Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2365433-7c93-4016-ad7e-0a4383160d29.roa
File:                     f2365433-7c93-4016-ad7e-0a4383160d29.roa (raw, json)
Hash identifier:          PGa95WbgzYMjJxF3mQFQmwxpJ53jtSQ59oQoCEq9uQE=
Subject key identifier:   AA:AF:C2:6F:E1:FD:AF:26:7D:89:B7:1F:E4:ED:31:C5:4A:13:E2:4E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       75EC68CB69FE76286C89D71EEF1F77C74224A3C6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2365433-7c93-4016-ad7e-0a4383160d29.roa
Signing time:             Fri 24 Jul 2026 00:21:11 +0000
ROA not before:           Fri 24 Jul 2026 00:21:11 +0000
ROA not after:            Thu 22 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        184.72.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ec:68:cb:69:fe:76:28:6c:89:d7:1e:ef:1f:77:c7:42:24:a3:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 24 00:21:11 2026 GMT
            Not After : Oct 22 23:59:59 2026 GMT
        Subject: serialNumber=51b7e1c2aba5ce0c15888b79c31c84639fc3941b80419055ce6d8f74f930bc16, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cc:c1:dc:30:21:89:23:3a:7f:c2:a0:ec:3a:
                    4d:1f:0a:f9:e3:26:b1:27:5b:a6:6d:43:f6:cc:5e:
                    df:20:97:fa:3c:73:63:2e:10:4d:c9:d7:8e:87:9f:
                    49:93:37:d0:7e:0f:d0:82:1c:dc:41:94:cb:45:22:
                    13:d7:c2:d6:03:b8:ee:a7:9f:1d:83:b4:35:ff:26:
                    4f:18:a7:35:2c:5f:6b:ef:d6:06:f3:9d:c4:76:1a:
                    5a:02:ba:59:81:d1:fd:a9:f9:13:a4:b4:9a:f5:a5:
                    11:10:c5:14:d2:09:c2:a2:7d:88:94:f9:34:ec:38:
                    03:cf:6a:02:42:ab:c3:e0:68:39:aa:55:d7:a9:ca:
                    e0:9e:b1:c1:01:26:c9:49:90:1e:92:dd:1b:ea:e8:
                    b5:65:17:bc:66:2f:f6:da:3c:8f:8e:2f:69:1c:71:
                    ba:5b:d5:c7:0d:c9:99:69:f1:9e:a5:58:c2:71:d5:
                    67:0b:49:ff:60:e5:aa:e2:81:00:f0:76:95:cc:2b:
                    09:94:61:de:91:c3:d3:38:c0:54:a5:b5:46:aa:ae:
                    1c:b5:a1:9d:52:11:dd:93:9e:ef:9f:8c:d0:0a:3b:
                    bf:1b:58:c6:3d:bf:7e:3f:c7:cb:47:f9:1c:3c:4c:
                    85:62:ec:cd:55:3b:6a:8e:c8:d7:6f:1b:33:32:36:
                    8d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AF:C2:6F:E1:FD:AF:26:7D:89:B7:1F:E4:ED:31:C5:4A:13:E2:4E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2365433-7c93-4016-ad7e-0a4383160d29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:83:12:20:6f:b6:1d:72:b1:81:91:3d:d7:62:b5:7a:4b:af:
         62:20:51:4b:64:e9:63:3c:68:90:6d:dd:ee:8e:00:61:32:21:
         94:a9:17:0f:60:08:8a:3f:22:67:3a:a2:d5:a9:da:85:25:df:
         fb:42:b1:cf:fb:f3:68:fa:d1:c3:0a:b3:08:2e:4c:fe:f1:db:
         c8:27:ff:41:dd:bc:ae:87:64:16:b4:36:92:93:46:65:23:2f:
         58:d6:15:cf:96:e5:f1:7c:8f:33:24:a6:b8:6a:2e:d7:40:dc:
         2b:d4:04:9a:86:3e:47:ed:bc:50:88:a1:84:f2:18:41:43:a2:
         b6:5c:b7:a6:88:2f:99:3b:b8:cd:41:e3:87:ab:a9:be:60:b1:
         58:7e:37:36:9f:b8:fa:19:60:8c:0d:42:5b:59:93:e5:e9:22:
         b5:44:22:51:b1:7c:e0:5f:8f:61:a3:d7:ca:5a:6e:e5:60:93:
         6d:c5:da:65:d8:e1:5f:d3:e4:b7:3e:3c:f3:a1:57:b5:38:69:
         00:20:7a:29:a9:23:eb:2e:98:0c:83:56:1c:e7:e8:46:c2:68:
         86:0f:33:7e:da:8e:ae:2a:69:5d:4b:23:f5:99:f4:13:b6:7f:
         53:ef:7d:3e:20:b3:fe:c2:e7:7b:59:af:6e:0e:2c:fd:cb:43:
         81:14:48:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:57:21 2026 by rpki-client