Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2629315-55fc-4ccb-bd08-0655076226c5.roa
File:                     c2629315-55fc-4ccb-bd08-0655076226c5.roa (raw, json)
Hash identifier:          RuDsHJL6pN0FMDWuPTYdwy9R5O6KPfkcvjF4O45D3vU=
Subject key identifier:   37:D5:41:62:85:F0:BD:8F:F4:AF:49:BC:78:C8:08:38:76:BD:47:65
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       138D19581A9672B95DF59A1AD491C30511198A7F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2629315-55fc-4ccb-bd08-0655076226c5.roa
Signing time:             Fri 07 Aug 2026 00:31:13 +0000
ROA not before:           Fri 07 Aug 2026 00:31:13 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        24.110.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:8d:19:58:1a:96:72:b9:5d:f5:9a:1a:d4:91:c3:05:11:19:8a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  7 00:31:13 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=98b16819edccbdfe92f3db1b1d9db6e86c45ec10e4afe4aef44ae432174d2c55, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bf:df:54:ea:e0:fa:a5:42:e4:b5:22:b1:b9:
                    68:22:40:06:4b:d2:85:e6:40:13:87:5e:50:49:c2:
                    f6:6a:72:b9:f5:f2:eb:45:8a:83:a2:f2:f4:fd:11:
                    43:7f:2a:74:35:9c:c2:dd:f0:f6:1e:c6:2a:9b:86:
                    8a:79:e6:4a:84:1e:1d:97:dc:d7:e0:dc:33:36:51:
                    76:43:77:04:78:cd:4e:75:38:00:1a:12:84:cb:33:
                    bc:f1:4e:69:70:df:c0:62:e6:e1:4c:77:5a:4b:8b:
                    e1:85:3f:e3:94:50:02:41:29:11:89:f2:6e:22:be:
                    7c:ea:b7:34:92:af:b1:58:92:b7:db:de:84:77:e0:
                    d2:fc:b2:0a:7a:f5:58:bd:91:d9:c3:ab:37:37:55:
                    02:0b:f9:bb:da:60:72:41:b6:c6:91:0d:a3:e2:72:
                    38:ab:25:e3:e1:fe:ce:55:a1:e9:6b:59:13:41:54:
                    a5:5f:99:af:41:fc:b7:1f:95:88:9a:b1:29:a0:8f:
                    30:1e:08:cc:bb:8f:ca:4b:0e:d1:38:95:eb:57:be:
                    63:90:d1:53:f3:17:b3:ee:a3:ec:c0:99:16:24:06:
                    46:5d:6c:03:a1:49:56:a3:74:95:be:95:0b:96:27:
                    44:4d:c6:84:73:54:a1:44:da:49:e1:f6:3d:6d:97:
                    de:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D5:41:62:85:F0:BD:8F:F4:AF:49:BC:78:C8:08:38:76:BD:47:65
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2629315-55fc-4ccb-bd08-0655076226c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.110.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:a0:2c:ca:e2:31:45:2a:c3:5b:3b:88:61:6b:7a:b8:d1:9b:
         53:38:91:9e:6e:f0:f4:7a:5e:44:c8:a5:17:08:ac:5f:67:29:
         df:0f:ef:73:48:f6:41:3a:1d:89:b1:46:c2:c8:62:a2:68:1c:
         e4:08:1f:e8:d6:1e:73:ee:00:fb:3e:1a:4a:2d:25:84:76:52:
         f7:10:12:86:92:a2:33:3e:e1:c5:bb:6d:4e:b4:47:02:90:a5:
         05:cc:3e:2d:28:9a:25:85:31:8c:8d:ea:de:e8:1f:d5:a5:bb:
         fe:a8:3e:cb:52:60:2d:2b:9e:ea:b8:ca:41:64:00:20:27:66:
         c4:56:3a:83:c2:46:1c:b7:72:69:fa:a3:36:b8:31:c2:09:15:
         56:4d:f8:0c:4f:67:ea:21:e4:1d:cf:e5:39:62:19:63:16:12:
         9a:e5:c7:7c:ca:88:0c:dc:3f:78:8d:7b:fe:95:2a:d2:b5:90:
         46:78:5e:d1:5f:fa:27:de:a6:a7:62:f3:7e:30:49:43:b9:2e:
         30:80:ec:78:f3:cb:5a:80:7b:f8:33:8a:8d:da:e8:96:28:b5:
         79:9d:b9:7e:d5:b6:56:5a:68:34:cd:53:12:25:b0:aa:19:a8:
         5f:69:ec:eb:cc:25:1d:b9:15:c1:d7:dc:fc:9c:4f:a9:ca:18:
         b0:0e:c2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:44:57 2026 by rpki-client