Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cb95a9a-688c-4e7d-8983-619a1a64bc2f.roa
File:                     0cb95a9a-688c-4e7d-8983-619a1a64bc2f.roa (raw, json)
Hash identifier:          V52x/7sf1OB+H4/zi0QaeFn0EMXaKFyJ6Ne+mFnXErU=
Subject key identifier:   D2:C0:24:80:B4:41:DF:0C:A2:EB:91:9B:8C:68:C9:07:B5:C3:F8:C0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       62D030EABA748706D8A8237A084B9D4BA060F442
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cb95a9a-688c-4e7d-8983-619a1a64bc2f.roa
Signing time:             Sat 18 Jul 2026 00:20:56 +0000
ROA not before:           Sat 18 Jul 2026 00:20:56 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        63.246.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d0:30:ea:ba:74:87:06:d8:a8:23:7a:08:4b:9d:4b:a0:60:f4:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:20:56 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=9ad2067b95663b59b03a8ef99600f6a491ac34450c7399ba3c4197b09d3c876a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ff:0a:5b:4c:71:3e:1f:94:d0:59:b8:7c:38:
                    29:c5:e7:12:03:33:38:49:9f:51:35:e7:9c:f1:ff:
                    1b:ed:bb:3a:3c:d8:80:ff:a7:0b:08:88:80:73:9f:
                    15:d1:cf:a6:82:e8:bb:c4:94:11:b1:10:49:f6:dc:
                    d1:a4:d2:fe:13:e8:7d:e7:89:f3:7f:76:7e:6f:6b:
                    5e:7d:96:00:2c:ff:f5:5d:b2:3d:c6:9c:c0:22:cf:
                    3e:6b:b6:c1:43:8d:d4:e7:8f:ef:b0:81:ba:5b:77:
                    97:99:5a:12:2e:aa:4e:9d:cb:27:27:e1:66:c0:bd:
                    30:dc:1c:c2:6c:22:0c:e0:33:e3:eb:7d:e5:50:5f:
                    1d:54:4f:1d:eb:c1:61:ab:cf:ed:1d:54:53:e8:11:
                    f3:9d:4b:85:b9:20:0f:53:29:7c:58:f7:11:f3:78:
                    ad:dd:2f:96:51:b4:c7:7d:db:91:64:2f:d2:2f:c1:
                    62:97:db:1f:b2:0b:22:bb:37:4d:a9:81:36:85:28:
                    63:c4:02:eb:4c:83:6d:6f:70:36:17:6c:3a:f0:39:
                    53:a2:1a:ea:a9:9f:11:4c:9c:27:c6:b1:6a:6e:9f:
                    2f:48:09:6f:07:4c:e0:d2:25:a5:7f:2c:79:38:b2:
                    b9:e3:ab:2d:54:7b:62:85:a5:a2:93:16:ae:57:10:
                    f4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C0:24:80:B4:41:DF:0C:A2:EB:91:9B:8C:68:C9:07:B5:C3:F8:C0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cb95a9a-688c-4e7d-8983-619a1a64bc2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:c0:5a:fe:a0:a3:60:c3:c1:14:25:15:56:ca:36:3f:a6:2c:
         ae:9c:85:2e:6c:b0:15:d2:a9:a1:1d:f0:c9:8e:85:5c:70:37:
         b4:1d:fc:fb:3c:58:e0:9b:32:4d:75:0b:21:a6:5b:27:eb:97:
         75:2d:46:96:c6:e2:fc:4a:96:5d:ef:ba:7a:61:24:34:b4:e0:
         8c:46:88:26:92:a3:5f:8f:3e:38:45:b2:aa:0e:58:05:33:4a:
         d4:a6:6d:ad:22:9a:65:13:e3:3e:a0:ff:82:24:8a:b9:10:e7:
         5c:27:36:d2:08:7d:bf:f2:35:fa:16:41:76:dd:81:31:b7:d5:
         91:74:4e:89:22:b3:35:72:a2:ad:35:78:9a:4c:7f:dc:f4:04:
         1d:23:43:79:80:dd:88:f1:f7:8e:3a:e4:5d:40:53:20:cb:ab:
         a0:7c:e2:c8:a2:5b:c3:f7:aa:1b:ac:6f:05:d8:ef:0d:69:a3:
         4d:c6:af:da:5f:d9:4d:3d:fd:09:5b:e3:5d:c4:b7:d2:95:e8:
         bf:da:e3:80:17:38:c1:06:5d:85:4c:11:14:50:ee:92:42:f3:
         53:9f:c6:5a:d6:09:c8:40:c9:10:13:20:a9:68:7c:8a:6b:67:
         52:a9:e3:e0:09:e1:af:60:1c:d9:bc:84:39:6e:45:f9:5a:c7:
         a4:79:fd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:30:24 2026 by rpki-client