Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faa6075c-9e02-411e-8e1f-b81753289412.roa
File:                     faa6075c-9e02-411e-8e1f-b81753289412.roa (raw, json)
Hash identifier:          xMRT89HDte6qIkUZwqlk/toYF4GtFD+SEOa5sceo3MY=
Subject key identifier:   27:A1:ED:F8:1E:12:53:83:19:A6:75:33:8E:56:93:6D:CE:DE:5B:F1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0856EC4BA0D1FCCF64FE81C2BC58BB9E8304E596
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faa6075c-9e02-411e-8e1f-b81753289412.roa
Signing time:             Sat 25 Jul 2026 00:21:20 +0000
ROA not before:           Sat 25 Jul 2026 00:21:20 +0000
ROA not after:            Fri 23 Oct 2026 23:59:59 +0000
asID:                     19047
IP address blocks:        70.130.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:56:ec:4b:a0:d1:fc:cf:64:fe:81:c2:bc:58:bb:9e:83:04:e5:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 25 00:21:20 2026 GMT
            Not After : Oct 23 23:59:59 2026 GMT
        Subject: serialNumber=d4bc4b39e83ccf3fedfd219c1410db80311e678e0808af292141a1bb29d9fd05, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c7:67:88:08:02:bb:f9:24:c4:fd:64:2a:a4:
                    23:9f:a2:5f:14:54:b9:ec:f9:bb:89:59:fa:30:86:
                    f9:d1:f2:62:23:c9:14:c7:23:dc:07:f5:96:a9:b8:
                    2f:90:6a:d7:2f:95:06:c8:4b:a1:f1:ee:fd:8f:5e:
                    70:68:77:70:85:1f:00:e0:2d:a2:a1:1c:7a:bd:dc:
                    5e:e7:87:24:45:d3:b4:f6:02:b5:20:0a:92:17:7f:
                    51:3f:b4:ba:d4:57:6b:3f:7f:60:a9:80:1d:fc:ed:
                    90:61:aa:01:69:ba:f6:44:95:62:03:bd:71:1a:06:
                    72:6f:a5:83:c5:6c:6a:21:99:da:3f:73:0a:b1:37:
                    c8:dd:41:c5:ff:ca:16:b1:1a:51:a9:49:1d:f2:dc:
                    e9:21:11:07:3f:71:ed:fb:03:5a:9a:38:1d:e7:64:
                    51:38:15:0c:6b:a6:2c:dd:a1:05:66:6c:66:b6:ef:
                    0f:ff:26:7a:24:3a:58:df:90:f3:7a:bf:65:72:87:
                    0f:a7:6c:c9:93:5c:af:ba:7d:6a:73:95:16:40:ff:
                    a6:57:08:ae:be:c7:0c:75:1f:4f:df:8d:06:0c:d7:
                    f3:dc:0d:53:a7:98:5b:8e:cb:ae:32:39:16:13:39:
                    43:d6:60:7b:21:71:b1:59:f8:00:40:09:9e:1c:24:
                    a5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A1:ED:F8:1E:12:53:83:19:A6:75:33:8E:56:93:6D:CE:DE:5B:F1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faa6075c-9e02-411e-8e1f-b81753289412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.130.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:ce:9a:01:44:0c:3e:f1:5d:13:96:f1:f3:85:92:1d:d8:cc:
         97:a1:c0:4f:99:01:c9:23:52:d6:12:ae:f7:3f:fb:56:98:82:
         50:f2:80:7e:38:09:66:81:4d:e1:4c:c1:68:1e:26:24:17:36:
         25:57:e4:5c:55:28:c0:57:b2:ec:38:54:19:ef:79:dd:54:02:
         56:6a:f6:24:70:57:07:dc:bc:6e:ce:a8:09:87:52:95:63:33:
         6a:a5:2d:de:f1:1e:01:a9:cc:e7:8e:2f:94:3d:ca:dc:74:48:
         1c:56:24:6d:b1:b6:f4:ba:6b:aa:ad:7c:af:5a:88:23:29:f1:
         31:aa:96:67:ea:6d:49:74:67:a3:52:de:9c:05:90:8f:33:98:
         37:92:41:8e:76:2e:5c:ad:ad:0a:d1:e4:e0:70:4a:38:cf:20:
         da:3c:74:b7:2f:b8:d2:32:99:d3:72:1b:74:b6:7b:2f:d5:ff:
         7f:eb:aa:b0:c3:cf:4e:60:05:a5:e0:62:e1:68:07:e3:df:e0:
         82:ef:db:c6:68:0b:da:46:ec:39:06:c5:6d:52:6d:5d:5f:22:
         88:cf:b9:06:32:bc:57:1d:6e:b9:f9:0a:85:51:b5:7d:d9:cd:
         e1:7c:1a:a8:8c:5a:5b:c0:4d:f8:47:a3:af:32:37:97:c7:d3:
         63:66:52:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:14:54 2026 by rpki-client