Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56a4c90e-d5c2-475d-a4e9-7ae6f470dc75.roa
File:                     56a4c90e-d5c2-475d-a4e9-7ae6f470dc75.roa (raw, json)
Hash identifier:          qQeCmZWbCopjy6dB2vfHX+pGIJuwPXEPYjZLEYG69kw=
Subject key identifier:   18:69:BE:9B:06:94:D2:EE:7A:EC:F0:75:40:B1:FB:A9:4A:F9:63:B6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       78C0113CC87B8C13F1274FE440654AE035D0E773
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56a4c90e-d5c2-475d-a4e9-7ae6f470dc75.roa
Signing time:             Wed 29 Apr 2026 00:30:43 +0000
ROA not before:           Wed 29 Apr 2026 00:30:43 +0000
ROA not after:            Tue 28 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.40.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c0:11:3c:c8:7b:8c:13:f1:27:4f:e4:40:65:4a:e0:35:d0:e7:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 29 00:30:43 2026 GMT
            Not After : Jul 28 23:59:59 2026 GMT
        Subject: serialNumber=1772b282a46c4283e0150d7c4eeedeb4a04fb77676674f65ba78fd97ac4a5291, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:90:1a:e6:9a:00:8b:77:56:9c:90:c5:d3:72:
                    f3:67:97:29:da:86:68:eb:29:dc:67:1a:bf:30:22:
                    c3:92:d8:5f:b4:c2:13:e9:b4:e5:bd:21:81:f3:ed:
                    47:50:59:cd:bc:2e:e2:7f:73:b7:d8:5a:24:e2:52:
                    67:f6:ce:62:f1:71:60:16:1e:65:16:54:20:5b:f8:
                    72:83:f9:0a:f0:a1:01:52:b1:c5:a3:5d:f7:9b:1a:
                    da:11:4f:03:12:34:6b:41:b0:be:c9:9e:19:79:05:
                    d0:f4:0a:69:e8:2b:c3:a7:75:51:68:76:e2:f8:c8:
                    8a:05:94:70:b6:a6:62:91:8c:42:1e:a4:1d:35:98:
                    e0:6e:6f:09:9a:2d:b3:cd:d6:0b:a2:21:73:34:38:
                    0b:5d:97:d8:f2:c1:46:24:aa:db:b3:1d:ce:30:ce:
                    69:e9:05:30:40:63:c5:92:38:b0:2a:10:da:10:a2:
                    16:07:ed:fa:7c:3f:e4:69:8e:4f:86:01:14:e1:cc:
                    c8:a6:5c:04:55:aa:c0:16:72:7d:6b:23:23:5e:a9:
                    02:96:e2:17:fc:c4:2c:37:8c:ca:a0:9d:ea:0c:fe:
                    e8:ca:8b:38:98:2c:1b:7d:16:12:a8:8a:27:ce:0d:
                    eb:34:e4:5b:73:0c:a3:4a:f6:4e:5b:b1:cf:60:ef:
                    9e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:69:BE:9B:06:94:D2:EE:7A:EC:F0:75:40:B1:FB:A9:4A:F9:63:B6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56a4c90e-d5c2-475d-a4e9-7ae6f470dc75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.40.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b6:d8:49:e6:07:eb:63:6a:4b:8d:18:27:96:6e:05:7d:82:eb:
         cf:a3:48:b2:a3:da:fc:02:0e:f1:6a:54:e6:12:9b:14:d2:2f:
         03:9d:56:62:b3:4c:a4:ff:46:ca:77:17:93:53:b7:ae:ac:8c:
         0c:82:28:15:fa:6a:a5:81:a8:35:c4:2f:28:d5:e9:de:a4:28:
         e1:85:ea:13:60:98:13:79:c5:14:f2:5c:c7:64:0a:80:75:ef:
         ff:45:5f:16:2d:85:5b:8b:ae:db:9b:1f:c0:ea:48:31:17:ac:
         9a:43:8e:80:3b:85:72:45:3e:8b:58:62:f4:10:f3:ad:a0:49:
         f0:ea:13:2c:a1:e8:dd:91:52:dd:ad:a6:69:ae:7f:93:2b:60:
         d3:9b:c4:1c:0a:39:60:05:da:1d:4b:87:fd:ca:e9:5e:10:4f:
         e7:d6:86:20:0e:35:11:8f:4d:2b:cd:2b:f8:5a:79:33:81:1f:
         fa:84:dc:12:93:4a:4b:5c:ee:a2:ef:5e:3f:61:49:62:75:d5:
         2f:68:73:79:cb:ee:05:c9:0c:3a:af:92:5d:00:7e:f0:6e:be:
         7e:e1:8f:64:9e:94:28:6b:29:59:14:ad:2a:40:a1:5e:34:c8:
         0a:37:40:9e:f4:16:d8:61:f7:ef:01:8d:4a:72:6d:ae:d9:07:
         3e:ef:4b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 14:45:05 2026 by rpki-client