Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a55b9668-0898-4096-8bd0-529dad81c1b8.roa
File:                     a55b9668-0898-4096-8bd0-529dad81c1b8.roa (raw, json)
Hash identifier:          6zRZr2AJZIIZM0dgFosQ+M2guB9srrMT5Xt61ROBvG8=
Subject key identifier:   73:DC:57:B1:E8:71:80:BF:63:E5:9B:B1:7D:93:EA:61:86:60:17:CC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3BD2B5A4023CF9A871EAB71EBA58CC81F96BA245
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a55b9668-0898-4096-8bd0-529dad81c1b8.roa
Signing time:             Wed 05 Aug 2026 00:30:21 +0000
ROA not before:           Wed 05 Aug 2026 00:30:21 +0000
ROA not after:            Tue 03 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        57.180.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d2:b5:a4:02:3c:f9:a8:71:ea:b7:1e:ba:58:cc:81:f9:6b:a2:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 00:30:21 2026 GMT
            Not After : Nov  3 23:59:59 2026 GMT
        Subject: serialNumber=2bf46133d018693f8e6175782441c54b7ec13e73a587ebe751d0e54dc2b3590b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a1:35:1f:0d:b6:d0:7b:25:ee:50:a0:7c:98:
                    4b:dc:b7:b0:72:59:f5:bc:e1:48:81:bf:52:26:51:
                    1c:04:89:d3:a7:35:80:92:36:4c:e3:c6:03:6d:52:
                    03:f7:a3:8a:7a:1e:75:f4:0d:02:5d:83:05:89:86:
                    ee:e1:73:fd:0b:ff:36:bf:f9:c2:ea:f1:ff:04:38:
                    72:17:35:ec:3d:9f:36:f3:62:e9:38:03:42:f4:5f:
                    0c:b1:5d:a1:5d:92:8c:d8:08:43:95:7f:cd:9d:04:
                    89:40:75:f4:25:8d:ea:74:27:4c:7e:77:35:f5:ed:
                    c6:e2:e5:e8:6d:92:f5:04:e9:68:3a:93:60:7b:39:
                    ae:a0:52:d5:1e:0f:a1:14:85:39:d9:d9:65:ef:3b:
                    4c:66:93:fc:3b:0c:e3:58:24:32:74:d0:3f:aa:2b:
                    6c:e9:a8:4d:7f:bb:18:2c:e6:1d:60:62:b1:ea:1f:
                    68:62:df:94:01:73:05:2d:b9:05:08:d4:52:fe:f8:
                    79:7b:28:53:f9:ee:41:c1:58:c9:73:34:36:ca:57:
                    38:99:15:92:f6:50:66:71:5c:6f:7f:93:d8:51:ba:
                    31:38:b5:0e:49:70:f2:45:5e:5d:45:be:b8:a3:48:
                    c0:f6:31:ec:7f:2a:59:9e:ac:a9:ca:71:86:d1:93:
                    70:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DC:57:B1:E8:71:80:BF:63:E5:9B:B1:7D:93:EA:61:86:60:17:CC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a55b9668-0898-4096-8bd0-529dad81c1b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.180.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         56:d5:d7:a8:66:d4:56:cf:8e:9b:17:15:4d:8d:fc:0f:34:89:
         70:82:7c:a9:33:e6:c3:68:93:03:3e:ee:90:45:a7:2c:0c:22:
         a2:24:b6:df:f3:6e:0e:4b:fc:81:e1:1a:9d:99:92:9f:7a:41:
         c7:50:d5:54:04:46:80:66:54:af:f1:85:4f:70:98:fd:b7:a2:
         eb:ae:74:da:bf:e5:32:ff:d1:9e:c8:78:f9:74:25:ab:ee:d6:
         48:c8:f1:4f:73:b0:7f:c4:41:c4:84:7e:24:d0:bc:89:69:a6:
         a5:bb:f1:a5:f5:30:07:a6:31:81:7a:4a:65:04:de:c7:40:3c:
         22:7f:19:87:ca:dd:48:aa:d7:3c:1c:6a:ef:6f:a1:e7:ce:03:
         ae:bf:5b:41:8f:40:c3:24:3a:94:33:f7:a8:3b:a2:b4:5c:9b:
         41:3d:45:80:cb:62:ea:74:be:b3:2a:65:84:d9:3b:fd:69:59:
         fd:c0:26:c1:2e:51:fd:f3:ea:49:18:7e:c7:75:33:f0:c0:fb:
         ed:a5:50:56:e2:3e:61:46:a6:0e:2f:ce:87:45:ff:7b:c4:20:
         52:46:6f:a6:26:5c:4b:1b:69:78:30:47:74:f4:2e:81:29:be:
         2e:fe:63:05:10:1c:e5:7b:e3:6f:53:f7:44:6e:f4:6b:16:fb:
         c4:57:2c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 20:45:05 2026 by rpki-client