Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/307c8777-94f5-471a-ad53-d91a28c4a233.roa
File:                     307c8777-94f5-471a-ad53-d91a28c4a233.roa (raw, json)
Hash identifier:          GkmfJx+7mIJAnAcFbeyzTU9p8MLvMoTFdbHKMC/zAw8=
Subject key identifier:   A0:A6:68:87:92:DA:AB:07:B5:F9:10:7C:E5:4C:A7:4F:36:97:1F:33
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6B58037A73ED27D9C92A3A0B3FA4E7DFBEBC5D94
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/307c8777-94f5-471a-ad53-d91a28c4a233.roa
Signing time:             Sat 08 Aug 2026 00:00:05 +0000
ROA not before:           Sat 08 Aug 2026 00:00:05 +0000
ROA not after:            Fri 06 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        184.200.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:58:03:7a:73:ed:27:d9:c9:2a:3a:0b:3f:a4:e7:df:be:bc:5d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  8 00:00:05 2026 GMT
            Not After : Nov  6 23:59:59 2026 GMT
        Subject: serialNumber=98f79875f0fd6fd542daad13bdf5336b5abbd37bf814137ba0f1c310f020522c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6a:82:1f:17:71:53:00:0f:60:3b:8f:98:d4:
                    d9:38:b4:d2:d2:37:5c:c9:9b:11:ff:34:bf:08:d1:
                    82:79:36:68:7a:04:bc:19:db:9f:7f:5e:c9:53:64:
                    8b:e3:50:d6:d5:76:63:1a:a4:3c:5d:f0:06:81:d5:
                    0d:85:62:d2:40:d3:a2:a1:83:f7:02:a9:0a:a9:9b:
                    c9:f1:3c:ec:43:8e:60:39:3e:7a:6a:d0:03:75:e5:
                    7f:f8:b1:c7:4d:1c:6d:c3:e7:28:18:f6:6f:49:cd:
                    72:e0:58:7c:97:24:32:ce:8d:01:e9:39:d8:2d:e3:
                    e5:16:30:54:8e:27:85:f0:e6:3e:fe:b1:46:7b:b0:
                    8a:c5:dc:92:b3:88:0e:ed:6c:06:ea:a5:d5:b0:83:
                    aa:a6:12:e1:79:04:8f:f3:85:d3:74:65:85:fd:5a:
                    45:6f:fb:9a:b9:48:ef:e1:5e:f9:95:6f:2c:61:d9:
                    46:0f:82:44:78:d3:26:ad:6a:76:47:d2:55:32:74:
                    8a:07:18:d5:72:9a:1c:da:da:c4:f5:7d:db:01:25:
                    e8:04:fc:82:5f:c6:34:ce:9a:54:35:a1:97:10:7a:
                    d9:23:b6:16:a8:0e:e5:86:ce:1a:93:a5:5f:cd:0b:
                    ba:fe:a8:7e:06:b1:b0:01:65:f0:1d:3e:a1:58:4e:
                    35:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A6:68:87:92:DA:AB:07:B5:F9:10:7C:E5:4C:A7:4F:36:97:1F:33
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/307c8777-94f5-471a-ad53-d91a28c4a233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.200.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         18:5e:16:26:1b:2f:15:0a:5c:86:2f:f1:5d:53:50:e8:66:5e:
         c3:5a:a5:5e:ab:90:17:c2:94:b5:6c:c3:cc:0c:b1:ba:2f:69:
         5f:e8:7a:bb:72:d2:04:c2:c0:bc:a8:ec:9b:cb:4b:34:31:3b:
         90:db:d6:08:d5:ac:fc:47:72:b9:a1:03:36:26:b6:3b:6a:41:
         04:30:75:c1:e4:f8:9a:47:e6:de:3c:7b:47:2e:b7:77:90:c9:
         23:e3:d0:13:54:33:7d:3f:24:2d:c1:ea:61:36:4c:7d:89:47:
         cf:3d:8f:cf:ec:ed:1b:2f:e2:1d:57:68:5b:61:d6:66:2c:a8:
         91:84:6a:ef:b8:ab:fd:a7:46:bb:59:30:66:c2:68:83:14:61:
         17:e9:46:06:1d:99:df:a6:d6:2a:14:db:af:16:09:eb:52:20:
         f8:26:0d:81:45:be:fe:92:04:c2:e0:a7:95:77:ed:76:e3:46:
         aa:7b:0c:65:d4:c3:ca:b2:2a:fa:dd:18:26:8c:b9:ab:d3:4b:
         3c:77:f7:e7:26:ea:6a:1d:89:63:e7:70:44:ab:fe:a7:78:5f:
         00:cd:14:bd:57:ce:0c:8e:49:f7:65:25:7a:04:88:f7:ad:9d:
         81:f5:43:71:7f:8a:1c:6a:5b:e6:55:4b:28:13:51:ad:eb:13:
         37:4a:29:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:10 2026 by rpki-client