Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7869326-41cc-454d-bdfd-d05d320733ea.roa
File:                     d7869326-41cc-454d-bdfd-d05d320733ea.roa (raw, json)
Hash identifier:          jYKs+o4Fb0+ZxgrQJsX08w8o8VPwWsFDlU5M2JHfXJ0=
Subject key identifier:   E3:5E:0E:4A:6E:11:59:77:72:24:A6:EC:33:21:09:31:A0:B0:EE:A0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B4B8380FD19679ECDA8C3E1C570BD0033D7D8D9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7869326-41cc-454d-bdfd-d05d320733ea.roa
Signing time:             Tue 19 May 2026 00:20:42 +0000
ROA not before:           Tue 19 May 2026 00:20:42 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        24.110.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4b:83:80:fd:19:67:9e:cd:a8:c3:e1:c5:70:bd:00:33:d7:d8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 19 00:20:42 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=f46221f20742e35e66f9a0da79dc11c2ac9224564169f79d5ff9206c999637d4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:d3:d0:d3:9b:1e:ad:2d:b3:a9:cd:62:cd:
                    d7:67:80:5d:78:36:f7:46:40:6e:dd:9d:3b:16:da:
                    ae:12:4a:be:ec:be:d1:be:ae:03:0a:2a:73:12:c0:
                    2d:ca:78:dc:7c:0d:c7:df:21:d7:09:d7:5d:36:1f:
                    fb:e5:6c:94:96:48:1f:44:93:9e:bb:41:91:48:7f:
                    58:e2:ff:19:71:43:9f:b8:90:a7:da:1a:79:e7:29:
                    1e:a8:b3:97:dd:44:f3:fe:37:03:ad:39:fe:aa:8c:
                    5c:a9:a0:0b:cf:7a:bc:8b:9e:b0:9b:9f:ff:b2:97:
                    02:38:bd:49:e8:e3:cb:96:a3:b3:65:d2:44:98:26:
                    58:24:7b:39:61:43:a2:35:95:dc:68:1b:3c:3f:22:
                    ce:ec:cb:da:46:36:4a:57:2d:ec:9a:93:a6:68:91:
                    15:12:1a:02:06:b9:63:51:8c:aa:1c:bc:da:73:30:
                    e3:af:c0:3f:51:2a:27:36:94:5b:4b:02:b6:97:23:
                    fb:cc:bb:74:4c:bf:d4:32:8b:a4:8e:24:a6:51:e5:
                    dd:e7:a5:a6:2b:07:b8:ae:8c:8d:7a:c3:f6:e5:a4:
                    9c:5c:c9:0a:f8:e4:a1:a6:cb:c1:35:46:6f:da:30:
                    82:87:1c:c0:ab:d3:4a:34:86:20:5f:bb:cf:1d:4e:
                    ff:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5E:0E:4A:6E:11:59:77:72:24:A6:EC:33:21:09:31:A0:B0:EE:A0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7869326-41cc-454d-bdfd-d05d320733ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.110.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:58:1c:07:4f:0a:34:b1:d1:18:03:26:36:d6:68:84:4b:79:
         bb:95:64:ac:af:5b:5f:a9:bf:5f:2d:2a:1a:02:42:48:7f:cf:
         c5:25:be:ad:71:d1:4c:62:b1:30:83:bd:91:08:c9:6a:14:e4:
         7a:6d:99:49:94:44:06:3c:e2:00:78:98:75:0e:aa:51:b5:88:
         0d:4e:f1:1c:b0:69:5d:75:db:3a:0c:5d:0c:c6:db:ce:59:ed:
         fd:7a:27:b6:11:ce:2b:ec:9e:3c:ff:0e:8d:4f:bd:d8:9d:5d:
         0e:a2:3f:bb:26:38:a2:9a:9e:22:3b:ff:98:8f:ef:d9:de:24:
         ce:97:ab:1b:ec:a0:c8:26:91:5b:a5:96:26:ba:9c:4c:b9:8f:
         23:b2:99:94:07:b3:ab:a0:e9:dc:83:55:5b:fa:eb:78:89:e5:
         5b:a6:d5:90:4b:a3:62:92:1f:94:b5:5a:ef:9c:cb:82:df:9c:
         1e:ff:8b:6a:aa:fa:18:7d:65:2c:d2:4e:35:b3:39:82:42:8d:
         28:70:22:f7:a0:f2:b0:61:46:3e:7c:5c:0c:7d:ba:d0:8e:e7:
         8b:dd:4f:54:bc:75:df:c1:c1:4f:20:e9:4b:65:a4:69:73:a5:
         ab:c9:2e:b2:37:7d:45:cc:07:7e:0c:b5:6b:9d:ef:05:ce:54:
         fa:8c:a6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:04:38 2026 by rpki-client