Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75d3c24e-bab6-4a1e-bc0d-905737818427.roa
File:                     75d3c24e-bab6-4a1e-bc0d-905737818427.roa (raw, json)
Hash identifier:          tp9lAFMREx44vrRVG0Z/62zo1sMk/drPKZ6Uyx0QGb0=
Subject key identifier:   EB:D7:78:0A:39:6A:45:13:77:EA:B2:A1:CE:44:0E:B4:6C:AB:6B:92
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       23B2D97987409EE99BD06F5AC7EC57D0062C3AD9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75d3c24e-bab6-4a1e-bc0d-905737818427.roa
Signing time:             Tue 04 Aug 2026 00:30:18 +0000
ROA not before:           Tue 04 Aug 2026 00:30:18 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        204.236.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b2:d9:79:87:40:9e:e9:9b:d0:6f:5a:c7:ec:57:d0:06:2c:3a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 00:30:18 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=619b72f5a34320618037fdbb0d77f0b447de8c3e4e1b7df62c38b867b6813a9b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b5:8d:59:49:1e:a6:3c:ed:9a:4e:10:6d:42:
                    6a:be:08:b7:9e:33:68:10:63:45:55:37:5b:d5:c0:
                    7f:91:59:d9:c4:ef:98:39:3a:df:91:a4:89:e0:4e:
                    0b:99:ad:cb:a0:e9:6d:2b:db:73:1e:1d:0e:61:b8:
                    20:f5:98:f9:c1:9b:8d:a6:28:e6:ec:ad:6e:d5:1b:
                    16:06:f1:e9:85:76:cd:cd:ed:44:05:4d:51:f0:f9:
                    55:ae:ab:fa:22:33:59:02:8d:bc:d5:b8:c6:74:3c:
                    8e:7f:7c:4e:d0:e9:e6:cb:3b:a0:fa:fd:b1:fa:a0:
                    8c:ad:10:82:bc:0e:56:c3:c8:41:40:1a:91:6c:6a:
                    ac:ad:59:7c:88:aa:8b:8c:0f:15:b0:1d:7d:d7:40:
                    ad:15:c6:ae:94:25:8d:13:c9:8b:e5:65:38:1c:c3:
                    c0:d5:75:2e:db:2b:2a:e3:dc:bf:59:e2:12:14:0f:
                    94:c3:d5:81:ff:b8:17:e2:1e:9f:f0:57:78:72:1b:
                    06:bf:a0:08:64:29:ec:2a:46:8e:95:3c:66:27:1a:
                    ad:14:c5:4a:61:3a:95:bb:e3:33:77:91:ee:03:1c:
                    0e:aa:b7:f4:e1:a3:25:83:b2:b9:63:54:29:29:6d:
                    08:5f:1c:9d:20:51:f5:8f:82:e2:53:df:e2:7f:20:
                    b2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D7:78:0A:39:6A:45:13:77:EA:B2:A1:CE:44:0E:B4:6C:AB:6B:92
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75d3c24e-bab6-4a1e-bc0d-905737818427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.236.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c1:38:c2:5a:ee:f1:f8:17:5c:66:3d:65:f7:42:3f:3b:05:e4:
         d5:e5:e6:be:31:f0:8b:c8:66:51:04:d9:33:5a:06:32:74:54:
         5e:7c:e5:b5:dd:60:c1:e4:b7:ef:ee:30:3c:1e:a6:6f:00:10:
         ab:b5:8a:1f:23:f7:20:d4:a8:10:3c:23:8d:39:d6:ed:68:42:
         21:3f:05:11:48:17:42:44:63:2c:47:9d:11:24:b7:66:59:08:
         31:a8:f0:7f:de:b3:35:0c:a9:59:29:bd:67:56:f3:46:d9:1a:
         45:32:58:74:ca:38:cc:24:ce:60:96:e4:bb:1f:2a:40:a5:ef:
         cd:a6:e5:d2:6e:57:51:21:ea:7b:d6:c2:b3:75:53:f4:45:d7:
         4c:c3:f4:0d:9a:fb:b5:86:5f:db:04:34:e1:18:de:2c:3f:60:
         cc:77:26:fa:b7:ce:d8:3d:c6:c1:73:40:8d:36:66:24:bb:c4:
         00:33:db:31:47:fa:17:f0:5e:f0:cb:7a:80:eb:5f:33:3f:c6:
         42:33:00:3e:e8:c6:c0:09:8d:09:ed:3c:7f:c8:19:6a:a5:5a:
         90:44:65:e9:3d:5e:58:c5:95:7c:b4:ba:73:f3:c1:51:e9:76:
         92:a8:1b:f5:bf:75:1c:2f:26:90:a1:7e:50:95:42:4f:07:b8:
         52:cf:87:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 17:09:53 2026 by rpki-client