Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee7e467f-8bfe-4d54-afbe-25646042edbf.roa
File:                     ee7e467f-8bfe-4d54-afbe-25646042edbf.roa (raw, json)
Hash identifier:          09SepChq+Rf6SMPzpUnd2Z5qYSie/xccMlSZHjRHuvs=
Subject key identifier:   67:CC:D4:1C:2F:F8:1A:40:31:86:3D:DC:2A:5A:D3:FB:78:7B:49:00
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0684961136FB3BEBF8B4F208F8086D4FFD8125B1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee7e467f-8bfe-4d54-afbe-25646042edbf.roa
Signing time:             Fri 15 May 2026 00:41:22 +0000
ROA not before:           Fri 15 May 2026 00:41:22 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        107.22.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:84:96:11:36:fb:3b:eb:f8:b4:f2:08:f8:08:6d:4f:fd:81:25:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 00:41:22 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=e538a03894aebdfe4cab50790622de195bc0fc2943f938283a53a9ad8ef2892a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ae:55:4f:6d:37:a9:29:dc:7e:ff:2d:8c:6e:
                    37:da:5d:b2:db:a6:1b:56:79:4f:25:50:09:08:c3:
                    23:91:fa:c4:d2:13:9d:8a:7b:a5:4b:db:91:89:52:
                    0a:55:1e:6a:42:1a:ad:ca:1e:c6:22:1e:01:72:82:
                    f4:aa:12:ff:31:41:5f:07:60:7f:5a:b7:14:94:b0:
                    3e:90:49:22:4c:83:2c:88:fd:b4:1d:32:be:87:5e:
                    6e:1f:75:cc:1b:af:9a:8e:42:39:d2:99:d7:7e:16:
                    b4:ae:fa:c5:26:aa:19:e0:5f:17:b9:f4:2b:ff:cf:
                    58:e3:fa:d3:ef:8d:48:9f:98:23:72:9e:a8:54:05:
                    d7:44:02:ed:3f:c6:a8:1b:8e:96:b2:6b:af:1f:45:
                    aa:49:a8:db:4f:98:10:9f:05:ef:54:2b:d2:2d:d8:
                    da:79:41:78:1c:5e:1a:3e:1b:59:c0:5c:d2:ce:31:
                    40:dc:cb:d5:b5:ed:95:02:0b:9e:aa:4f:61:74:ec:
                    d1:d5:de:16:af:fb:c8:77:23:bb:69:09:b9:c8:51:
                    47:a0:2d:e7:70:52:06:34:6a:14:bf:98:11:21:2a:
                    93:54:5d:0b:e9:43:50:a5:17:98:f1:75:a7:0c:69:
                    f2:05:21:f8:33:ec:9a:71:f0:13:24:3d:1f:da:81:
                    8d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CC:D4:1C:2F:F8:1A:40:31:86:3D:DC:2A:5A:D3:FB:78:7B:49:00
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee7e467f-8bfe-4d54-afbe-25646042edbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.22.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         38:06:30:a2:bc:b5:ab:b4:fe:b7:ab:a3:a9:bf:52:1f:42:6b:
         c9:a3:01:f0:26:b5:50:cb:f3:80:9e:72:24:4d:22:30:f7:57:
         d7:78:05:7a:d9:fb:14:7f:89:17:41:51:f2:a2:82:77:dd:5c:
         a7:95:a8:a3:95:92:12:9a:2f:67:94:a2:6c:4b:8a:8b:7e:a6:
         f2:46:42:06:aa:89:54:48:6c:47:40:f8:a4:70:20:18:61:ff:
         8a:e4:3c:d7:27:73:31:05:aa:34:21:92:d3:5f:2a:73:f9:a7:
         25:34:ac:ba:42:83:4f:11:83:79:b1:0d:ec:b0:84:49:d2:58:
         5d:7b:f5:35:a0:aa:65:5d:82:de:6d:1a:a3:d8:55:18:cf:4c:
         92:d1:e0:73:85:30:8f:ab:3b:10:bc:5d:49:49:14:d8:47:11:
         64:eb:d9:4b:09:95:1f:de:2d:bb:86:7c:92:48:df:85:49:8b:
         d1:51:0b:3a:12:60:db:32:12:21:24:c9:a1:6a:97:f6:fe:2f:
         d9:4c:e7:b8:67:fa:a7:d8:77:9f:1f:16:b0:23:ed:19:66:1d:
         e3:e4:28:ba:40:86:d4:ec:63:93:c6:79:2b:99:36:28:97:31:
         4f:aa:22:50:a3:8c:61:79:33:fd:27:83:dc:35:de:45:94:4c:
         3d:f1:f0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:47:31 2026 by rpki-client