Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f18251d-2b2e-4eb0-aa4b-1fcc61bafe5b.roa
File:                     2f18251d-2b2e-4eb0-aa4b-1fcc61bafe5b.roa (raw, json)
Hash identifier:          j500FDaZlbWcDoEbFpdbtFTzOw+fbLexZ+NgE74IAlc=
Subject key identifier:   F0:6B:1C:01:62:26:88:DB:A4:5F:C7:DD:6F:15:C3:E4:FD:37:76:E5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       03076A1D03A68883848F2295134D148487921F96
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f18251d-2b2e-4eb0-aa4b-1fcc61bafe5b.roa
Signing time:             Sat 08 Aug 2026 00:31:52 +0000
ROA not before:           Sat 08 Aug 2026 00:31:52 +0000
ROA not after:            Fri 06 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        77.112.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:07:6a:1d:03:a6:88:83:84:8f:22:95:13:4d:14:84:87:92:1f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  8 00:31:52 2026 GMT
            Not After : Nov  6 23:59:59 2026 GMT
        Subject: serialNumber=b634a59f02ef99ff94acd500636e7fa59f9374686941e28a7f451fbd7ce23d17, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:eb:8d:d0:3a:fc:b4:43:c4:fb:3c:27:3a:1e:
                    b1:bc:a4:25:db:0f:cc:1f:a7:b2:ef:5a:96:a9:3e:
                    5c:c7:47:54:e4:1e:47:60:74:03:0d:f5:62:34:35:
                    c9:24:ec:50:34:de:ff:d8:15:45:80:4a:89:10:95:
                    7f:88:a7:2c:c1:5d:3a:6d:2d:ed:28:ec:d9:21:52:
                    b8:63:f0:a1:10:0c:ad:10:eb:14:8e:32:b1:01:22:
                    d4:84:71:e8:9c:7b:65:02:ee:6e:25:a0:3a:be:c0:
                    bf:41:a2:d1:f9:0a:ff:7d:61:24:d3:fe:2a:39:ad:
                    13:52:50:8d:7f:7c:37:84:b3:52:2c:70:52:d4:32:
                    2c:13:2c:46:f1:f6:a1:86:a2:6c:7f:0e:30:00:6b:
                    98:1e:46:4b:25:e7:c2:95:3e:10:b7:be:19:33:3c:
                    ae:7e:31:74:8e:16:a2:7c:d1:c5:c6:bc:0d:91:db:
                    00:09:d4:10:c2:7f:28:c9:2d:29:91:0f:17:98:5d:
                    db:0c:b0:e1:f4:3a:f1:4b:a2:0a:86:de:b6:50:4e:
                    8b:3e:60:1d:45:a7:55:2f:e3:50:ae:d5:92:0c:33:
                    bd:63:13:f2:2e:64:c0:f7:8f:2f:d5:46:c0:f6:37:
                    29:71:2a:2d:b7:ec:82:8f:64:f9:29:b4:8c:dc:30:
                    00:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6B:1C:01:62:26:88:DB:A4:5F:C7:DD:6F:15:C3:E4:FD:37:76:E5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f18251d-2b2e-4eb0-aa4b-1fcc61bafe5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.112.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         83:69:3e:5b:bd:85:42:61:aa:92:3e:9d:7f:26:8b:bf:ef:c2:
         2a:64:3d:f8:d8:9a:94:81:55:17:ea:2d:63:c7:e0:2d:47:50:
         10:9d:fb:bc:43:3a:df:81:0e:e8:20:ad:5a:17:ab:a5:48:c0:
         c0:10:e9:b4:c8:00:03:52:35:47:65:b1:bb:fc:37:0d:61:f5:
         d7:17:fe:49:b1:68:38:8d:c3:ad:22:0d:d0:d0:05:b7:3d:f3:
         ed:38:81:ef:98:a8:27:bb:43:20:0e:99:26:77:c5:d6:65:28:
         6b:33:09:f9:d9:d0:d3:62:47:10:83:89:ba:f6:da:15:48:2e:
         51:d3:6d:bb:08:b8:7a:b7:4d:88:bf:d7:7e:39:a7:70:3b:35:
         29:f0:9e:ed:3f:99:83:49:a5:b8:4f:e6:d1:02:f5:a7:a1:eb:
         eb:d9:c4:f7:82:f8:48:b4:0d:55:e1:d5:4f:b8:07:83:cb:42:
         74:f8:74:42:17:dc:eb:d2:8c:98:99:27:73:ad:b1:d2:3e:86:
         52:77:35:ef:8b:e9:8d:b9:a8:35:86:20:cc:04:ab:08:ae:81:
         af:1a:9a:00:af:58:6f:7b:b6:6e:26:eb:a9:9c:c4:74:a4:4b:
         4a:03:d1:77:4b:f3:b7:91:67:72:05:68:95:b1:ff:f1:70:9e:
         0f:6b:9e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:18:31 2026 by rpki-client