Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/655d9c54-1648-4b17-915a-5b868df7eca4.roa
File:                     655d9c54-1648-4b17-915a-5b868df7eca4.roa (raw, json)
Hash identifier:          GMolvfMCjOaoU1wRquxNY/14cZ6n/H0U0LcYBusYAlw=
Subject key identifier:   49:59:50:5B:4F:40:11:2E:5E:A5:BF:F6:6B:63:93:B1:B6:7D:8A:A8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       32D28076FF2E5DBF0CB2D48DC89C972053C40331
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/655d9c54-1648-4b17-915a-5b868df7eca4.roa
Signing time:             Wed 29 Apr 2026 00:31:25 +0000
ROA not before:           Wed 29 Apr 2026 00:31:25 +0000
ROA not after:            Tue 28 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        75.79.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d2:80:76:ff:2e:5d:bf:0c:b2:d4:8d:c8:9c:97:20:53:c4:03:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 29 00:31:25 2026 GMT
            Not After : Jul 28 23:59:59 2026 GMT
        Subject: serialNumber=63cd732c782170a1faae836314662eb23644373d5e53e966778493f988fd66c3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:21:6c:41:9a:a2:a9:87:fa:66:05:3e:24:df:
                    c2:b7:e8:54:fe:de:dc:fe:d9:d4:f5:2d:78:94:0d:
                    1c:e3:b9:3a:bd:f0:60:5a:89:a4:68:89:b1:97:d6:
                    51:f5:61:2a:89:8d:fa:b6:a4:60:4e:cf:18:10:02:
                    a4:55:13:00:39:ab:67:06:70:e4:de:c1:e0:1c:94:
                    d3:e6:b2:01:d1:b6:af:2c:c3:d4:41:be:90:77:34:
                    77:c0:df:85:1b:89:49:4a:94:0b:cb:35:45:18:9d:
                    90:7e:0e:94:a9:5d:be:96:8f:f2:86:ac:ba:0f:bd:
                    1f:87:f5:8e:25:bb:32:11:02:58:ea:3b:82:f0:ee:
                    b1:1f:33:83:b5:f4:b4:92:9f:e3:66:61:62:fa:9a:
                    db:48:2d:f6:d9:b5:ed:41:59:75:ea:d2:4b:8a:67:
                    ae:94:a0:65:a4:ac:b3:7c:f2:f7:9a:63:e3:1b:8b:
                    5a:73:50:66:f7:17:6a:9f:5a:9d:18:cd:c8:ea:ea:
                    df:d7:2b:a3:8d:a2:4e:13:cd:14:24:26:82:3e:78:
                    f7:79:83:41:32:fc:44:d5:14:05:7b:4d:04:15:12:
                    f2:e5:c5:f0:3b:39:c4:4c:3a:4c:cb:3e:78:9b:81:
                    91:92:fa:9d:58:fb:79:25:6c:2c:1e:d3:34:f2:dd:
                    8e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:59:50:5B:4F:40:11:2E:5E:A5:BF:F6:6B:63:93:B1:B6:7D:8A:A8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/655d9c54-1648-4b17-915a-5b868df7eca4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.79.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         41:3c:b5:ff:12:00:aa:0f:7c:65:3b:e1:86:96:9d:44:6b:68:
         4f:48:fe:39:84:56:34:ea:3f:50:e7:31:15:a8:d0:a6:f3:c2:
         d8:d2:06:2e:b9:0a:e4:42:a6:c6:bf:83:c4:75:15:a3:a9:bd:
         c5:d1:be:c4:ef:dd:dc:36:ed:c0:b8:68:a4:60:f1:f4:2e:e2:
         c8:8a:46:65:3f:5b:1d:6f:34:34:e1:f2:86:c7:da:18:2d:1f:
         9d:98:c3:90:d8:3b:5f:38:77:4e:3d:a1:76:5e:ec:86:43:3c:
         b6:c2:20:71:a6:64:bf:a7:e6:20:b9:23:3d:a6:7e:03:7b:b3:
         b7:23:29:c4:3a:0f:a7:34:53:62:e6:81:ba:69:f2:96:89:a7:
         cb:40:a8:ab:9f:04:d8:2c:d3:77:f4:72:c8:12:6d:dc:a1:12:
         41:55:7c:d8:68:cb:4d:2f:fa:0d:bb:b7:33:26:7a:68:b1:b1:
         27:6e:6c:d3:6d:bf:da:f5:f2:19:c6:e5:69:61:fd:21:0d:0a:
         5e:2b:80:72:22:13:a1:22:c3:3c:2f:c9:ca:f7:bb:5b:75:af:
         b6:6e:14:44:fc:9a:2f:da:d1:c5:20:3e:12:6e:3a:1a:d8:54:
         2c:41:d8:33:41:20:1b:43:ca:ce:a3:3a:b2:44:c5:9f:ec:ef:
         64:df:7c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 14:46:58 2026 by rpki-client