Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0db5c76-ecc7-4c54-8f92-c0a1476b062b.roa
File:                     e0db5c76-ecc7-4c54-8f92-c0a1476b062b.roa (raw, json)
Hash identifier:          L6Fmv4FMh2LePDFQ9WzwKZE68kn65q5UT/kW4GXVWi8=
Subject key identifier:   A6:71:A0:72:28:F8:22:A5:44:56:CF:4F:85:2B:CB:35:C0:6A:C0:67
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3623534E7890297EBD81507B53FC3CA0DC297702
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0db5c76-ecc7-4c54-8f92-c0a1476b062b.roa
Signing time:             Sat 02 May 2026 00:50:05 +0000
ROA not before:           Sat 02 May 2026 00:50:05 +0000
ROA not after:            Fri 31 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        13.134.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:23:53:4e:78:90:29:7e:bd:81:50:7b:53:fc:3c:a0:dc:29:77:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  2 00:50:05 2026 GMT
            Not After : Jul 31 23:59:59 2026 GMT
        Subject: serialNumber=f06366468dce6f85157a7983b5517e858d689bd9c54ca3af9b88cdbc4f53022f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9a:85:07:f5:0d:70:85:d3:b7:cc:d7:ec:f3:
                    21:b9:80:47:93:80:0b:88:c4:81:5a:0a:ae:b7:10:
                    69:79:08:0e:fc:07:b6:72:bb:08:f7:e1:80:f5:2d:
                    bd:5a:d8:0f:68:f6:8f:b7:d0:98:16:92:b3:a5:8e:
                    cf:0e:69:70:9c:f9:91:4b:7d:84:64:b0:aa:9a:cf:
                    3f:57:b6:fe:09:6b:66:fe:35:38:10:96:ab:6a:74:
                    1e:3b:5e:e5:f9:1c:e3:0c:33:ce:6c:65:4e:c7:72:
                    43:15:d2:f5:5e:c8:61:45:9d:05:a5:15:50:f9:71:
                    80:0f:49:9d:84:53:13:18:1f:73:d0:7f:c0:9a:c2:
                    60:5d:08:76:e7:f4:6e:f6:36:b5:78:54:0e:f2:8b:
                    ab:40:f6:32:eb:f0:bb:26:aa:c3:33:67:fe:d3:c6:
                    a2:58:19:b0:30:21:a3:fa:f7:86:10:f7:98:52:5c:
                    c8:48:ea:b5:bc:7a:1c:dc:98:56:61:ca:6b:41:49:
                    eb:a9:2b:50:dc:80:80:32:dc:25:24:80:df:a1:b0:
                    ea:a5:fb:f8:bf:0c:53:1f:a5:1c:77:a7:37:f8:a3:
                    44:48:fb:ca:3a:38:fd:7d:08:56:01:fa:9d:d5:c0:
                    73:86:7c:c9:b7:47:d0:ed:70:b7:de:e9:a9:b0:87:
                    0f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:71:A0:72:28:F8:22:A5:44:56:CF:4F:85:2B:CB:35:C0:6A:C0:67
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0db5c76-ecc7-4c54-8f92-c0a1476b062b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.134.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:3c:2a:fe:c9:d3:52:3f:d5:67:95:e6:ef:50:7b:3b:63:30:
         c6:4d:17:5f:b5:fb:df:1e:37:c9:6b:09:61:d4:63:ba:3d:0b:
         64:58:09:3b:a9:26:89:51:07:e6:e7:2e:76:e1:c3:33:bc:1e:
         8d:09:8f:06:00:e4:9f:c2:af:6d:d4:78:81:6b:e2:a2:84:a1:
         26:0b:7c:5b:b9:aa:fb:c3:af:ee:ed:70:50:df:82:80:13:82:
         c3:2a:f8:ff:6e:36:a0:9b:f6:6c:b5:a6:6d:b3:44:03:80:79:
         65:27:00:84:13:f4:41:12:cc:87:3d:87:9c:f5:f5:e5:5b:4d:
         9a:11:59:ed:f1:5c:ad:9c:17:34:0d:1e:54:a0:33:a0:0b:9b:
         65:62:25:44:9f:1b:fc:5b:1d:29:07:ed:d2:aa:bb:17:ac:63:
         86:9a:f2:00:03:f4:da:74:a4:b1:6a:82:19:0d:01:b9:12:cc:
         6c:6e:4a:a4:bb:5a:be:da:ba:f9:dd:2e:6d:a7:c2:a6:8a:f1:
         fc:a1:c2:60:86:be:e6:a4:05:dd:bb:9c:c1:1d:8a:5d:2d:cb:
         a4:bf:d7:64:12:02:81:ae:0c:b6:8f:1b:96:22:86:d8:57:92:
         63:04:d9:89:77:52:eb:71:25:80:71:a3:57:cb:db:56:a8:55:
         f8:4f:43:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 14:48:57 2026 by rpki-client