Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dad3826f-c445-41df-ba08-d08040b8b288.roa
File:                     dad3826f-c445-41df-ba08-d08040b8b288.roa (raw, json)
Hash identifier:          GKnRZfUpA6eJLB0g1pjRDT/D9AySzPQkKfkfrLxlvxg=
Subject key identifier:   2D:71:49:F4:80:56:7B:59:D6:8D:0B:B7:A7:67:16:A8:59:86:73:C7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       250A2297ED875007030D372E86388D0FAF68CD0B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dad3826f-c445-41df-ba08-d08040b8b288.roa
Signing time:             Mon 27 Apr 2026 00:11:19 +0000
ROA not before:           Mon 27 Apr 2026 00:11:19 +0000
ROA not after:            Sun 26 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.155.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0a:22:97:ed:87:50:07:03:0d:37:2e:86:38:8d:0f:af:68:cd:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 27 00:11:19 2026 GMT
            Not After : Jul 26 23:59:59 2026 GMT
        Subject: serialNumber=d49cc4227cc063bf3166133cb53cc357f27598980d3f8fa1b18a6bab76841425, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:30:19:e7:6f:f2:ef:4a:93:a7:19:0f:9c:
                    ab:d5:7c:e8:e0:5d:d2:fc:b8:7e:24:01:a2:de:41:
                    85:54:f6:18:ce:93:b0:00:89:9a:b6:39:e5:26:16:
                    1a:25:63:ba:0d:8a:86:a5:86:e5:d8:91:27:ca:cd:
                    d5:e8:17:b2:d0:84:b4:e6:a9:89:a6:ec:14:1e:f7:
                    5c:95:4e:9f:f1:ef:c0:0a:6f:f2:74:20:b2:86:5e:
                    43:2f:8c:45:aa:cb:cd:32:5e:96:89:61:f2:fb:9c:
                    28:e9:44:e1:a8:ba:c1:12:26:83:c2:5d:7c:d9:3d:
                    9f:bd:90:82:af:54:6d:21:58:8f:da:32:1a:a9:1b:
                    d9:da:30:c7:41:4e:f1:56:38:4f:6a:fd:33:f6:fb:
                    80:b7:30:bb:d2:cb:85:f8:44:b1:a3:82:e5:0b:26:
                    ba:06:12:78:d0:e8:e4:05:ef:bb:14:20:2c:2e:8f:
                    b2:a0:8e:77:a8:8d:51:54:b5:d8:4b:f8:76:ce:69:
                    15:d6:42:96:47:49:a3:dc:2f:f7:3e:73:09:33:a1:
                    df:94:e2:d0:83:a9:84:08:5c:81:f2:95:8d:82:49:
                    55:55:d0:83:9f:00:90:3d:6a:77:67:c4:7e:ca:c0:
                    fe:86:70:2c:ab:c9:ba:1a:ea:0e:53:6f:e3:f3:ca:
                    54:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:71:49:F4:80:56:7B:59:D6:8D:0B:B7:A7:67:16:A8:59:86:73:C7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dad3826f-c445-41df-ba08-d08040b8b288.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.155.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:77:49:68:af:1e:3f:bd:a8:88:46:f6:2c:0b:2d:1a:e8:76:
         59:f2:e7:ab:4e:40:14:70:68:ff:14:61:c3:69:73:5b:80:81:
         29:68:e9:67:2a:ad:e8:a7:3f:7a:ff:09:9f:c9:56:5e:92:43:
         9a:a8:da:34:c1:62:c4:1a:0d:aa:06:66:fa:b5:82:54:6f:61:
         8f:b3:66:37:18:e8:de:05:f4:01:29:9d:4a:e8:0e:14:5b:88:
         97:7d:b2:0a:2e:33:8c:3c:e4:99:f7:5d:ef:5a:2f:9b:a2:c3:
         6c:43:3d:c5:fc:57:2c:68:16:36:7d:3e:e9:7a:30:e7:2d:f0:
         4c:50:16:0d:49:78:10:c2:8b:33:ae:3e:24:17:a9:2f:81:88:
         fb:9e:b2:66:30:b5:97:71:a6:48:89:bd:c7:9e:38:3f:5a:b9:
         4d:0e:87:2b:4c:71:93:86:8d:df:5a:3c:c3:ee:ff:89:06:e7:
         3a:91:e3:d3:d3:ed:70:3e:d9:f5:96:ee:6a:3d:f3:d3:58:96:
         cc:48:62:9f:5e:7a:d7:6e:13:30:f8:42:07:74:f5:83:55:73:
         4a:bd:02:ad:45:88:12:f5:d6:a4:ac:7f:71:e6:1f:cc:90:c6:
         b2:4f:28:7a:5b:0d:4f:ad:52:24:0b:e8:6d:91:db:e4:d7:ad:
         ec:94:d5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 16:14:01 2026 by rpki-client