Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fedc474e-fb66-46fd-a711-926e9d1c3e4c.roa
File:                     fedc474e-fb66-46fd-a711-926e9d1c3e4c.roa (raw, json)
Hash identifier:          X95E6SNtx6g7KiUjMuH8oMi+byYaWxZOMYkKou8/9y8=
Subject key identifier:   6C:09:E3:39:37:9B:CC:0C:08:24:41:48:23:04:A8:03:FB:F1:4D:6F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4A59BFEB923C05312FEB477560704A9D5306CEAE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fedc474e-fb66-46fd-a711-926e9d1c3e4c.roa
Signing time:             Wed 20 May 2026 00:21:58 +0000
ROA not before:           Wed 20 May 2026 00:21:58 +0000
ROA not after:            Tue 18 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        37.7.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:59:bf:eb:92:3c:05:31:2f:eb:47:75:60:70:4a:9d:53:06:ce:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 20 00:21:58 2026 GMT
            Not After : Aug 18 23:59:59 2026 GMT
        Subject: serialNumber=df80f507850ac3d8bfa79e0103e1ee7369019f59239b53be66c64bfe74bc719f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e1:ce:c6:74:50:4e:b9:71:27:51:64:39:36:
                    44:36:82:8d:99:f1:ff:7f:a4:39:94:6e:a2:a1:de:
                    bc:60:21:02:20:04:12:56:a7:33:13:b0:7d:3b:56:
                    ee:bd:37:5a:32:6b:f4:02:7f:f8:84:d4:b1:5a:f4:
                    ff:48:94:d7:8a:87:cd:a1:d8:da:91:11:55:1e:aa:
                    bb:48:b4:42:c6:bc:58:f6:a6:c4:e7:ed:6f:4d:c1:
                    30:0f:b9:e6:1e:ba:ab:7b:b3:ec:b1:1a:32:f2:26:
                    fb:e6:63:ff:82:98:fe:64:47:82:a2:43:a9:cf:a6:
                    95:6c:3e:53:71:0a:10:18:8d:8b:ba:4d:90:57:75:
                    fe:45:14:1a:11:d0:6b:00:88:92:c2:4d:f8:98:d1:
                    ec:ba:57:a2:9e:ba:9e:57:0a:fc:cc:50:90:75:7d:
                    f4:c9:0b:f5:0e:8c:08:a8:47:f5:f1:5a:50:09:b2:
                    b1:7d:cf:66:fa:16:04:01:5a:a3:6b:43:b8:84:a4:
                    51:e7:18:99:5c:40:60:e1:cb:30:e7:c4:fb:16:53:
                    94:2c:43:2e:1c:e6:9a:54:dd:7c:e1:a9:fa:ed:c7:
                    30:20:d6:a6:c6:16:65:f9:d2:cd:04:2b:80:75:f1:
                    7c:82:d4:26:54:71:08:b1:59:2b:56:65:c9:c4:db:
                    a9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:09:E3:39:37:9B:CC:0C:08:24:41:48:23:04:A8:03:FB:F1:4D:6F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fedc474e-fb66-46fd-a711-926e9d1c3e4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.7.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4a:1f:d3:ed:1e:b3:10:c9:8f:ae:08:1a:3b:d6:de:b0:8b:44:
         a8:dc:4f:b3:e0:3c:f3:d8:4c:13:4e:10:72:e9:1f:7d:5a:bd:
         b6:b1:48:67:c5:49:1e:18:98:bd:47:07:82:6c:5e:10:5d:de:
         a9:aa:45:a4:82:e9:a1:bd:22:4c:a9:11:9b:0e:2f:76:26:5a:
         0e:50:28:ac:99:e4:bd:41:4c:66:b9:76:a8:07:ab:31:b5:19:
         50:fe:93:96:b6:3d:aa:79:cb:06:13:1e:b8:2a:c9:98:43:97:
         e6:24:71:27:1a:96:cc:f4:f1:36:01:8f:5d:1f:8e:bb:66:88:
         8a:8c:fa:c9:b4:3e:e0:a7:9d:77:67:20:cc:62:89:bd:4b:7e:
         70:62:66:cf:1c:08:d5:d7:cc:da:15:16:97:84:07:11:52:53:
         b8:f0:52:50:9b:16:65:8f:51:aa:cc:73:26:91:c1:6d:c4:5a:
         a6:7f:e6:66:b6:aa:d1:6b:ed:85:9f:d2:aa:f9:f8:b6:30:79:
         07:a0:94:49:4f:c9:e0:56:ef:e5:d1:3f:29:e4:04:5c:d4:8d:
         29:77:51:ff:05:e3:1f:cc:3e:c1:e3:a2:f3:c0:62:3e:39:8d:
         4d:5f:d7:a4:95:bb:29:54:7a:a5:4b:ba:f0:33:96:3b:ee:43:
         4f:e1:d3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:18:27 2026 by rpki-client