Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbfeac9f-5b0f-4a72-a4e4-37afba8f40bd.roa
File:                     fbfeac9f-5b0f-4a72-a4e4-37afba8f40bd.roa (raw, json)
Hash identifier:          Ghu7cXvFiact5wNst9wA+dCuWSDycwQVD7zZWMMcDC4=
Subject key identifier:   C6:3C:01:6A:62:71:6E:96:62:02:5B:94:71:C3:3A:B2:42:8B:F5:C3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6C69E7D06B180E018419AD413021EC4853E395E9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbfeac9f-5b0f-4a72-a4e4-37afba8f40bd.roa
Signing time:             Thu 14 May 2026 00:00:41 +0000
ROA not before:           Thu 14 May 2026 00:00:41 +0000
ROA not after:            Wed 12 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        184.32.0.0/12 maxlen: 12
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:69:e7:d0:6b:18:0e:01:84:19:ad:41:30:21:ec:48:53:e3:95:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 14 00:00:41 2026 GMT
            Not After : Aug 12 23:59:59 2026 GMT
        Subject: serialNumber=a26df377465dcf83366aea93b06809d0a380bd0cd069dc3f90748ecfe92612e5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1f:e2:e6:1b:ad:4d:27:a1:05:04:76:bb:db:
                    ea:2b:2e:cd:f7:27:ba:69:93:89:78:0f:a5:3d:dc:
                    19:aa:a0:3d:09:d8:be:64:fe:8c:ee:84:60:1a:af:
                    52:d8:7f:68:d4:34:64:24:14:dc:7a:a0:a2:d9:39:
                    2a:ee:ab:61:ed:84:0d:2d:5f:b2:1d:a6:6f:75:04:
                    de:6c:66:e6:cd:6e:1a:ba:9e:b3:6e:08:3a:88:e3:
                    9f:b8:a3:6e:f8:01:dc:4e:fa:45:84:e3:cb:36:1b:
                    a5:06:94:f8:be:63:6e:94:93:c7:f6:94:36:98:19:
                    55:69:e3:89:76:74:9c:01:4d:85:f1:36:40:24:86:
                    ce:32:b5:41:58:8d:59:0a:65:36:d2:f7:8c:ae:f5:
                    25:10:f3:1e:20:58:9a:5c:b9:a3:53:fe:ee:09:a1:
                    91:b8:91:72:f9:3b:ac:67:eb:e8:a7:f5:bf:ef:18:
                    40:60:cb:bb:b4:ae:7b:e8:79:99:2b:7c:1e:c4:f3:
                    c8:1a:4c:be:0c:79:ba:af:a2:c0:bb:a1:8f:8f:ba:
                    31:27:cc:a1:5b:a9:22:19:85:1f:f0:b6:59:8d:93:
                    33:7d:9d:a4:d1:44:f7:72:31:04:9a:a2:b5:f9:42:
                    b6:c8:03:a4:54:72:ef:82:ea:fb:45:8f:b9:57:a3:
                    bb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3C:01:6A:62:71:6E:96:62:02:5B:94:71:C3:3A:B2:42:8B:F5:C3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbfeac9f-5b0f-4a72-a4e4-37afba8f40bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.32.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         d3:30:bd:46:25:da:55:92:73:22:f5:55:4a:09:10:27:7f:c2:
         fc:0b:61:c4:c1:bc:7b:e3:7b:0f:bc:f6:8a:a9:2d:99:c6:85:
         a4:49:71:7d:9e:02:fe:32:11:30:df:8e:69:ce:c5:4b:57:07:
         f2:ec:a9:b8:bc:56:a5:69:04:41:a8:9c:3f:9e:f4:d9:0a:f1:
         f4:b3:41:8d:a7:ab:fb:b2:3e:c4:ab:62:14:5e:73:34:2e:a6:
         18:a7:79:16:44:af:fb:22:58:10:1f:35:ee:57:2a:fd:c1:69:
         15:17:45:58:a4:dc:b9:5a:55:01:28:2f:ee:a8:b3:d4:1d:9b:
         53:a4:68:4b:2a:3a:94:fd:7d:b3:84:7b:e7:83:1e:93:e8:66:
         64:da:f2:4a:d4:4b:39:d6:4e:59:25:b2:19:64:27:0b:97:a9:
         a3:01:b5:b3:15:d4:2f:65:b8:b5:e5:db:fc:cb:2c:9c:3c:f5:
         7a:4b:11:5c:3f:18:93:fd:b7:f8:be:8b:e0:cf:36:b4:d2:95:
         4e:ff:12:40:89:b8:50:6d:51:d3:89:51:47:2a:76:02:de:d5:
         6c:b9:34:f0:37:f8:70:48:3c:7d:a6:c4:db:72:1d:9a:d0:a0:
         b0:45:e3:c7:21:fa:21:bd:8b:95:51:0b:a4:ca:67:fc:78:c3:
         9a:52:84:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:15:18 2026 by rpki-client