Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b448195b-84f3-4e2c-beb9-33cee532dce4.roa
File:                     b448195b-84f3-4e2c-beb9-33cee532dce4.roa (raw, json)
Hash identifier:          SHIPKEYzh7hA5m0DN7IajTUB7PnV6BWrJ1wLH0GxEO4=
Subject key identifier:   FA:A2:2F:1A:4E:26:30:ED:7F:AD:B7:47:F7:0D:C8:75:DC:9D:25:54
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       50265029877BF1B19988046BA04D03047EE84C80
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b448195b-84f3-4e2c-beb9-33cee532dce4.roa
Signing time:             Mon 03 Aug 2026 02:00:35 +0000
ROA not before:           Mon 03 Aug 2026 02:00:35 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        107.22.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:26:50:29:87:7b:f1:b1:99:88:04:6b:a0:4d:03:04:7e:e8:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 02:00:35 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=7685c911271eb267303fe33fc42a4c8c91cc9d87b4d8623206a3a33af9a06991, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:5d:4d:a8:f0:d5:b9:77:29:c6:04:7e:21:
                    1b:bf:41:e8:09:14:1b:e3:c6:9d:4e:29:fb:13:51:
                    58:a1:5a:8c:0a:03:dd:d3:1d:d3:de:73:87:92:f9:
                    5d:e7:a2:fb:41:28:51:66:1b:7d:bc:1a:3e:8e:0c:
                    db:61:72:69:c6:da:be:7f:30:1c:df:c5:bd:67:cb:
                    ad:34:43:75:ee:2c:60:fe:22:6b:92:9a:34:7f:e3:
                    c5:23:50:a9:f8:93:6f:59:e4:b7:55:27:a0:9b:ba:
                    ca:6d:17:19:ef:a4:97:b2:19:0e:54:39:76:34:c9:
                    ff:d5:37:6e:18:fc:d7:5e:00:0a:3d:59:2d:c8:fa:
                    de:31:7f:9b:85:12:23:0c:b0:04:97:fa:08:62:82:
                    5a:a3:fe:a7:bc:75:f9:17:0a:1c:65:9a:b5:65:11:
                    3b:37:eb:9a:df:fa:af:4f:b1:64:8a:00:c1:de:b5:
                    d3:2d:c6:2e:a5:1d:bd:5a:05:29:1b:77:99:b7:f2:
                    35:27:e5:23:59:13:3e:70:fc:49:58:9f:53:eb:fd:
                    b1:b4:17:98:31:72:01:f6:c3:c4:db:30:43:5e:73:
                    1c:06:49:9b:56:12:11:1a:bc:6b:c5:98:ee:a7:e9:
                    7e:7b:3c:79:83:4f:e1:bc:6b:c2:be:e5:a3:d0:3d:
                    60:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A2:2F:1A:4E:26:30:ED:7F:AD:B7:47:F7:0D:C8:75:DC:9D:25:54
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b448195b-84f3-4e2c-beb9-33cee532dce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.22.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:05:c7:cc:28:70:5c:56:08:b2:ea:48:5f:65:5f:3b:d5:8b:
         55:c1:24:7c:f7:44:42:7f:6c:29:3c:ec:1f:16:30:8e:96:55:
         a0:b4:18:37:32:49:e9:33:78:7e:72:2c:90:42:e2:4d:6b:88:
         2a:99:37:73:40:9f:21:4e:56:66:32:56:45:fa:5f:76:2a:0d:
         f7:48:f8:7b:88:18:12:5d:84:18:bf:8c:ba:d5:fa:6b:f6:43:
         87:52:9e:b2:b2:5e:5e:01:a3:d8:bc:41:b5:30:87:c4:0f:47:
         c5:a7:67:ff:8e:87:70:10:61:f5:7a:4e:3c:0c:7a:e1:ea:51:
         cc:16:bb:3b:be:27:16:55:a7:c7:7b:90:a3:4d:2a:2a:18:bc:
         57:e1:c9:14:e4:be:65:f5:02:f3:24:8c:24:2c:77:ee:89:6a:
         f5:62:29:6f:5e:67:dc:b6:a3:47:f6:23:b8:1e:1f:de:ef:ed:
         20:36:17:aa:c3:14:d9:75:14:56:1a:70:41:0f:31:b6:69:ff:
         e3:64:b5:02:9d:c2:a7:b4:e0:4f:40:ef:83:08:25:69:cc:8f:
         8e:12:96:6e:05:73:1d:fc:df:40:4f:03:53:89:b4:95:d9:e9:
         e8:5a:28:f2:3a:f8:5b:4f:6f:68:f4:3e:f1:e7:1a:b4:84:92:
         bc:e4:bf:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:37:23 2026 by rpki-client