Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08757016-fb8f-4c6c-a4ea-4c395f43a59d.roa
File:                     08757016-fb8f-4c6c-a4ea-4c395f43a59d.roa (raw, json)
Hash identifier:          ipDxgmFN/0Kwmf78ccQsWZ+iZWxexr9E2bjdrlFK2oI=
Subject key identifier:   69:7C:DD:69:ED:40:F4:97:35:95:9F:CD:59:B1:3E:AE:5B:69:61:A5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2D07D5ED5FF7B4A4743F40D04C87DAE10F704958
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08757016-fb8f-4c6c-a4ea-4c395f43a59d.roa
Signing time:             Mon 04 May 2026 01:21:49 +0000
ROA not before:           Mon 04 May 2026 01:21:49 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        50.18.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:07:d5:ed:5f:f7:b4:a4:74:3f:40:d0:4c:87:da:e1:0f:70:49:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  4 01:21:49 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=b2c6bae81c24c1ded59eeb7673292a3522ac78fd6cb4caa40ac666c7c1f4500f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e6:d2:b1:06:e1:24:32:8e:83:73:fa:88:8d:
                    9e:fd:e9:07:c4:6b:e4:f9:24:35:1e:95:6f:a7:09:
                    69:15:f8:a4:36:c9:16:dc:1f:8e:e7:59:30:1f:3b:
                    2a:78:e6:c4:09:d6:df:66:f0:97:f6:34:f2:16:c6:
                    d0:10:20:53:d4:a3:6c:d3:29:d4:20:c1:1a:71:bd:
                    d9:3f:23:dd:3c:29:24:44:a4:e1:df:d8:28:b8:62:
                    16:a0:9e:63:de:58:a1:62:e6:2e:77:03:fc:ab:4c:
                    3d:bb:f3:78:4c:e8:a3:5b:8d:41:d6:be:13:a1:36:
                    ec:11:71:99:f5:b9:56:26:60:71:8c:2f:92:d9:4c:
                    0a:a1:42:b7:45:70:57:bc:45:1e:fe:81:48:d6:25:
                    60:ba:c5:ac:fe:7d:1f:29:c7:42:d4:25:8c:98:a9:
                    81:56:3e:9c:a9:54:e4:23:7c:de:2e:32:0d:a7:36:
                    5f:e1:4d:12:2b:ee:5c:7d:9e:72:67:4a:4d:65:49:
                    27:ab:5d:93:b2:63:53:c5:ae:bf:6f:fd:7f:2a:bb:
                    b4:18:ec:32:38:09:02:63:33:1f:40:ea:35:88:b8:
                    10:6d:ca:9f:df:24:a0:14:05:69:bc:8f:e7:91:f8:
                    c5:36:bb:db:c9:33:b6:f8:a3:c1:8d:ab:bf:0c:f9:
                    00:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7C:DD:69:ED:40:F4:97:35:95:9F:CD:59:B1:3E:AE:5B:69:61:A5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08757016-fb8f-4c6c-a4ea-4c395f43a59d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.18.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:b0:c8:5c:c1:76:2d:1c:c6:9e:ca:5d:89:7b:36:36:70:db:
         07:43:ff:c6:3d:02:32:85:52:64:d4:a6:f4:ae:14:c9:2e:22:
         e1:ca:15:66:73:79:c0:6c:c5:13:a7:93:72:98:17:75:31:83:
         18:c1:fb:c9:67:93:fc:e0:fb:1f:05:34:53:c9:8c:00:2e:7a:
         11:e2:91:83:c2:ce:49:3f:5a:d9:87:a7:41:d5:7f:e0:13:2e:
         f2:92:f6:76:fa:6b:9f:11:cf:fc:09:d9:7f:f0:07:e1:29:4e:
         53:34:7b:94:2c:1e:99:34:6b:eb:d8:43:bb:45:c3:06:f5:16:
         94:1f:58:72:be:7f:71:91:c0:c7:9a:8c:e3:bd:8c:0b:25:ea:
         0b:32:a1:3e:d3:19:79:d3:49:ca:fe:59:6d:ee:a0:90:1d:0e:
         04:7f:89:de:cc:e7:d4:fa:94:37:eb:43:ba:17:f4:9c:36:ad:
         27:80:2b:77:f3:49:fb:a6:a4:d3:c7:35:30:bf:30:11:06:0f:
         d1:30:71:07:88:d0:c2:d7:5c:cb:d9:a1:12:ee:fa:6e:ed:3d:
         cb:0d:d1:fc:cb:1c:10:22:2f:e7:61:b1:97:6e:a8:e4:e4:92:
         6b:0f:3d:a3:d4:2e:f2:99:7a:69:0a:25:1e:6e:2e:6c:94:d9:
         7d:5d:cb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:00:18 2026 by rpki-client