Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c0e751c-d984-449d-ab22-482731648dc9.roa
File:                     0c0e751c-d984-449d-ab22-482731648dc9.roa (raw, json)
Hash identifier:          cuWd55BFWigMcECdOmwos6ANAhYAPRfAFNfnqXrmgQw=
Subject key identifier:   E7:02:8C:4F:FC:B0:A9:FA:D0:A1:69:47:B5:4C:C7:29:91:AB:72:C2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       62F46A67784EC19DBFD40C35DB9D73E281ED4DF5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c0e751c-d984-449d-ab22-482731648dc9.roa
Signing time:             Thu 23 Jul 2026 00:11:44 +0000
ROA not before:           Thu 23 Jul 2026 00:11:44 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        35.33.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f4:6a:67:78:4e:c1:9d:bf:d4:0c:35:db:9d:73:e2:81:ed:4d:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 23 00:11:44 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=15e79eab6697c1e56a73873ea3068fa752da94b633216d780956a57fef2f038d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2d:ad:81:e0:8c:13:23:93:d2:b3:db:ae:75:
                    4a:e4:39:4c:4c:53:c8:d2:c6:31:7e:30:e6:b1:9e:
                    38:11:69:81:66:32:7f:27:63:a1:99:54:38:7e:4f:
                    38:83:7f:f2:02:8c:67:3c:90:e4:b0:84:f2:03:00:
                    ba:ab:eb:95:0b:d9:96:d6:ac:ff:a5:1c:5a:03:9b:
                    51:be:50:b7:a6:06:c8:35:b1:fc:76:2d:8b:8d:dc:
                    b5:12:f6:8f:e4:75:e6:81:d2:3f:f1:a2:99:aa:38:
                    89:a9:fb:f6:41:56:17:f6:42:23:63:2a:07:fe:a0:
                    62:87:13:f6:31:b3:b4:b6:ae:b1:3b:63:5f:89:ac:
                    f1:20:99:f7:a8:d8:55:2f:91:af:d6:b4:48:bd:64:
                    df:e8:bb:25:d4:b1:23:51:10:aa:77:02:ec:ef:d5:
                    d6:4e:7f:89:d1:3a:1d:62:cf:b8:e8:43:65:9c:01:
                    58:b2:18:92:8c:05:ad:43:7f:18:65:bd:8a:88:65:
                    46:87:ba:73:ef:c5:b3:17:ea:63:05:d7:88:b6:0d:
                    34:d4:9e:6b:77:ff:65:a4:12:ef:bb:e7:a8:96:4b:
                    5e:98:0a:3d:cd:7f:29:9b:c3:c2:66:c9:61:8b:c4:
                    40:e8:32:54:3b:fe:21:73:1a:7b:60:85:2c:72:9b:
                    3b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:02:8C:4F:FC:B0:A9:FA:D0:A1:69:47:B5:4C:C7:29:91:AB:72:C2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c0e751c-d984-449d-ab22-482731648dc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.33.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         31:a2:bc:42:5c:77:39:98:1f:d8:9b:58:1c:b7:11:a2:86:ee:
         94:4f:88:37:7f:d0:80:7d:d9:78:6e:a0:59:4a:fd:9e:f0:2a:
         b7:2e:9c:f0:0b:bf:b9:60:ba:09:aa:4a:6a:99:ed:63:00:46:
         8a:64:82:6b:a1:66:76:bf:2d:b5:75:f7:6f:6d:65:a1:15:73:
         55:cc:4d:5c:b9:58:4b:b7:44:a3:c1:fa:e6:01:71:9e:61:ad:
         5c:88:05:c9:e4:ff:31:b1:3f:8f:8d:1b:35:3b:82:f7:bb:8e:
         aa:6f:6b:16:02:b6:11:11:86:5c:72:aa:1b:9e:7b:20:00:85:
         cd:63:3e:28:a3:23:f6:0b:63:78:24:85:71:fd:9d:b6:89:f3:
         0a:db:71:61:f8:7a:4c:a6:73:fa:27:c5:45:de:16:5f:24:d5:
         ba:61:bf:7d:ed:ec:d6:0b:78:ea:ec:55:1f:d2:78:07:20:1a:
         a2:ef:6f:56:1e:8a:dc:73:75:ef:92:2b:be:77:9f:a0:dd:90:
         ad:6a:c1:42:76:9c:22:84:b3:a8:eb:7c:fc:0c:fe:23:79:2a:
         10:a3:b8:4d:ac:61:d8:de:d1:ea:c2:1b:ff:d5:a4:31:f7:73:
         b5:6e:22:0d:4d:a5:8b:be:63:72:5c:f5:f5:f3:a9:54:44:d4:
         a2:be:7a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:24 2026 by rpki-client