Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be713b82-ae33-4ba7-81a1-ce725d0392dd.roa
File:                     be713b82-ae33-4ba7-81a1-ce725d0392dd.roa (raw, json)
Hash identifier:          8RzNSEsFMymHlbB1Y6nMBNeatTKxzF7//1aXNgqDGGY=
Subject key identifier:   E5:C0:2D:18:59:1B:97:56:54:8E:17:B5:0B:E6:BF:19:8E:A5:4F:C6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       724799B0F6C9CD31E58C1FDA24FD43E94AD6818B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be713b82-ae33-4ba7-81a1-ce725d0392dd.roa
Signing time:             Tue 19 May 2026 00:41:00 +0000
ROA not before:           Tue 19 May 2026 00:41:00 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        57.193.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:47:99:b0:f6:c9:cd:31:e5:8c:1f:da:24:fd:43:e9:4a:d6:81:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 19 00:41:00 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=f38a61a2cb80b963e518d0d41b99fa0955ed6eb18c5ce19c5a53aab029d97a30, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b6:d3:6a:72:4c:2f:51:f1:c4:71:21:a6:67:
                    d1:36:84:d6:e1:ef:73:24:96:a8:67:df:30:5d:2a:
                    b8:7f:59:1c:a3:3a:b4:63:08:4f:be:48:5f:a6:e2:
                    ba:0e:43:f2:c6:c7:07:b7:a0:e0:e0:56:b9:c0:c5:
                    fd:22:e3:8f:22:23:52:2a:34:61:43:c2:0f:a1:7f:
                    95:13:37:01:d4:05:ee:94:75:f5:e1:65:62:5b:bc:
                    c5:ba:2d:97:d1:5c:45:b7:bb:f7:a9:dc:33:37:ec:
                    ce:e1:04:ae:a5:07:b8:e0:fa:1e:ea:93:c2:a5:55:
                    60:9b:97:bc:5a:0a:6e:f5:39:9f:af:65:16:6f:13:
                    0d:03:48:c6:91:a5:4f:db:49:dd:21:78:3b:3c:18:
                    a0:32:17:0b:e3:67:ff:4a:0a:e4:b7:70:29:c1:22:
                    67:8d:43:dc:78:de:25:42:93:78:da:c9:d3:98:37:
                    76:f6:1f:d5:66:0d:7c:d7:43:ea:55:fb:86:2b:9f:
                    a8:55:57:52:b7:e0:cc:cf:b4:8a:e8:26:74:4f:93:
                    29:89:14:f5:43:4d:a0:35:13:bd:ef:72:76:2a:f7:
                    c2:d2:e9:7b:7b:43:52:b1:82:2a:c3:ec:93:d7:be:
                    24:a2:7b:32:cc:53:4b:cd:fd:b6:87:af:1e:c5:0b:
                    83:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C0:2D:18:59:1B:97:56:54:8E:17:B5:0B:E6:BF:19:8E:A5:4F:C6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be713b82-ae33-4ba7-81a1-ce725d0392dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.193.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0a:dd:a9:44:4c:5d:73:62:af:39:a4:35:96:db:0b:1f:60:69:
         31:dc:38:10:8e:71:25:4b:fa:94:3f:c4:61:25:31:35:a5:18:
         b0:14:25:5e:66:75:54:ac:36:bf:f7:52:6c:d3:25:23:b2:94:
         2f:17:57:6f:ff:ac:02:65:6d:e4:b1:46:66:e9:f1:c0:d3:d9:
         02:28:a6:ca:7d:9f:e7:9f:fd:35:70:cb:76:4b:41:a9:14:9f:
         57:a5:16:0d:9a:02:b7:07:1d:9f:1d:45:36:e8:7d:2a:be:c7:
         44:98:b1:ca:45:ad:42:3f:15:14:c0:71:da:93:d9:d3:10:d4:
         f8:db:e8:36:9f:c2:2f:63:98:a4:d4:e0:f6:c0:c2:d1:4b:20:
         45:ac:3e:d2:f9:3e:10:ba:9b:7b:f5:91:cf:fe:72:a6:ca:59:
         3b:8a:c9:ca:7a:ae:51:7f:36:27:4b:77:e5:7e:26:42:bb:3f:
         2d:a5:20:6c:59:33:8a:4e:01:a4:4d:09:8a:05:03:a7:1e:9e:
         01:01:28:9a:9f:8b:75:76:cb:19:73:6a:d7:1d:61:43:d5:78:
         f1:8d:8b:99:cd:1a:5c:35:63:41:2c:0e:37:d0:f5:9f:96:2e:
         d9:e5:d3:b5:84:30:a2:30:6b:b0:34:92:ff:98:a2:70:e8:ab:
         eb:9d:a3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:02:48 2026 by rpki-client