Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2d8e8fb-a5c4-4694-9cc4-b5626e072ab0.roa
File:                     e2d8e8fb-a5c4-4694-9cc4-b5626e072ab0.roa (raw, json)
Hash identifier:          qBmZGV4jAe3+tPqvPk3oocEGqC3HyMOgwWBMCQyrEGk=
Subject key identifier:   C6:19:A2:89:B5:E1:04:2E:93:E2:D0:FB:5D:48:63:F1:B7:4C:F4:B9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       470A63CCFF9E0ACE23109044C6B4D54C5AF9563C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2d8e8fb-a5c4-4694-9cc4-b5626e072ab0.roa
Signing time:             Tue 28 Jul 2026 00:20:12 +0000
ROA not before:           Tue 28 Jul 2026 00:20:12 +0000
ROA not after:            Mon 26 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        198.211.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:0a:63:cc:ff:9e:0a:ce:23:10:90:44:c6:b4:d5:4c:5a:f9:56:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 28 00:20:12 2026 GMT
            Not After : Oct 26 23:59:59 2026 GMT
        Subject: serialNumber=11be4b1d22e2eed33cf4137139c81e0796aac09c22cbc8536c0a2a3a808a851c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:27:2c:3a:af:5a:f1:82:55:57:c1:ea:a2:cf:
                    9c:90:30:ea:da:2c:c1:b8:4a:b9:a6:fe:45:58:2a:
                    72:ca:a6:ef:fa:ca:da:1f:fe:dc:aa:03:d7:c4:a0:
                    94:1e:e9:64:e8:db:79:2b:21:71:27:b6:c2:fb:69:
                    44:1d:16:b6:a7:58:49:90:13:12:79:3a:ba:1e:74:
                    1e:c1:f9:01:3b:cf:bf:b5:44:4c:62:52:a3:91:ca:
                    14:16:22:c6:10:c1:3c:95:e6:d0:7b:a9:ad:f2:90:
                    b5:b3:20:8d:4e:78:82:b4:c6:ed:ed:50:13:de:84:
                    e2:a1:f9:bb:56:d2:19:92:11:a2:7f:90:e8:4d:71:
                    ac:dc:16:c9:53:b1:5a:6f:ea:1a:b0:9a:af:a0:f1:
                    53:f8:71:cd:cb:bc:aa:0e:38:13:43:6a:ea:32:60:
                    7f:00:8c:3f:a2:a2:46:b9:3e:84:a0:4a:ab:5e:0a:
                    a4:8c:aa:aa:c8:92:a2:f6:14:1c:78:77:b8:f4:ad:
                    24:92:08:be:96:0c:f5:1d:44:a9:d4:4b:d5:e1:8d:
                    95:33:f0:9b:eb:4f:0a:4a:61:0b:c5:e6:93:5f:fb:
                    e2:f0:e0:01:6d:10:d5:23:ad:69:f0:82:f9:0b:ca:
                    7b:d7:1c:bc:bb:75:47:59:e6:78:f4:87:2d:85:5e:
                    b7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:19:A2:89:B5:E1:04:2E:93:E2:D0:FB:5D:48:63:F1:B7:4C:F4:B9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2d8e8fb-a5c4-4694-9cc4-b5626e072ab0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.211.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         90:88:73:e8:f8:61:6f:fa:f2:26:ba:50:df:2f:6f:5e:f9:95:
         4d:c0:7a:3f:ec:46:b4:e8:81:fb:09:d6:fd:c0:c8:73:b9:57:
         f4:d1:21:ad:28:13:20:f7:40:98:d5:58:07:7d:95:d7:17:00:
         ad:b0:ba:f1:c9:92:da:1b:46:7b:9d:ae:60:f3:f1:56:a6:6e:
         44:8f:f1:ab:19:aa:4b:87:65:ce:f9:9c:24:ec:bc:d0:86:f1:
         f8:c9:3a:1c:64:71:0a:60:d1:50:75:9b:a2:71:c6:59:d1:46:
         35:0d:bd:dc:7c:ca:71:29:1a:fa:c8:4a:e8:45:62:0a:18:39:
         7d:c1:cc:07:24:e0:75:9d:02:eb:87:f3:50:9e:38:7d:3f:44:
         ab:57:bc:de:70:b6:09:69:a8:92:e7:47:5a:b1:c8:37:7e:39:
         09:e6:f7:f3:e0:57:ef:fc:87:14:fb:11:71:af:92:4b:dd:bc:
         e7:6e:9a:d3:a8:0b:de:bd:bd:ee:9d:f0:34:cd:76:fa:ab:fd:
         92:ef:25:b5:1e:53:84:4e:b1:6f:2f:ab:dc:f6:e5:17:0f:27:
         12:8c:2b:07:fa:36:1d:37:01:48:2a:95:cf:c7:d7:00:61:9f:
         40:8e:17:17:4a:60:48:d9:d0:c0:c2:15:a2:07:ce:86:74:16:
         60:10:96:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 11:37:59 2026 by rpki-client