Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9c4410d-8877-4112-baca-e054d7596057.roa
File:                     e9c4410d-8877-4112-baca-e054d7596057.roa (raw, json)
Hash identifier:          upl57Kn9wZerKN6cJH9Et1V00Vq8hgGbOb5OHgl+kY4=
Subject key identifier:   66:75:61:64:6C:6B:84:5F:2D:23:7A:2E:71:A3:9F:B5:FC:16:90:B6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3EEF1FC9C059D901E68A73277CDE0CD88AD8C60A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9c4410d-8877-4112-baca-e054d7596057.roa
Signing time:             Tue 05 May 2026 01:00:53 +0000
ROA not before:           Tue 05 May 2026 01:00:53 +0000
ROA not after:            Mon 03 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        136.18.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ef:1f:c9:c0:59:d9:01:e6:8a:73:27:7c:de:0c:d8:8a:d8:c6:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  5 01:00:53 2026 GMT
            Not After : Aug  3 23:59:59 2026 GMT
        Subject: serialNumber=21059a2c523607cb7527271272a37b45d3007adb7d161e13d3a30f475aa7866d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6b:6f:8c:e8:31:ae:85:79:d2:92:aa:95:79:
                    f4:73:57:74:15:33:50:90:fd:d2:4a:99:21:8a:e1:
                    64:32:c4:c2:02:78:e0:d7:ef:51:1d:45:5e:18:ff:
                    cd:f6:74:2f:70:94:13:04:3c:c8:d8:ec:57:9d:3f:
                    ee:dd:f9:6f:66:91:f3:f6:bf:e0:4f:0f:12:2d:c5:
                    b2:fd:3a:7d:b4:35:f2:ab:7c:45:f3:ed:ce:38:1c:
                    3a:c4:e3:74:4a:9f:84:1c:2b:ca:5b:3d:63:2b:93:
                    fd:59:62:f1:c7:22:24:bc:bb:e8:1b:02:e7:c2:05:
                    f5:09:75:c5:89:27:40:ff:25:a6:45:e4:93:7b:5e:
                    e0:43:e6:fb:81:f6:e5:ed:32:33:f2:38:b8:ca:6c:
                    4d:57:93:7e:43:b6:bd:cd:de:2f:14:dc:e9:88:a6:
                    76:99:f7:c9:a5:55:c6:7b:96:96:52:a9:9c:93:3f:
                    38:9a:55:89:d6:b1:bc:5b:3a:64:53:96:db:fa:8e:
                    dc:b4:80:69:eb:65:90:35:40:1d:8a:36:b3:12:ad:
                    58:3b:61:9a:8e:e6:32:84:ef:8a:99:d5:f0:03:4b:
                    9d:09:56:47:6f:c6:b4:7c:32:85:a3:98:0d:cd:66:
                    9d:dd:43:c2:3a:83:12:b0:11:97:50:41:9b:7e:44:
                    5b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:75:61:64:6C:6B:84:5F:2D:23:7A:2E:71:A3:9F:B5:FC:16:90:B6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9c4410d-8877-4112-baca-e054d7596057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:d2:af:40:9f:8b:ec:69:b9:b1:6d:9a:7a:a6:ad:40:5c:f3:
         c2:2b:0f:9a:86:ef:67:59:5e:ec:c1:3a:2d:cc:b1:54:9b:d6:
         ff:8e:85:b6:be:66:07:11:79:19:78:08:6a:5c:35:c0:d4:a3:
         f8:d9:ef:42:e8:91:63:52:cf:5b:82:8e:8c:2b:18:6e:2a:ed:
         40:9b:99:e0:66:af:a3:21:8b:27:94:09:ee:c0:79:c0:ca:e6:
         72:68:76:d3:6b:30:4a:65:e6:9b:73:d2:e5:dc:3d:8a:26:03:
         9b:4e:20:44:64:d1:1d:7b:13:04:33:e3:0d:47:81:12:72:35:
         33:4c:32:62:66:cf:38:64:69:6c:16:d8:b8:09:be:42:b3:61:
         d8:71:08:d0:ef:8f:54:2f:c6:5e:1c:17:aa:c7:f4:28:7e:47:
         b8:56:30:af:5d:b3:52:a8:b0:19:85:cf:91:5f:30:30:12:de:
         e4:40:1a:bd:7e:a7:d0:18:90:8b:01:42:f8:da:52:78:f5:ce:
         69:1e:e2:72:5b:50:11:5c:60:fe:c5:7e:80:11:aa:27:91:5a:
         f5:54:66:59:25:fe:89:f5:6e:c1:37:78:a0:c4:b7:65:2d:ae:
         17:75:5d:85:cc:1c:75:e5:51:91:7d:5b:26:bb:8b:47:9a:9b:
         7d:96:1b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:17:33 2026 by rpki-client