Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7ece882-658c-4358-bbe1-874d6cd93cfb.roa
File:                     c7ece882-658c-4358-bbe1-874d6cd93cfb.roa (raw, json)
Hash identifier:          Fmd5lhcds6EuN4PyNTqfjz3ho3C2/69gcTispvVR7mw=
Subject key identifier:   7F:BD:F3:4A:2F:09:96:3C:2D:8E:A6:CB:B4:14:F1:B3:86:98:B6:FE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4C61873828F377D46F4A2C5DDCE1674B9D3A8C8A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7ece882-658c-4358-bbe1-874d6cd93cfb.roa
Signing time:             Sat 25 Jul 2026 00:21:47 +0000
ROA not before:           Sat 25 Jul 2026 00:21:47 +0000
ROA not after:            Fri 23 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        64.233.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:61:87:38:28:f3:77:d4:6f:4a:2c:5d:dc:e1:67:4b:9d:3a:8c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 25 00:21:47 2026 GMT
            Not After : Oct 23 23:59:59 2026 GMT
        Subject: serialNumber=255cba0f483cea1cf157aa729602e3ea79b172883dd1bbe4c2552a6c2b4c83cd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e9:89:f2:7c:24:f4:76:a7:71:f6:84:f5:7b:
                    0a:0f:11:09:82:f6:e0:3d:52:a3:e1:39:a9:34:1d:
                    c7:58:7f:68:91:24:1e:39:5e:fb:3b:28:e6:32:eb:
                    d4:d9:51:01:e3:e9:ce:4f:9c:ff:9e:69:01:1a:16:
                    b6:71:39:2d:3d:46:61:f1:ce:78:36:44:53:86:4a:
                    6c:f7:84:98:4c:b3:4e:2c:e6:d0:4a:ea:4b:a9:c7:
                    50:da:f5:d7:65:af:b9:ff:5d:7a:cc:cc:ad:9b:50:
                    1d:59:9b:d8:ec:9a:0d:f0:65:e3:8e:9b:50:75:fe:
                    4d:26:ea:2e:e3:3a:0e:7a:ab:4f:b1:a9:d2:6b:05:
                    96:ca:69:d6:76:23:ac:d7:25:a1:b0:d3:45:ee:26:
                    43:85:6f:d8:14:e8:0c:0d:ab:9d:a6:82:d9:a4:53:
                    2f:d4:57:0f:cb:d6:bd:83:b4:ad:a2:ff:d7:14:c1:
                    3c:ac:d2:22:ae:62:93:32:ed:6e:8a:b1:bf:4b:85:
                    e3:a4:29:c8:ee:53:03:83:50:df:16:aa:7e:f1:e5:
                    4b:5b:3b:ab:64:14:7c:3e:1b:04:63:d9:21:36:cc:
                    7e:b0:b7:a8:43:1e:37:e0:74:61:f1:46:e1:09:0b:
                    95:58:d8:61:f2:1b:f1:49:92:35:89:00:f0:96:fa:
                    36:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BD:F3:4A:2F:09:96:3C:2D:8E:A6:CB:B4:14:F1:B3:86:98:B6:FE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7ece882-658c-4358-bbe1-874d6cd93cfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.233.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         76:04:bf:e8:d8:ef:6a:5d:87:15:51:34:e5:8a:84:15:f0:c1:
         9f:0a:b2:97:36:ee:f0:28:8d:95:fe:25:0b:40:50:db:87:fe:
         4f:ce:a1:ae:07:c4:b9:86:fd:0d:65:86:36:48:47:ae:83:39:
         61:e7:56:e8:1c:db:7a:dc:ed:dd:0d:23:2f:ca:0d:5f:4b:ae:
         3e:55:6d:7f:f0:ed:af:de:8a:02:4c:ce:ca:8b:bb:40:2a:9f:
         89:2a:5c:c4:d4:cf:9e:4d:15:e1:35:2a:a8:2e:4f:97:73:42:
         1f:22:8e:5f:fa:2b:4c:41:89:3c:09:2b:40:83:6c:65:a5:65:
         ca:43:e9:b8:3e:dc:33:bc:2a:49:5f:02:24:4a:82:50:fa:c4:
         36:76:bc:b9:07:1d:9b:f1:b5:6d:04:49:aa:3c:dc:43:41:f5:
         c9:0c:7a:0e:12:c2:29:f8:5c:38:db:d9:65:2b:e9:7b:8e:e4:
         41:27:cb:58:28:eb:55:41:7e:5f:1c:53:12:09:aa:dc:7c:9b:
         49:44:c4:38:7a:fc:a8:2b:5a:1c:34:d9:23:e1:1f:f1:8f:be:
         8d:2e:e0:f6:d2:ef:e6:30:b3:6f:39:11:51:92:fb:35:a3:8d:
         15:c7:1e:c7:ab:71:bf:48:c4:51:77:25:01:0c:f5:68:04:7d:
         5d:94:9a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 06:43:03 2026 by rpki-client