Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e63a12fb-e70f-4e9c-aca6-5c42d618c2b5.roa
File:                     e63a12fb-e70f-4e9c-aca6-5c42d618c2b5.roa (raw, json)
Hash identifier:          QSfs/8GxirbhgD4aD3K1K8DPJSFTjdwcSGmcl0dWs98=
Subject key identifier:   13:5B:22:83:87:FA:F9:8F:CA:CE:79:A7:7D:0C:06:79:B4:C6:A3:58
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6209F00E9BC1F2D1E95FB9BA392EA24041DF1611
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e63a12fb-e70f-4e9c-aca6-5c42d618c2b5.roa
Signing time:             Fri 08 May 2026 00:10:12 +0000
ROA not before:           Fri 08 May 2026 00:10:12 +0000
ROA not after:            Thu 06 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.52.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:09:f0:0e:9b:c1:f2:d1:e9:5f:b9:ba:39:2e:a2:40:41:df:16:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  8 00:10:12 2026 GMT
            Not After : Aug  6 23:59:59 2026 GMT
        Subject: serialNumber=b1a0e254cdb56b296b8dd82cc3c50fd137010a1e70c356fdd853b97cb7bc4fe2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d4:46:49:1b:bc:24:ed:d9:a7:5e:96:d6:8c:
                    14:ce:c6:04:07:6f:fe:9a:ba:0d:13:05:2a:6d:21:
                    5d:6b:ee:ae:29:2a:02:d6:b9:8f:68:ff:50:7f:a7:
                    d7:43:d1:55:78:ca:e7:fa:52:0b:8e:67:ec:aa:8b:
                    38:f1:7f:ef:88:68:33:90:df:db:1c:43:45:60:40:
                    0d:6c:e7:6a:0f:87:0a:83:8c:76:d0:5f:f8:b2:ef:
                    df:a6:71:95:7e:52:32:bd:ce:3c:dc:8b:6c:be:d5:
                    f9:12:17:e4:4d:8d:74:8f:99:7a:ab:35:0a:53:d4:
                    56:64:1f:e8:1b:70:cb:32:a3:9c:91:a9:55:c8:6b:
                    a3:01:a6:50:49:42:24:99:c9:ef:1f:2b:23:c3:4e:
                    26:67:86:80:2d:0d:54:ee:ae:7f:66:8a:38:4f:5a:
                    17:d3:a7:62:b7:50:3d:f7:61:b1:6f:22:ce:e1:0a:
                    85:f8:27:64:ac:8b:17:cb:6e:54:91:a6:53:0e:a6:
                    d9:6b:ee:d0:aa:f6:18:cc:9a:bf:8d:98:31:e6:87:
                    c9:d5:33:4a:76:49:2b:3e:52:58:40:c0:ed:7f:f1:
                    07:d6:19:7d:a0:37:98:02:00:ee:a6:11:bf:5a:ec:
                    a6:dc:5d:f4:97:fd:8f:25:57:d8:a3:77:31:0f:1c:
                    ca:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5B:22:83:87:FA:F9:8F:CA:CE:79:A7:7D:0C:06:79:B4:C6:A3:58
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e63a12fb-e70f-4e9c-aca6-5c42d618c2b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.52.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:73:eb:19:43:51:68:d7:59:b5:d4:4c:52:be:04:7a:c2:e3:
         14:1a:98:dd:40:fc:6f:7f:a8:a3:71:66:11:6c:a3:0b:0f:77:
         00:ed:e0:d0:cf:ba:3b:10:54:a2:63:4d:59:4b:11:fb:1e:38:
         d2:ed:46:5b:3f:62:90:a3:d3:84:b8:35:ff:ed:18:2d:b0:22:
         76:78:4b:24:f5:c1:4e:f2:ab:ea:22:ff:c2:2d:5b:dc:c7:f7:
         25:19:14:44:16:df:65:3d:24:a8:d1:ca:b9:dd:99:b9:90:69:
         02:2a:6e:96:f8:2a:fb:aa:36:7f:ce:fd:8e:07:ef:62:8d:97:
         b0:c5:a0:a4:d4:2a:3c:01:65:41:34:b9:e3:63:4b:5e:68:9a:
         0f:ef:92:2d:bc:a0:08:6a:4c:ae:70:68:82:80:e7:79:c9:21:
         dd:ef:c2:06:2a:0e:a7:9d:51:73:b8:58:41:dc:92:11:a8:fd:
         6e:99:e0:35:94:a5:ea:1a:5b:01:3f:8b:66:72:41:a8:5d:ef:
         3a:43:0f:34:f1:11:27:a7:7b:3c:0e:bd:5b:d1:99:2e:3e:39:
         91:d2:77:40:57:86:23:d4:59:c2:e8:b1:ed:30:bf:cc:b7:88:
         f5:7e:34:52:04:a5:69:ab:66:2b:c2:20:b1:12:4e:92:87:52:
         da:26:2a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:43:49 2026 by rpki-client