Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f8be97b-27d6-4b35-9036-8e015c6e63f2.roa
File:                     8f8be97b-27d6-4b35-9036-8e015c6e63f2.roa (raw, json)
Hash identifier:          7UUjG+JhDIWuggGNyCCBKou6K67Xfdq1UiGLMpomvhA=
Subject key identifier:   54:CD:07:82:39:4C:04:51:EC:88:A6:83:DC:BD:70:C3:6C:9D:19:66
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0E724B618911F8B214B2658291C96E38EF8C9A9A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f8be97b-27d6-4b35-9036-8e015c6e63f2.roa
Signing time:             Wed 05 Aug 2026 00:30:27 +0000
ROA not before:           Wed 05 Aug 2026 00:30:27 +0000
ROA not after:            Tue 03 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.178.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:72:4b:61:89:11:f8:b2:14:b2:65:82:91:c9:6e:38:ef:8c:9a:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 00:30:27 2026 GMT
            Not After : Nov  3 23:59:59 2026 GMT
        Subject: serialNumber=b51d4b3f532a6cc0894986aa86cac786abb8244a00c994351378c09a5c4fba99, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a8:33:80:8a:b2:3f:22:29:d7:2e:b9:fb:25:
                    db:b3:8c:a0:16:c6:ae:10:ae:45:f2:5c:f3:49:46:
                    74:f7:20:b6:79:23:54:1e:7a:95:c4:c0:e6:76:a5:
                    af:4d:e9:0f:a3:a2:80:dc:cf:29:4f:57:2b:44:1f:
                    c3:42:c3:d5:3e:0d:49:4b:79:e0:54:bc:0b:82:eb:
                    79:99:65:79:94:07:db:c8:0f:bc:b7:0c:de:ea:75:
                    24:8c:dd:4e:4a:a0:76:49:07:71:fb:07:99:72:28:
                    0c:b6:9a:ad:ce:6a:44:ed:b6:9e:d0:a7:cf:33:1d:
                    5e:dd:35:34:87:71:16:6b:32:31:7a:25:82:d6:2c:
                    81:76:8a:0e:db:09:7d:5d:02:16:52:5e:8b:fa:ae:
                    d4:e0:4c:fb:0d:b2:91:35:f7:e7:68:1b:47:1d:b4:
                    83:6c:09:48:10:fe:1c:43:65:4e:78:55:6f:bc:9d:
                    ea:65:bf:4d:88:cd:ef:62:8c:a4:a4:e5:a5:2a:45:
                    34:f9:e8:25:c4:9b:94:48:3f:9e:3b:02:98:fd:3a:
                    50:60:46:6c:d5:0e:72:74:3c:a8:ba:8e:62:36:4f:
                    8a:32:c8:15:7f:c5:ee:44:09:e8:52:c4:a0:1c:06:
                    bd:90:8f:f3:cf:42:50:3b:5e:5e:26:01:63:81:9a:
                    fb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CD:07:82:39:4C:04:51:EC:88:A6:83:DC:BD:70:C3:6C:9D:19:66
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f8be97b-27d6-4b35-9036-8e015c6e63f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.178.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2d:85:53:4a:ad:07:01:40:2a:13:0a:22:13:ae:f1:49:15:18:
         b3:66:d0:bc:62:1b:69:56:c9:32:6f:fb:46:c4:40:09:ef:55:
         c4:30:ca:ea:91:8c:06:04:e8:98:ee:10:cd:27:ed:f8:f2:7b:
         e5:4c:a9:a0:0c:1b:45:f7:16:15:a0:46:b0:63:eb:30:4f:c4:
         81:74:05:e4:0e:a1:08:c8:b9:69:fc:01:bd:40:e4:94:13:b1:
         c8:b7:3e:4b:e2:c1:ba:4b:69:19:f6:f8:d1:ec:72:b5:3b:36:
         b8:f8:98:9f:e4:3d:3f:78:7a:3a:17:51:98:f3:bc:aa:02:a0:
         cd:21:b3:be:29:3d:8f:d1:63:93:a7:22:4f:d4:4e:0a:1f:5c:
         1f:58:35:95:78:b1:44:ad:98:89:cb:49:98:2b:75:6b:8d:e2:
         ef:e6:6f:5e:45:a8:44:b3:81:3c:3e:dc:52:3e:dc:18:45:70:
         d6:46:ed:e0:62:d9:04:e1:9e:db:8f:2e:3d:13:65:38:16:1b:
         68:21:5e:61:fc:f3:38:78:fb:2e:24:19:dc:3e:ef:63:ab:04:
         9d:7d:c4:c2:96:b4:b0:9a:38:15:5d:2e:9d:c0:d8:4f:4c:2e:
         6d:07:a6:34:0b:e9:d9:7a:82:57:6e:05:23:5d:26:25:3d:39:
         ee:f7:fa:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:44:06 2026 by rpki-client