Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0442e16d-5452-42c4-a7df-67b82dea3ce7.roa
File:                     0442e16d-5452-42c4-a7df-67b82dea3ce7.roa (raw, json)
Hash identifier:          IbFEzuWkRUL+IGIxoN6qr3VXisTXhMUK+f5Ek4J3Pcw=
Subject key identifier:   E6:45:B7:1C:C4:E4:2F:47:13:02:4F:C1:78:1B:23:C2:66:44:93:DA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2B2A92ED929CEAE6C998A7A2B8B9296DBFBC9293
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0442e16d-5452-42c4-a7df-67b82dea3ce7.roa
Signing time:             Mon 03 Aug 2026 01:20:09 +0000
ROA not before:           Mon 03 Aug 2026 01:20:09 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        204.236.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:2a:92:ed:92:9c:ea:e6:c9:98:a7:a2:b8:b9:29:6d:bf:bc:92:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 01:20:09 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=0bb9d571a61e7e20ca4239f0f8519eba7405731500543b39962a2c552982ffb4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a1:fa:fa:05:ca:e6:bf:25:84:27:5e:d3:0c:
                    1e:c8:41:68:33:35:30:52:97:9e:61:a5:1d:28:b3:
                    ed:77:27:8b:60:3b:40:18:05:07:eb:54:08:c8:a3:
                    96:49:cf:97:b7:46:c4:07:10:7d:1b:6f:28:cb:a6:
                    9b:c9:90:9f:a2:be:7c:ab:06:e0:e4:06:01:2c:b7:
                    51:51:4a:f8:5e:dd:ab:7e:1c:8d:48:f9:d4:27:16:
                    4b:26:5f:00:05:55:68:83:36:b6:18:7d:6a:c1:d0:
                    3a:d9:f5:0b:25:8b:41:1a:a5:f1:29:e3:e6:49:5e:
                    7d:5d:c7:1c:a0:62:5d:20:35:08:3e:46:5a:64:5b:
                    26:91:91:d1:a4:3c:f0:c1:18:a6:71:51:c0:4a:61:
                    83:fd:64:84:d6:a8:15:f7:6c:7e:e8:79:60:e9:62:
                    ca:91:c6:fe:63:5a:22:80:94:36:b3:ff:15:88:6b:
                    ff:cc:35:89:ce:e3:ef:cc:5a:f9:e1:fc:88:2f:c8:
                    b4:7e:b4:25:41:42:94:21:86:37:c1:70:fb:38:05:
                    99:e6:45:36:cf:88:43:5d:39:61:ac:05:1b:9a:bf:
                    55:55:eb:48:b7:f3:46:2e:49:06:88:d3:9f:79:06:
                    bf:8a:8d:2a:36:6f:0d:1b:a3:70:87:e4:72:23:94:
                    20:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:45:B7:1C:C4:E4:2F:47:13:02:4F:C1:78:1B:23:C2:66:44:93:DA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0442e16d-5452-42c4-a7df-67b82dea3ce7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.236.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:53:5d:34:95:3c:91:d5:55:99:fa:a1:6d:6b:fd:41:96:73:
         17:5d:ff:e7:f1:9d:3c:33:52:31:a7:af:14:ad:5d:37:fe:23:
         fa:70:fc:7b:78:71:97:c7:53:99:ad:3d:d3:9c:ea:cc:75:d0:
         50:c5:77:56:20:d3:d6:90:8c:e2:9e:d0:62:8d:b5:aa:f4:53:
         a8:93:d3:69:00:16:29:31:df:a2:eb:9c:da:88:12:43:26:78:
         67:fc:96:2e:7b:e8:39:31:cc:3e:36:74:04:3c:bd:9e:fd:87:
         88:82:cc:57:c0:df:cd:be:43:9b:9b:59:dd:8a:d2:bd:cb:f4:
         bb:73:0c:17:42:cc:0a:84:ca:f4:95:fe:51:78:b1:4a:76:c2:
         07:5b:d2:71:42:a5:f2:bd:75:1d:6d:97:79:37:e2:38:2e:ed:
         d6:c3:df:5d:55:a2:9f:c7:1e:03:f9:de:ab:15:4b:e5:5c:5c:
         09:f9:5c:92:37:1f:71:74:43:fa:bf:97:6e:d1:f8:83:c6:89:
         8a:d9:bd:4f:70:69:dc:5c:d8:3c:a9:2a:b7:2d:f6:81:a9:5e:
         62:d8:95:f6:7e:d5:4a:17:76:dc:f2:9b:cb:ca:a6:4c:68:d4:
         42:0c:04:00:aa:19:d7:72:56:c0:30:b4:87:e7:07:d6:9c:d4:
         74:b1:18:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:40:27 2026 by rpki-client