Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a00bee3-feac-414d-bebb-09f510dd2e83.roa
File:                     6a00bee3-feac-414d-bebb-09f510dd2e83.roa (raw, json)
Hash identifier:          FYyrK3vaBHYcqE0G1JE771Fbih6XXttj84J0731U2Co=
Subject key identifier:   CD:70:5A:4F:E6:45:34:26:14:F7:AF:EE:2D:C8:5C:D7:07:FA:1A:E1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5AE72F79375E820C253770074EEECACED34094B3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a00bee3-feac-414d-bebb-09f510dd2e83.roa
Signing time:             Fri 31 Jul 2026 00:30:18 +0000
ROA not before:           Fri 31 Jul 2026 00:30:18 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        136.18.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e7:2f:79:37:5e:82:0c:25:37:70:07:4e:ee:ca:ce:d3:40:94:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 31 00:30:18 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=773bd5aabfc0972e674c96376e18eaa5ef88765da0d831a5976b67a139af86ef, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:e3:8c:cb:88:27:f3:1a:8a:a7:81:85:d2:
                    7c:e4:58:40:a7:1c:a4:92:4b:66:63:6a:d1:3f:cb:
                    66:11:f9:46:69:4a:ca:12:b7:0a:a9:78:dd:9a:80:
                    25:01:ec:1d:59:29:b3:ce:ad:72:77:2e:84:7a:ab:
                    f9:d3:8d:d9:47:fa:72:5a:67:d8:4e:f7:23:b6:0f:
                    91:80:16:fa:bb:a4:e4:60:f5:36:8d:25:83:91:d6:
                    33:76:6d:b8:b3:a8:b6:f8:f9:00:85:39:cd:10:c2:
                    49:cd:db:c1:a2:20:5a:46:35:2f:68:e3:31:ad:b3:
                    ae:1f:3a:3b:77:1c:77:45:e4:61:4e:ab:14:11:27:
                    a0:a3:80:c7:03:65:9f:85:3f:13:40:1b:c0:3b:0c:
                    bf:c3:a8:53:be:90:b9:60:f0:9e:2d:4e:a6:9b:5d:
                    7c:37:bc:72:61:c8:51:b8:9c:aa:ea:7c:86:d0:32:
                    aa:72:ed:b5:e8:80:b5:39:73:d7:ed:d9:2f:51:f6:
                    af:27:f9:b6:bc:70:80:a9:97:e8:b0:20:80:48:f2:
                    a0:5a:bb:61:3d:37:f1:b3:2c:53:ad:6b:45:a0:48:
                    89:a7:02:c7:85:cf:f3:71:9e:8f:f2:47:e7:6f:65:
                    c8:d0:a7:d8:8f:a9:b8:66:04:81:df:53:29:dd:9e:
                    8f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:70:5A:4F:E6:45:34:26:14:F7:AF:EE:2D:C8:5C:D7:07:FA:1A:E1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a00bee3-feac-414d-bebb-09f510dd2e83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:1f:83:55:25:da:de:15:25:63:c1:ab:21:8d:26:5d:2d:d8:
         35:94:3e:5f:e1:1d:22:b6:4f:8f:79:f3:0b:b9:e6:cd:a3:1f:
         46:86:bf:92:62:c2:c8:bd:b3:d6:ef:09:5c:a0:bc:15:92:41:
         14:95:f0:07:b2:61:a2:21:6f:fd:d6:0d:a8:47:b4:e9:e1:64:
         44:0c:b2:14:73:83:ab:df:da:0a:ea:74:21:2d:31:a8:2f:1b:
         a5:8f:04:e2:c6:13:ee:62:6d:f7:dc:18:e6:8e:04:e4:65:dc:
         0d:d3:e6:3a:1e:f7:2e:4c:35:ae:9c:87:93:d9:63:5e:3e:f2:
         2c:47:b0:b4:38:29:b6:bb:6d:0b:73:56:5d:8c:da:af:c5:be:
         10:e7:a5:95:f9:24:75:cc:bd:12:60:14:8d:8d:d5:db:a7:53:
         49:20:d9:85:50:6b:d2:86:77:d7:7a:5f:f1:40:60:9c:42:77:
         a3:74:22:6c:a8:ba:1e:f1:a0:1d:22:98:b7:24:19:d9:49:b1:
         ea:41:7f:e1:ba:ff:51:d1:32:29:e4:5e:00:a5:30:81:9a:9d:
         07:3d:f7:85:45:52:5c:db:59:bd:80:bc:93:bc:ea:7a:57:7f:
         dc:91:39:47:8d:f6:0b:cb:7b:4b:c0:12:7a:a2:5b:ae:89:ff:
         14:c4:1e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:55:04 2026 by rpki-client