Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51296aed-a82d-4a1c-bdf1-af3d39a04a18.roa
File:                     51296aed-a82d-4a1c-bdf1-af3d39a04a18.roa (raw, json)
Hash identifier:          lntkpu5zwQkjpE2r/WqkxrN/xBjLBbbpc1PzhWJc0d4=
Subject key identifier:   E6:F9:3E:E0:8B:C4:DE:39:C9:80:8E:1F:5F:AC:F2:23:74:4B:36:F9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6FFE68E964D590EA25E719F905709FD044395C2E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51296aed-a82d-4a1c-bdf1-af3d39a04a18.roa
Signing time:             Thu 30 Apr 2026 01:47:09 +0000
ROA not before:           Thu 30 Apr 2026 01:47:09 +0000
ROA not after:            Wed 29 Jul 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        45.33.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fe:68:e9:64:d5:90:ea:25:e7:19:f9:05:70:9f:d0:44:39:5c:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 30 01:47:09 2026 GMT
            Not After : Jul 29 23:59:59 2026 GMT
        Subject: serialNumber=4506eb80dd5b7c921d9c1501c8f0e237d82b3098c4cd6cdb2978b9dcb19c232b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1f:5c:77:c8:77:8d:cf:0a:e1:d9:f0:42:80:
                    2f:df:29:55:c2:1d:7d:4c:4b:f1:7f:b8:a7:a1:87:
                    c8:35:d7:08:69:7a:2d:5a:6c:f9:0a:b9:5b:16:04:
                    f3:c2:72:a5:d5:35:a5:38:0b:84:8d:ff:f6:82:41:
                    6f:5f:73:4b:f2:97:87:96:fa:c5:23:80:00:26:d6:
                    51:6d:f3:ee:0d:a8:9c:41:4a:1a:ca:32:33:77:26:
                    28:23:b7:a4:f1:b9:af:94:81:eb:f9:af:d2:d9:b7:
                    69:bc:1b:c8:02:42:b1:b5:ed:84:ec:75:f9:f2:74:
                    f0:bf:f0:43:fe:64:9a:3b:43:4a:93:b2:1d:44:e2:
                    01:87:35:7d:cb:5e:ef:82:29:e9:68:b7:84:7b:6d:
                    a2:43:31:0c:ac:28:e4:87:c9:65:54:b6:a6:29:c6:
                    e2:c8:67:82:2d:e6:50:97:4c:fb:7f:01:b5:b7:f2:
                    86:97:59:9b:a5:8a:23:6e:3e:8b:45:48:f5:55:73:
                    6e:11:43:04:f9:17:65:09:71:b1:1e:e5:fe:2b:96:
                    21:21:4b:44:4d:6a:5d:df:36:30:78:06:e9:c8:33:
                    e2:ef:c6:ec:9b:8c:a5:cc:42:ba:f0:ad:ff:1a:fc:
                    1a:f1:24:2d:76:b3:83:b5:41:5b:95:2e:f5:1b:c1:
                    dc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F9:3E:E0:8B:C4:DE:39:C9:80:8E:1F:5F:AC:F2:23:74:4B:36:F9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51296aed-a82d-4a1c-bdf1-af3d39a04a18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.33.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:0f:b2:c1:d2:99:61:b7:63:68:db:3d:49:4a:b7:c4:0d:57:
         a9:c0:dc:e4:70:a4:ab:ae:79:41:82:91:38:aa:d0:7d:49:b2:
         b2:de:37:34:1e:a9:dd:03:51:7b:82:a0:7e:6b:c8:09:e2:b7:
         c6:77:e1:e3:6e:2d:16:12:bc:ff:43:53:1f:b9:8e:24:41:38:
         03:d9:2d:f3:b7:41:ea:09:4e:51:21:df:15:06:6c:4c:14:d5:
         30:f6:f6:14:31:bf:1b:32:c4:68:af:76:eb:fd:49:a3:93:0a:
         68:f3:f6:a8:c8:80:23:68:00:11:38:8a:69:de:99:da:01:6c:
         65:f9:75:77:fc:2c:78:3c:62:bb:27:d1:e9:e1:8a:2a:f5:60:
         56:ac:31:25:32:63:ce:67:10:78:19:88:0b:4e:02:8d:0c:b2:
         d8:29:fa:72:5d:59:33:c8:ab:be:b0:6e:53:44:7d:28:60:dc:
         96:c7:ec:a6:ca:d4:e5:af:37:40:04:ab:5a:91:65:1c:1a:99:
         9b:1b:a7:ce:d6:59:bc:a0:d1:90:40:59:98:d4:c3:40:49:fa:
         d9:5f:e7:54:19:e0:d8:5d:a4:27:31:c7:f3:b6:37:66:cf:75:
         b9:95:32:87:d8:3f:20:4e:7b:ea:b8:0b:6b:77:6e:8e:6f:93:
         eb:41:a0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 22:22:24 2026 by rpki-client