Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8f75d51-7cf9-4f48-8b37-9a9b6a2fc55a.roa
File:                     e8f75d51-7cf9-4f48-8b37-9a9b6a2fc55a.roa (raw, json)
Hash identifier:          415NRB4S6LwX3mnwMMylX9k3nUG5BNbItnw+3GvaEBw=
Subject key identifier:   7E:24:8A:96:E4:98:DF:87:0A:E8:E3:06:95:FA:90:32:71:0B:09:05
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       182EF9D50C9E0261B7BE27788C8784C670E050C0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8f75d51-7cf9-4f48-8b37-9a9b6a2fc55a.roa
Signing time:             Fri 01 May 2026 00:21:06 +0000
ROA not before:           Fri 01 May 2026 00:21:06 +0000
ROA not after:            Thu 30 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:2e:f9:d5:0c:9e:02:61:b7:be:27:78:8c:87:84:c6:70:e0:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  1 00:21:06 2026 GMT
            Not After : Jul 30 23:59:59 2026 GMT
        Subject: serialNumber=31931f91732d30929b3796161fb91c9fafa4e3e1f02dffdad72787ad27c4732e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:33:79:62:9e:d1:c2:f6:90:de:95:5c:b7:45:
                    a6:f2:de:0d:0e:b7:30:ff:2f:08:0f:6e:de:00:23:
                    4c:c4:20:ff:05:9c:fd:0a:33:a5:5d:37:42:78:b5:
                    94:b9:c9:9c:f6:c7:73:b8:81:01:7e:94:89:2e:58:
                    14:03:5e:a5:6d:dc:35:27:5a:30:4b:b9:19:e3:ac:
                    55:8d:21:88:c9:2d:03:92:39:08:3d:4f:26:ef:2d:
                    91:e6:4d:a2:38:79:59:e8:9d:6e:e7:79:3a:28:b3:
                    eb:04:31:3d:1a:45:da:a0:1d:0e:93:34:16:3c:e5:
                    cc:88:b7:ac:3d:cb:50:ca:37:40:75:6d:56:84:04:
                    6a:81:38:af:18:ad:6a:50:6b:8a:cb:48:22:17:07:
                    39:ad:8f:f0:84:af:7b:71:ca:25:27:cc:fc:46:7b:
                    58:2f:f1:f5:51:e0:30:9a:c6:22:dd:b5:ac:a5:99:
                    05:82:63:92:5c:5d:47:46:8a:2a:2a:19:9e:31:e5:
                    ab:27:4d:8b:e8:9a:2d:fb:07:07:cb:5d:d5:12:e4:
                    33:ed:00:c1:d0:74:58:fb:b1:13:13:a1:59:59:3c:
                    e2:2a:66:f4:85:dc:59:f9:8d:b8:22:06:b1:63:16:
                    c0:ee:9a:26:7c:23:d4:48:f5:56:61:39:2f:ea:55:
                    2c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:24:8A:96:E4:98:DF:87:0A:E8:E3:06:95:FA:90:32:71:0B:09:05
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8f75d51-7cf9-4f48-8b37-9a9b6a2fc55a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:26:b3:c4:db:c4:7e:b2:b2:55:d2:58:45:7c:24:3b:b7:35:
         37:27:84:ff:3a:34:20:ec:c9:87:b9:06:76:c7:83:b8:e4:2d:
         6f:9f:7c:4d:79:32:7c:d9:9e:1b:ba:32:83:3e:71:ee:9e:06:
         c6:c3:c6:ad:43:3f:fe:fc:55:7e:36:29:5b:ab:61:3c:9e:d2:
         ef:f7:b5:01:6c:59:d9:4a:43:fd:3d:0b:d5:54:16:18:13:0e:
         9a:e3:0e:b0:86:0b:03:76:8a:46:60:c9:33:5b:f4:be:68:f4:
         05:07:b4:0d:a5:b9:9c:d0:70:43:a9:83:09:0f:b1:2b:c9:2a:
         05:d3:6d:3b:18:02:5b:48:b3:18:48:3d:70:a5:e2:bd:62:b5:
         1a:5d:17:83:42:35:aa:8e:0d:a2:5e:f5:49:6b:35:93:84:36:
         51:98:38:26:98:2d:e1:d7:63:9c:20:28:e0:0a:08:0b:69:25:
         ba:6b:79:94:c4:3b:46:f3:f8:98:3e:dd:27:21:25:6d:f9:df:
         58:d6:b5:dc:70:d0:7e:a9:39:1b:a8:85:b4:77:73:01:e9:99:
         2d:17:47:a1:15:94:44:ed:63:64:02:6a:4e:23:d4:b0:e1:2e:
         02:a4:e1:55:e1:57:f7:c5:c1:a5:17:bf:00:0d:49:73:f1:89:
         54:06:bf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:58:12 2026 by rpki-client