Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b54e68ec-2ef0-4546-8cff-e011c9f42fb4.roa
File:                     b54e68ec-2ef0-4546-8cff-e011c9f42fb4.roa (raw, json)
Hash identifier:          MNlJ5IBcjYvH0oY87ZbzE/UZ3Cdo0JVefoDn3Vi2E3g=
Subject key identifier:   FF:41:3E:23:1F:94:D2:84:5E:A6:95:FA:06:00:52:26:F9:1F:C5:99
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7AE17BFE8EEB25BCBD5B592BE093F8F8AAE4AAB8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b54e68ec-2ef0-4546-8cff-e011c9f42fb4.roa
Signing time:             Fri 01 May 2026 00:00:07 +0000
ROA not before:           Fri 01 May 2026 00:00:07 +0000
ROA not after:            Thu 30 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        76.223.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e1:7b:fe:8e:eb:25:bc:bd:5b:59:2b:e0:93:f8:f8:aa:e4:aa:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  1 00:00:07 2026 GMT
            Not After : Jul 30 23:59:59 2026 GMT
        Subject: serialNumber=c4dfb935203230e1a61a69288e455d4a7a54d2e63921624e725a98718bd91bcc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:21:cb:50:22:c7:38:4d:f9:e8:f1:2c:36:43:
                    65:8d:4d:71:21:86:71:73:fd:2a:b6:2c:8d:36:b8:
                    d4:28:fc:d4:4b:e8:a9:b1:e1:9f:19:3e:2d:35:72:
                    0c:79:25:63:e9:91:69:31:dd:96:b9:5a:a3:e1:be:
                    a3:1e:76:84:18:bb:30:a4:c2:5e:98:c7:97:38:88:
                    61:8f:4f:e7:63:11:3f:6a:5f:64:13:ad:09:3f:69:
                    72:c5:b1:7c:12:85:2d:61:5d:9c:44:2d:a2:ba:51:
                    37:b0:c3:6e:93:7c:83:ac:a4:ee:13:0d:31:d9:67:
                    67:44:54:dd:f5:43:0e:cc:e9:83:0f:22:7a:26:81:
                    e0:f0:fb:53:ba:33:00:c1:37:30:09:fe:2e:19:c8:
                    25:86:fd:88:6b:4c:75:1f:50:25:0b:b1:9c:e0:83:
                    52:48:6f:9a:13:19:ba:e5:de:08:85:54:0a:db:b5:
                    ae:8e:56:29:e2:86:dc:ed:36:fb:ed:d3:71:ae:3c:
                    fb:9b:41:23:9a:d1:1f:c4:26:82:62:71:7c:14:d2:
                    e8:3c:8f:94:6d:0d:28:d2:6b:c3:d4:bf:f8:cc:bb:
                    c0:55:86:33:87:e6:1e:fc:ca:fd:db:52:38:d0:09:
                    5f:65:46:e8:e7:a3:12:9e:0d:86:73:3e:af:ac:14:
                    f5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:41:3E:23:1F:94:D2:84:5E:A6:95:FA:06:00:52:26:F9:1F:C5:99
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b54e68ec-2ef0-4546-8cff-e011c9f42fb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:a7:61:95:62:3c:42:1d:c9:17:96:f8:08:5d:00:ad:c6:e4:
         99:c0:6f:50:6d:91:f6:66:d3:d5:f5:f1:cd:17:79:eb:1f:2a:
         53:6e:39:da:db:86:3e:47:af:24:84:29:f7:14:85:d1:89:d3:
         6c:b5:9d:a4:89:f1:a2:cf:75:18:29:57:5e:dc:19:1e:8c:54:
         cd:d0:e5:ee:ec:20:fd:a0:2d:02:ed:01:b4:6f:23:71:9a:08:
         8a:70:50:45:6f:6a:09:e7:78:80:12:9a:b6:e9:92:78:dc:1d:
         97:79:04:7b:90:cb:44:3f:15:3f:6a:e9:4e:a3:61:11:75:57:
         31:ff:3f:98:03:5f:49:f3:f0:b2:2a:5e:52:0c:ac:c2:76:48:
         7e:25:67:42:34:96:63:8b:92:ca:30:18:fa:b2:5a:a8:1d:ef:
         a6:54:d9:71:fd:3f:44:e9:ff:c7:1f:6a:30:4b:b1:23:f2:21:
         8f:73:98:72:53:8d:95:45:de:1a:63:b8:c5:bd:e5:cc:76:6b:
         11:be:49:73:47:20:33:9c:68:b4:6b:05:15:d2:1c:71:d4:3d:
         3c:2d:c2:38:3f:f9:ab:af:c1:3d:1e:0e:ff:ad:e1:60:8b:07:
         48:24:83:2d:7e:b5:85:db:46:35:0a:c5:2e:55:c3:20:b8:36:
         f7:08:81:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 15:29:40 2026 by rpki-client