Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4753976-20df-4c30-8291-086bd631b618.roa
File:                     f4753976-20df-4c30-8291-086bd631b618.roa (raw, json)
Hash identifier:          nfwYDh53vZyHLtHYW8CExDBgK4MqaEnkjl9DblOuqR8=
Subject key identifier:   4D:18:15:9F:A4:59:FA:11:9E:7A:E7:7F:95:91:CB:3B:BF:FF:08:39
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       10DE0DE586C882A0AF0958C3752D9363A56744E7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4753976-20df-4c30-8291-086bd631b618.roa
Signing time:             Tue 05 May 2026 00:50:47 +0000
ROA not before:           Tue 05 May 2026 00:50:47 +0000
ROA not after:            Mon 03 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.132.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:de:0d:e5:86:c8:82:a0:af:09:58:c3:75:2d:93:63:a5:67:44:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  5 00:50:47 2026 GMT
            Not After : Aug  3 23:59:59 2026 GMT
        Subject: serialNumber=89aec131fec22f21b56eb7600441fa2d7a212f2dbf311f2db7bcdc155adc0fae, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a6:7e:47:77:bd:0f:2f:4c:3f:fb:18:30:82:
                    e9:11:14:77:02:2e:d1:23:14:07:25:f6:52:3d:25:
                    a0:17:0e:f1:13:89:9d:59:5f:01:b3:72:9d:84:4d:
                    2c:0e:6c:25:9d:7e:2c:a1:7e:93:b3:e1:d7:1b:72:
                    e9:e2:62:c8:36:22:64:eb:11:f1:d7:13:05:e8:8e:
                    a5:32:38:d8:f3:43:da:c5:81:73:91:e9:d5:ce:20:
                    b5:80:f2:ca:cd:cc:cc:14:77:ec:44:42:53:be:2a:
                    71:40:7e:32:ef:80:b6:ac:bc:d8:bc:a0:66:d0:d5:
                    20:75:a0:88:de:87:74:d9:d4:c0:0e:79:ef:f4:0a:
                    a1:88:0a:34:c3:d5:bf:52:18:8d:38:9e:9a:6c:64:
                    e3:c9:34:16:f5:16:c4:f6:87:55:45:41:58:f2:bc:
                    9b:50:45:54:c1:fa:d1:8b:96:49:2b:aa:e5:4d:a2:
                    1f:3d:6e:87:06:b6:cb:68:a7:51:74:c6:14:3d:c3:
                    91:0a:4d:8b:57:a5:34:af:c9:4a:0a:61:b7:0b:47:
                    e0:9f:d4:f9:ac:91:ff:d3:f6:4b:73:41:89:d1:d9:
                    ea:c7:2f:53:d5:c2:84:d6:59:42:ef:a7:c1:34:9d:
                    f2:c3:dc:83:dd:33:d4:22:cb:b4:ba:c6:6f:1c:83:
                    cc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:18:15:9F:A4:59:FA:11:9E:7A:E7:7F:95:91:CB:3B:BF:FF:08:39
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4753976-20df-4c30-8291-086bd631b618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.132.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3d:fe:2a:a2:cd:9d:47:a3:2a:4c:06:4b:5d:6a:9c:b1:a0:31:
         9b:53:9f:12:01:62:a4:26:be:95:99:b0:8e:06:cb:3d:e9:bc:
         b8:77:79:0f:5d:25:77:d8:71:85:a6:07:6b:18:43:8d:d4:11:
         f5:37:d6:75:45:1a:e8:aa:c8:f5:d6:0f:22:67:62:b5:44:4d:
         a6:03:3d:45:65:57:b7:e6:b9:14:f0:46:cc:37:bd:a8:cf:30:
         ab:d0:4d:ab:97:95:08:76:ee:66:77:13:ac:91:3a:6a:c2:6a:
         31:9b:70:8c:d4:0d:6b:28:07:a6:01:70:5d:a8:6e:65:ff:26:
         0a:63:4c:08:e0:d3:26:4d:40:1c:dd:db:ec:bf:e9:fe:5a:fc:
         4e:5f:7c:95:a0:29:8b:c7:06:12:b0:e5:a8:0e:59:b9:cf:b8:
         e7:26:9b:28:94:f3:d8:4a:ee:62:64:9b:6d:51:5f:6c:a6:15:
         4b:40:37:d2:04:67:7e:49:7b:64:fc:d6:3c:53:07:97:33:27:
         00:d8:b7:2c:17:41:5b:3a:6e:28:0b:f0:3b:c1:04:76:17:bf:
         df:58:bf:e1:9c:94:43:16:a4:4b:7f:08:56:ad:1a:ed:43:3a:
         03:d9:33:07:a9:54:1e:1d:96:fb:4b:da:da:e8:f8:f5:9e:d4:
         b7:99:d0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:36:53 2026 by rpki-client