Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de1f98bc-ae50-4803-b2e2-2d125089d719.roa
File:                     de1f98bc-ae50-4803-b2e2-2d125089d719.roa (raw, json)
Hash identifier:          EJ2wPKsxp+StLPLZUQyq9RCzTZLzXi+9TAfUHVn9ezQ=
Subject key identifier:   9F:77:59:3B:A5:95:25:26:B1:25:CA:5C:8F:93:4B:3B:3E:19:B7:F5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       560C1D61C0CC59ADF8C6F7AA095485CE9B9D9610
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de1f98bc-ae50-4803-b2e2-2d125089d719.roa
Signing time:             Mon 11 May 2026 00:30:47 +0000
ROA not before:           Mon 11 May 2026 00:30:47 +0000
ROA not after:            Sun 09 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        23.91.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0c:1d:61:c0:cc:59:ad:f8:c6:f7:aa:09:54:85:ce:9b:9d:96:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 11 00:30:47 2026 GMT
            Not After : Aug  9 23:59:59 2026 GMT
        Subject: serialNumber=055fa4657815dd2dcbb9b69511af5e3cd57687101319c23173abd09247ada2b2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:eb:c2:55:58:14:5d:81:76:5b:22:59:f4:4a:
                    d1:17:51:ae:7d:5d:30:a0:dd:39:8e:79:c9:25:39:
                    00:44:18:c9:55:c4:5d:a0:2a:3e:62:2a:8b:ab:e0:
                    8e:9d:43:5e:64:0e:2a:b3:0a:4d:8e:78:21:a0:67:
                    74:fe:65:0f:98:73:66:2c:f7:01:c3:1a:71:82:c5:
                    0e:6b:75:2f:3d:d8:1a:09:94:df:a7:08:47:65:83:
                    0c:d0:f2:b7:e8:d6:72:9d:0f:ad:ef:7a:bd:68:cf:
                    51:e2:1d:ad:3b:ef:27:af:a1:48:20:69:83:45:ca:
                    8c:23:cd:84:2a:b7:09:22:50:88:1f:0c:e5:5f:af:
                    bf:5d:c3:32:02:7d:ba:0d:87:4f:c2:91:ed:9b:dc:
                    b0:6f:17:81:c0:6a:97:06:36:f2:7f:12:01:5a:e8:
                    a1:9c:d7:f5:4e:59:0b:f0:3f:84:81:4b:1c:6c:33:
                    2d:98:40:29:33:f0:7e:f5:cf:0b:34:f2:6d:96:56:
                    f4:e4:7a:88:97:48:63:46:29:02:c0:21:2b:84:0c:
                    d6:09:cc:a3:1c:6c:48:13:aa:d0:b3:55:6a:5f:d1:
                    d3:dd:5f:6d:23:f1:74:3c:0a:32:67:52:a6:4e:2a:
                    d0:0a:a4:14:aa:ba:64:39:47:a9:f0:55:ef:e3:0e:
                    ff:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:77:59:3B:A5:95:25:26:B1:25:CA:5C:8F:93:4B:3B:3E:19:B7:F5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de1f98bc-ae50-4803-b2e2-2d125089d719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:50:62:8e:58:29:e2:c3:ce:c4:b5:6c:bd:58:df:c7:a3:d6:
         19:30:fa:fe:bf:a5:a1:a3:21:a6:59:40:4d:eb:2f:04:da:e0:
         61:4e:30:48:9e:e4:2e:ae:89:9f:a5:2c:37:56:45:43:32:d0:
         a5:5c:19:41:81:90:26:ff:92:9f:bc:2f:6b:47:b2:e7:9a:5d:
         c7:7b:ab:bd:2a:5b:f5:7e:98:96:2d:d6:ce:c6:9a:4d:87:9b:
         32:58:16:52:09:dd:b4:cf:e8:26:2e:da:9b:ac:87:f4:76:75:
         dc:76:d1:cb:c5:bc:5e:e5:a6:b3:56:d5:fd:f3:ac:5c:b4:4a:
         45:8a:a5:48:d1:93:65:a5:1c:02:95:06:aa:0c:41:da:89:f4:
         1d:f7:a9:27:87:15:6a:81:ef:76:0a:df:6a:68:47:77:04:11:
         13:77:0a:fa:4e:1e:2e:75:00:a7:3e:98:4f:c7:52:5e:5e:c9:
         70:57:d9:2a:b7:95:b5:e3:b5:03:bf:7b:a9:50:2b:40:46:72:
         86:96:d9:fe:50:98:42:84:42:e2:49:d3:0f:18:1c:1f:96:d3:
         b3:eb:c4:4e:aa:2b:97:d6:c2:20:78:86:eb:40:c9:47:1c:a1:
         72:77:3a:ac:0f:6a:bb:6a:98:75:87:eb:85:47:d2:f6:8f:a5:
         f8:ca:80:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:09:25 2026 by rpki-client