Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/072c09c9-2b2b-47f3-bf8f-9e94d6cf69e2.roa
File:                     072c09c9-2b2b-47f3-bf8f-9e94d6cf69e2.roa (raw, json)
Hash identifier:          I+8IVX+53T2rVO9gi0wSwgKt7Dg517svlh5Wi+xg2nk=
Subject key identifier:   DF:85:52:27:A4:C0:A4:9C:65:3A:66:C7:CB:E7:F6:E9:9B:68:7A:A2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       08411A20DF1D099B1282E7EE8C92B8910567F10E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/072c09c9-2b2b-47f3-bf8f-9e94d6cf69e2.roa
Signing time:             Tue 05 May 2026 00:30:47 +0000
ROA not before:           Tue 05 May 2026 00:30:47 +0000
ROA not after:            Mon 03 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        162.247.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:41:1a:20:df:1d:09:9b:12:82:e7:ee:8c:92:b8:91:05:67:f1:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  5 00:30:47 2026 GMT
            Not After : Aug  3 23:59:59 2026 GMT
        Subject: serialNumber=9c53b14c085999aff77003371f206d9382568392d6bdc302ded6e83b36322e4a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:34:ab:23:13:59:c6:8e:8a:6a:af:72:f4:65:
                    11:e8:4c:32:2d:2f:81:80:aa:b0:44:82:09:42:cb:
                    ef:0c:77:50:36:07:e0:9f:2a:40:57:e2:93:aa:0c:
                    01:68:16:6d:c7:02:6f:18:a3:85:29:67:bf:41:b3:
                    bd:ef:08:75:26:f0:c3:00:bc:59:a7:41:ee:e9:ab:
                    4f:3a:f3:5a:b5:83:ed:50:06:88:2f:a3:1b:36:2a:
                    23:89:c8:7b:4b:4d:4e:bc:99:05:7b:cf:e5:76:f5:
                    0c:d9:49:6f:da:28:ea:22:6f:61:ba:3e:a6:0e:04:
                    8f:78:7c:aa:db:59:30:0f:df:1e:5f:23:b4:9f:6e:
                    bd:a5:6b:0e:19:be:a0:2a:45:b5:19:3b:5b:c6:b9:
                    2d:b9:d5:f0:76:54:00:ee:64:99:97:bb:aa:ad:81:
                    ff:4a:21:18:17:58:ea:9a:fc:0d:09:af:d8:54:10:
                    7d:93:23:d7:c0:73:c6:33:a3:eb:6c:37:9d:eb:52:
                    f9:74:07:ee:b3:d1:23:37:df:d0:ed:ac:5d:7b:c8:
                    5e:cf:04:48:ba:83:76:65:89:b7:56:59:da:05:76:
                    6d:a3:8d:c9:4c:17:b5:46:26:50:0b:a9:27:03:ec:
                    77:97:72:0b:40:2d:d0:76:fb:3d:f0:3c:49:7c:db:
                    97:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:85:52:27:A4:C0:A4:9C:65:3A:66:C7:CB:E7:F6:E9:9B:68:7A:A2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/072c09c9-2b2b-47f3-bf8f-9e94d6cf69e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:c1:af:5e:74:2c:c3:3e:24:be:8f:50:94:3a:63:01:a5:ec:
         9c:f1:98:2f:c5:d2:86:6d:46:6b:21:d5:2d:38:1c:07:9f:ff:
         65:78:90:d7:09:bb:05:e5:0e:dd:73:34:78:80:8a:8a:bb:a5:
         89:5c:34:cb:1e:c7:ff:92:1c:1f:74:19:0d:be:f6:b1:69:b5:
         6d:29:db:53:7f:57:5a:90:ff:64:9c:ce:94:ec:4c:06:68:0b:
         df:12:94:46:8c:30:3d:de:da:65:6e:01:a0:4b:5c:90:95:57:
         9a:be:b3:52:4f:60:94:2b:5f:25:88:aa:f4:6a:34:0c:71:93:
         b7:b2:a4:9d:06:64:de:a8:4a:e2:41:0f:7a:b5:62:79:cd:86:
         6a:24:0c:2d:30:f0:6c:56:ae:54:39:e3:a4:69:dd:cc:17:fc:
         68:e0:3d:ba:20:4d:22:58:0d:b7:df:33:2d:ee:9d:e8:68:93:
         b9:94:44:fe:97:7c:9e:9f:36:4f:e6:cc:5a:f5:b3:6f:4e:ce:
         65:7e:6d:41:83:1a:39:a8:f4:04:43:60:ff:01:4c:1c:8e:bd:
         2c:4c:45:2f:45:1c:15:9b:66:3e:78:d9:65:9b:6d:4a:43:e9:
         0c:e3:b2:a1:45:c3:0f:25:5d:d5:fb:2e:46:21:12:48:b0:11:
         5c:71:50:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:40:11 2026 by rpki-client