Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b5219ca-20a9-4cbd-96ff-ab9ac87cb9ba.roa
File:                     2b5219ca-20a9-4cbd-96ff-ab9ac87cb9ba.roa (raw, json)
Hash identifier:          02JldA3NalL7SXC2gy16nsavuTgJLK+CYpeKeih9dDw=
Subject key identifier:   08:D1:6E:4F:03:0E:10:9F:36:FD:B5:68:2C:4F:A1:27:07:42:87:22
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1B7BCF1D63771022DB1366A7580C2F0BB52F1813
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b5219ca-20a9-4cbd-96ff-ab9ac87cb9ba.roa
Signing time:             Tue 11 Aug 2026 19:47:56 +0000
ROA not before:           Tue 11 Aug 2026 19:47:56 +0000
ROA not after:            Mon 09 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        32.204.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:7b:cf:1d:63:77:10:22:db:13:66:a7:58:0c:2f:0b:b5:2f:18:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 11 19:47:56 2026 GMT
            Not After : Nov  9 23:59:59 2026 GMT
        Subject: serialNumber=21d9d3bc655daca47a546f73343bed8b9476f331aeb0e1ba45adeb4642244177, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:64:11:27:6d:eb:2b:82:cc:29:a8:66:cf:74:
                    34:f2:7d:25:9c:6d:3f:97:e7:2d:f6:07:88:ee:10:
                    cd:5c:bb:19:dd:8b:37:c2:27:be:6a:9c:83:81:ee:
                    08:20:13:bc:50:1c:ca:55:c2:e5:a6:ba:d4:28:5b:
                    f5:f8:b7:80:33:4f:79:6f:7f:5a:9b:8d:fb:ad:4e:
                    ca:cb:f6:62:09:40:6c:51:60:b4:18:eb:9d:ad:e1:
                    45:ad:ff:56:7a:cc:4e:43:11:33:5c:24:45:8e:a3:
                    62:8c:77:d0:62:8c:ba:94:49:ba:43:e6:c0:fd:6a:
                    d4:86:3d:9e:5b:eb:43:0e:31:94:17:33:05:41:02:
                    cd:9b:6b:13:ad:2c:ee:a2:b2:f6:c4:8b:25:cd:94:
                    77:df:6e:7a:30:c9:b4:0b:7c:d1:73:77:86:6a:1e:
                    bd:87:f8:68:ea:a2:1b:86:b3:0e:8d:ec:77:a5:8c:
                    79:f4:03:94:8c:6f:ac:42:66:37:2a:e4:09:ad:76:
                    c6:e9:fe:88:c2:55:23:f0:9f:51:d6:3f:99:a8:77:
                    3b:ff:b1:14:49:f5:d1:1c:f6:52:75:c4:a3:24:a8:
                    fd:08:87:8a:be:83:10:15:da:cf:18:ea:72:00:5a:
                    07:d4:a8:76:25:55:94:8f:d9:df:80:c7:14:3f:47:
                    2b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D1:6E:4F:03:0E:10:9F:36:FD:B5:68:2C:4F:A1:27:07:42:87:22
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b5219ca-20a9-4cbd-96ff-ab9ac87cb9ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  32.204.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         55:e9:df:a0:7c:35:1f:5d:f3:8d:e5:d9:6d:77:c8:62:ab:17:
         00:14:5d:4e:46:67:8a:f2:5d:bb:1e:63:e9:d8:40:82:45:36:
         84:b7:60:cf:5c:3f:d7:9d:e1:1a:34:56:7f:38:9c:1f:f1:6f:
         0a:df:f0:aa:0d:06:d2:bf:3d:0d:86:65:d5:31:0e:da:e0:98:
         5b:94:2c:5a:ea:79:db:03:bb:bb:4b:4d:26:e9:ae:ca:62:a0:
         b2:98:7b:9b:21:18:e6:35:81:c3:a4:27:88:d8:d7:dd:6e:13:
         14:5f:47:ee:fb:aa:90:f6:44:18:c1:d7:da:91:4b:3d:1b:76:
         0f:07:37:6f:c6:8e:71:a5:0e:e0:38:92:02:82:9f:0f:09:4a:
         f9:aa:f1:11:42:60:2e:6b:4e:2c:cc:74:6a:d4:ff:4c:77:a7:
         9b:0e:72:af:99:99:05:49:4e:3b:f4:65:ef:5c:cc:2f:f4:14:
         81:ab:49:5e:22:bc:9e:1d:f9:75:e2:eb:be:92:17:bb:f7:97:
         18:73:d6:35:c4:cb:12:7e:4f:a9:b1:ec:43:99:e5:83:f2:ab:
         36:ac:56:97:14:7f:48:6c:c2:6d:e4:c8:d8:20:26:67:0b:b7:
         61:59:dc:50:37:02:9f:52:28:83:21:3b:1e:fc:a3:de:69:95:
         2d:aa:93:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:08 2026 by rpki-client