Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f53e86e-9190-41c5-ad32-08c02983e9bd.roa
File:                     2f53e86e-9190-41c5-ad32-08c02983e9bd.roa (raw, json)
Hash identifier:          tQEjMb/4plTJOf9GiapaKGF4zpcTsOlOPTql4PIphQ4=
Subject key identifier:   8D:02:55:20:DB:26:3B:16:DA:85:D0:A2:62:96:33:D6:A5:EF:7D:5C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       63ED8124491696DB1C658530FFBAB71D779371C4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f53e86e-9190-41c5-ad32-08c02983e9bd.roa
Signing time:             Mon 03 Aug 2026 00:10:10 +0000
ROA not before:           Mon 03 Aug 2026 00:10:10 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        13.184.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ed:81:24:49:16:96:db:1c:65:85:30:ff:ba:b7:1d:77:93:71:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 00:10:10 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=822fbd744ee37d738dc33d54e8812e0165a5c4d84628c7964240db9df891ff31, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7d:9b:4e:89:f0:b5:fb:12:ce:5a:72:db:24:
                    ad:57:32:75:ff:7d:f5:d4:ae:19:2a:2e:02:03:2d:
                    6c:e7:e3:54:c2:4c:97:64:c8:f2:7e:b1:ce:37:a3:
                    43:41:a8:4a:d0:7c:e0:ae:0b:2b:f2:87:85:96:d8:
                    d3:a9:d1:be:8a:a9:8f:01:45:01:6d:34:a5:bb:c6:
                    73:6a:88:2a:b3:79:7a:70:c6:7d:96:6d:4b:58:80:
                    dc:9f:dd:0e:21:64:cc:fc:77:b6:9e:8d:3e:f3:e2:
                    be:be:66:9f:ad:7b:f1:b7:77:8a:52:05:d2:39:26:
                    6f:d4:a2:a3:78:64:2c:dc:92:b8:e2:77:54:29:f9:
                    27:19:9c:2c:69:c2:09:3b:c1:9e:bf:05:49:dc:89:
                    32:fa:01:ac:9e:ef:e7:f5:fc:5c:17:18:ab:e0:24:
                    b2:da:0a:23:1d:8c:12:a4:eb:98:56:3f:0f:8f:e2:
                    55:8a:63:e7:3e:d7:54:2e:13:f1:d7:10:35:6c:2c:
                    a0:b3:84:10:08:5d:54:f0:21:78:ad:f4:15:3d:07:
                    96:1d:82:a3:d9:86:9f:e6:34:58:a6:a2:15:52:20:
                    3a:05:34:f6:46:66:dd:c4:ff:eb:d0:18:ee:86:a9:
                    cb:13:c8:8d:8d:7c:ba:ba:0f:c5:fe:34:09:ee:15:
                    e2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:02:55:20:DB:26:3B:16:DA:85:D0:A2:62:96:33:D6:A5:EF:7D:5C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f53e86e-9190-41c5-ad32-08c02983e9bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.184.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         56:dd:24:e8:07:39:f7:28:41:0f:52:4e:1b:4d:8a:02:04:49:
         c2:d6:12:be:f3:5f:5d:21:70:db:08:a3:72:7a:b3:9c:b4:0b:
         f6:b4:68:a4:67:5e:c7:cb:f8:6f:0d:66:98:e1:37:12:15:4e:
         b8:29:fb:94:73:d7:3f:aa:9a:91:17:a9:2c:c3:c3:29:f4:6e:
         87:99:60:88:e2:c9:af:04:0a:ef:3f:79:cb:83:05:83:32:84:
         0c:59:d7:60:14:da:3e:71:2f:76:29:52:af:51:41:50:f4:25:
         f8:3b:84:2a:e6:43:5e:17:a9:69:71:3f:3d:46:93:52:6d:ec:
         15:16:22:86:b0:b7:fd:48:21:b6:bd:fa:02:f8:59:a6:8a:84:
         e5:c0:ba:16:0f:38:0f:9b:19:1c:ab:73:8e:85:e1:2f:08:fa:
         92:eb:53:91:65:55:25:d0:f1:76:f7:34:fe:b3:41:86:4f:cc:
         71:fe:4e:db:3f:a9:b9:7f:01:ad:10:d3:2e:9e:60:ff:d0:a1:
         bf:aa:42:77:40:f4:e3:0d:d5:ef:00:9e:17:74:e2:58:8b:67:
         13:27:4f:cc:8e:5f:ee:22:c4:f8:1a:2b:ac:bc:78:5c:86:01:
         b4:4c:ba:93:75:52:62:80:26:6c:72:83:bc:3a:a9:2c:a4:04:
         70:3d:6b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:42:09 2026 by rpki-client