Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7b2c2e7-de4d-4255-9797-e8c7f644bc96.roa
File:                     e7b2c2e7-de4d-4255-9797-e8c7f644bc96.roa (raw, json)
Hash identifier:          CB/Pqrf/vp1PMmRNN+QcbvMYGycePmE7GmJg1z8EYYU=
Subject key identifier:   A5:BD:71:0C:B6:F3:F0:FB:FD:15:2F:C6:22:F4:DF:38:B7:47:1B:56
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4C79C0FD2619A8EF8C4F8901A14F9F7A7E0C3540
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7b2c2e7-de4d-4255-9797-e8c7f644bc96.roa
Signing time:             Wed 05 Aug 2026 01:01:10 +0000
ROA not before:           Wed 05 Aug 2026 01:01:10 +0000
ROA not after:            Tue 03 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.84.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:79:c0:fd:26:19:a8:ef:8c:4f:89:01:a1:4f:9f:7a:7e:0c:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 01:01:10 2026 GMT
            Not After : Nov  3 23:59:59 2026 GMT
        Subject: serialNumber=4b2d9fe3d8508cdcb50be5854c9cf2ae39ae89820b2dc7232e3a62f5e714872e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a3:b2:55:90:92:0b:f2:3d:4c:00:4b:54:a4:
                    e0:58:f3:2e:b3:8a:1c:85:71:50:93:13:4c:ff:11:
                    d7:df:c6:35:3f:11:08:3f:de:ad:4a:ad:ee:b6:9a:
                    cf:85:92:4c:41:e0:41:0c:e2:72:75:0c:5f:5d:ca:
                    e4:f4:9c:9b:95:33:cd:0d:eb:af:23:06:1a:e3:ff:
                    80:fa:bf:7f:6d:e5:ba:b0:b3:30:43:7e:40:e7:74:
                    c3:be:46:a5:fa:1f:61:13:91:f2:23:02:57:cc:a0:
                    eb:79:68:32:a7:61:2c:2a:4b:73:c1:90:ab:88:62:
                    c1:d3:37:b0:96:c0:d2:b9:f9:42:8f:f0:13:ce:df:
                    3c:45:ed:52:a8:57:81:04:10:9a:bd:86:30:ea:d3:
                    5b:5f:8b:88:78:b8:83:36:6b:ee:89:81:89:d3:66:
                    5c:d2:2c:a5:97:b3:f6:0b:67:ea:28:e4:6d:04:42:
                    08:95:59:7a:90:79:d1:80:22:1c:62:00:4c:13:84:
                    5f:8d:b0:29:19:91:bb:04:af:92:13:98:35:0d:0e:
                    0a:57:01:00:32:c5:4e:ba:32:15:bf:3a:b7:16:33:
                    e3:ec:8a:fb:d9:ab:01:d0:32:78:f5:c6:24:4f:f3:
                    84:6c:16:8c:a4:f1:44:9b:5b:ba:66:33:27:0e:6f:
                    ae:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BD:71:0C:B6:F3:F0:FB:FD:15:2F:C6:22:F4:DF:38:B7:47:1B:56
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7b2c2e7-de4d-4255-9797-e8c7f644bc96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.84.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         12:c4:93:0f:41:49:8b:70:ba:60:79:00:35:26:79:48:3d:78:
         40:01:06:3b:b3:29:ea:29:2a:1e:ae:e6:be:3a:ef:55:da:72:
         04:8e:09:65:7b:37:00:78:ee:e7:e1:23:74:6b:4d:18:57:c2:
         85:4c:60:e7:df:f0:2d:c8:e1:52:0d:d2:ae:b5:70:18:43:d1:
         6d:9c:ad:f7:5f:22:15:01:8a:32:5b:83:d4:40:ac:43:9a:4f:
         09:d9:9c:9f:f0:d3:20:9c:8a:4e:f8:d2:4e:f9:c4:c4:ed:72:
         15:2e:cf:24:28:b7:c0:15:4d:37:c8:a1:f3:63:a6:be:0e:ec:
         bc:2c:06:79:b8:10:cd:de:a8:bf:53:22:6d:06:1c:d4:6b:27:
         09:57:86:7f:59:22:b7:00:8c:c1:84:45:cb:93:67:64:ec:fd:
         90:ee:24:48:f8:7c:f6:49:32:3d:92:e6:6f:b5:7e:b6:4a:c5:
         06:ae:9a:f2:e8:6d:ae:a5:a9:e0:a8:52:b4:36:43:70:90:a7:
         5b:59:0d:db:b1:01:30:d5:ab:0e:8b:7b:7a:9e:e3:c5:1a:55:
         c8:6c:6e:b9:da:4f:03:00:c3:47:ef:f5:62:cc:d5:c5:a1:9d:
         25:ee:74:bb:9a:ab:f8:49:62:05:62:ff:01:78:8d:cc:93:0a:
         86:a8:69:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 13:19:10 2026 by rpki-client