Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52a988e6-8b8b-44c6-8c68-26ab8fdedb35.roa
File:                     52a988e6-8b8b-44c6-8c68-26ab8fdedb35.roa (raw, json)
Hash identifier:          vz68Yby5fmfesREw3v4F/Q6W70RRFy5aCCH2tG322A0=
Subject key identifier:   29:49:11:AF:25:F0:06:FB:AE:A3:77:B3:EF:21:00:63:4C:16:27:42
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F5DE5B1F75AD055E0AC92B7B5316D5FF62C2B85
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52a988e6-8b8b-44c6-8c68-26ab8fdedb35.roa
Signing time:             Sat 01 Aug 2026 00:41:51 +0000
ROA not before:           Sat 01 Aug 2026 00:41:51 +0000
ROA not after:            Fri 30 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        204.58.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:5d:e5:b1:f7:5a:d0:55:e0:ac:92:b7:b5:31:6d:5f:f6:2c:2b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  1 00:41:51 2026 GMT
            Not After : Oct 30 23:59:59 2026 GMT
        Subject: serialNumber=832f284c4282aa614f8388dfd31e81504c6b52485fd498f12d34bc0abf1e1e4d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cd:3b:cb:b6:81:7f:d7:89:6b:5e:6d:e1:f2:
                    73:47:79:01:31:fd:c5:3e:13:c4:39:1b:b9:c3:1b:
                    94:ef:a2:ef:5a:6e:95:0c:3b:49:5f:3b:b7:c9:c0:
                    a2:3a:3e:88:61:73:78:d3:b6:ed:f4:01:ba:5a:3b:
                    c5:c0:9a:d3:e1:d0:ed:c2:47:c9:ca:6c:4f:46:11:
                    31:cc:02:64:68:b5:8c:9f:bd:34:e5:4f:57:0c:ad:
                    55:f6:b4:62:f4:7a:9b:c8:e8:17:cc:41:61:7f:3a:
                    48:59:51:41:34:b8:b2:0d:36:ce:3e:3f:e9:99:f5:
                    be:8a:6e:6e:92:1b:5d:51:f2:2e:4a:33:73:63:c7:
                    b4:ac:e9:d6:32:1c:ce:5c:55:b3:41:59:89:03:84:
                    00:71:90:8b:5d:b0:80:82:21:15:29:7a:f6:b0:56:
                    26:9a:37:88:6d:bc:ef:36:e2:f9:ed:a5:3f:34:5d:
                    9b:0d:84:91:4a:81:46:98:9a:41:d6:72:33:66:50:
                    64:96:30:8e:ba:d6:7e:b2:b6:7f:bd:c0:1d:1a:77:
                    55:b7:c6:45:0c:f9:7e:98:34:35:6e:f3:fc:d4:af:
                    7f:ec:1e:d1:29:bc:7b:99:29:8e:cf:e9:ae:f8:e4:
                    f5:71:92:1f:24:ef:e4:c1:09:2b:04:48:f5:ae:bb:
                    39:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:49:11:AF:25:F0:06:FB:AE:A3:77:B3:EF:21:00:63:4C:16:27:42
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52a988e6-8b8b-44c6-8c68-26ab8fdedb35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.58.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:19:9e:d6:0f:8e:ee:11:a1:f7:7b:34:07:ae:4f:e9:f9:e5:
         aa:41:3a:f7:f6:d5:f0:18:d6:33:71:f6:08:a9:82:0f:c2:f8:
         e9:20:f5:98:93:0c:b6:99:a6:80:dd:eb:ed:50:36:49:d7:09:
         9e:4a:99:69:8c:0e:6c:f7:17:63:b5:cc:00:7e:b2:34:36:5f:
         b6:4e:ff:e3:16:eb:5b:e3:9a:09:10:08:29:98:47:09:f4:7e:
         d5:f8:61:17:49:53:6b:98:d8:da:12:bd:bc:4d:d1:9a:ca:0a:
         93:3c:4f:cb:0d:ed:8b:8d:73:f4:e4:a2:ed:5b:0d:61:06:39:
         20:c8:c4:3c:33:69:bf:7d:8c:e6:b2:71:90:b2:76:bc:d4:56:
         13:16:f2:a4:a0:81:48:ae:47:9c:e7:b8:f4:53:2e:61:c8:cf:
         4e:93:9e:bc:08:97:00:50:5d:d1:c7:f9:03:6a:08:07:bb:a1:
         0d:69:19:36:fc:7a:ae:ea:34:e1:af:40:ce:10:d0:24:9d:71:
         6f:eb:12:af:5b:d3:be:f8:df:34:69:b1:8e:86:e4:19:f0:c2:
         2a:93:2d:9f:68:be:40:38:2a:4e:be:23:15:d6:5e:00:f9:48:
         1b:db:74:38:4c:4f:61:6d:8a:49:20:bf:15:1e:4b:52:86:38:
         12:be:eb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:43:40 2026 by rpki-client