1D:83:5D:CC:34:3E:89:4E:22:0B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1C1BBDC835E667F2AD54B42604586FDEF8A07673
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4314907-a293-452a-8393-4b578c9f3645.roa
Signing time:             Sat 16 May 2026 01:11:15 +0000
ROA not before:           Sat 16 May 2026 01:11:15 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        5.60.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:1b:bd:c8:35:e6:67:f2:ad:54:b4:26:04:58:6f:de:f8:a0:76:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 01:11:15 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=e95aef625820ebee25a1bc493c715d4da7033ef843637e62d5cb853cb156d712, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d1:cb:1f:7a:7b:fe:5f:14:9c:d3:87:39:08:
                    de:bc:54:d8:0c:37:8a:e5:e7:8f:32:ff:f9:57:92:
                    40:51:2d:cf:44:49:ca:f5:7d:81:70:a7:99:fc:4b:
                    6f:7c:c8:c0:05:b3:1a:eb:91:a3:93:4b:ac:e1:e0:
                    6b:3e:86:ed:89:17:78:9d:13:0e:d1:a4:91:02:08:
                    4e:37:60:31:18:03:73:99:a3:2e:18:89:f1:8f:81:
                    7c:38:b5:5f:80:d5:bb:53:60:44:1f:4f:a3:17:67:
                    60:be:1a:2c:07:9e:0d:39:33:a9:86:c7:8c:bb:b2:
                    3b:a9:d3:f7:b3:f8:c8:16:e1:49:9c:12:a5:d1:b5:
                    c1:71:61:38:72:b8:b2:49:8b:a5:9a:4d:4f:e9:e7:
                    f0:be:13:84:85:15:ce:68:c2:d0:48:27:84:f2:b6:
                    51:7b:fb:19:c6:3e:33:53:05:40:d6:9f:d6:ca:b0:
                    47:ac:17:34:32:1f:67:4d:d6:10:9a:35:8d:fc:a0:
                    17:94:a1:c6:9f:98:4f:46:ec:e3:9b:99:ec:49:9c:
                    97:b1:c0:26:98:01:94:30:6a:fa:0e:34:f8:d2:51:
                    28:5b:5d:c8:e5:9d:b6:c8:21:bd:a9:83:ca:c7:82:
                    0c:f0:c3:46:5c:6b:09:0c:4f:16:4b:08:b3:ab:ec:
                    55:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E5:93:4E:F3:DA:15:FF:B2:B7:1D:83:5D:CC:34:3E:89:4E:22:0B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4314907-a293-452a-8393-4b578c9f3645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.60.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2a:e3:cf:1b:89:d5:1f:13:9e:07:9e:35:7b:63:a3:8b:26:3a:
         4f:1c:91:22:2f:e5:87:ac:2f:10:27:06:95:fc:61:4d:60:79:
         6e:0e:e9:46:fe:bb:47:71:a9:be:31:86:8e:db:70:31:0f:49:
         cf:02:e1:67:73:e2:05:14:ff:02:b5:55:06:e4:2b:91:c0:e3:
         8d:0a:75:58:b0:a9:e8:75:c8:f6:b1:7b:e9:b0:ee:0d:07:c6:
         e4:9a:98:e9:64:03:e7:ec:4c:c4:44:24:0f:7b:e7:10:fb:39:
         e7:df:d4:df:68:8c:a7:04:d3:12:d4:f5:2e:bc:1b:2a:31:03:
         d6:97:a0:70:53:c0:b4:71:3f:f0:73:77:ce:1a:62:a0:4c:12:
         37:a0:1b:00:35:0e:ed:46:ff:58:9e:60:4e:f8:e1:51:8b:dc:
         7d:63:df:b0:64:6e:53:6e:29:c6:35:f9:ce:6e:bc:93:26:58:
         59:22:1c:54:40:fe:b5:c2:b6:19:8b:4d:67:b8:36:51:81:d1:
         bd:ff:99:36:e2:ba:f1:c3:c6:bd:d6:0f:b4:20:d1:83:1b:08:
         32:62:4b:31:2c:19:1b:d2:a1:d0:fb:6e:52:5a:39:fc:8a:68:
         23:4d:8d:d8:f9:04:f6:a3:dc:45:50:aa:a1:2a:0f:74:03:0a:
         78:81:6e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:55:06 2026 by rpki-client