Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ed3afac-055a-4ba0-8dd9-6d8700aa13eb.roa
File:                     0ed3afac-055a-4ba0-8dd9-6d8700aa13eb.roa (raw, json)
Hash identifier:          XHeWB8mBfwHLWlnzRZ1FwthmpuCT55pL3wvggcSk7hY=
Subject key identifier:   5A:94:85:89:F5:7B:AB:14:F0:4C:CF:C3:47:89:EA:4A:BA:D5:BD:BC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       167EC768D34FACBF0B8097A544B0932475EB7102
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ed3afac-055a-4ba0-8dd9-6d8700aa13eb.roa
Signing time:             Tue 05 May 2026 00:11:10 +0000
ROA not before:           Tue 05 May 2026 00:11:10 +0000
ROA not after:            Mon 03 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        184.72.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:7e:c7:68:d3:4f:ac:bf:0b:80:97:a5:44:b0:93:24:75:eb:71:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  5 00:11:10 2026 GMT
            Not After : Aug  3 23:59:59 2026 GMT
        Subject: serialNumber=59eb5624d24fa6a192b73f2e5df33d0f8be2788bcc6566726ff68db432452713, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8c:9c:c9:a1:33:39:d2:3c:39:93:d4:1e:85:
                    71:a1:85:ef:94:e5:3a:68:d2:c9:51:62:ca:5f:f2:
                    e1:c3:39:81:20:ac:7f:47:d2:b8:f4:5d:02:58:ae:
                    13:29:55:4c:ee:99:fa:e4:3a:8c:03:c9:d5:f6:f1:
                    f3:a4:ee:14:1a:ae:dc:52:0e:9c:8b:71:75:8a:32:
                    7d:b4:1c:af:ba:75:8f:7d:6a:89:6f:39:e2:c6:d1:
                    ce:a3:d2:a5:94:86:d7:06:f4:e4:e3:c1:fa:76:6d:
                    cb:f7:11:76:08:3b:32:a8:ef:8e:bd:e3:02:40:2e:
                    dc:25:1e:a4:65:9f:1d:58:0b:04:50:2e:a8:e3:90:
                    d2:7e:49:74:6c:60:9d:34:c4:1d:de:96:3b:b3:d8:
                    83:40:7c:6c:14:e2:81:69:75:75:9c:84:97:8c:db:
                    aa:6b:d3:e1:9f:db:35:6c:d0:7c:a0:4d:1c:b4:43:
                    f1:a6:5d:c3:14:98:a2:ab:d9:99:99:bc:03:54:29:
                    0e:b5:99:ce:79:4e:d3:34:d3:bf:e3:1c:11:5e:ca:
                    0b:ea:a8:71:4c:0d:18:10:8b:4e:c2:0b:3a:77:94:
                    06:0a:12:e2:fe:d4:d0:45:33:a5:8c:38:85:f0:81:
                    e1:53:d6:4c:39:60:ad:6e:c5:0d:b1:1b:e1:ea:b3:
                    e3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:94:85:89:F5:7B:AB:14:F0:4C:CF:C3:47:89:EA:4A:BA:D5:BD:BC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ed3afac-055a-4ba0-8dd9-6d8700aa13eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         c2:d7:83:12:29:b8:ca:ed:48:b7:2e:66:24:0d:62:61:5f:45:
         85:f0:3a:09:9e:65:80:fd:85:84:03:24:f7:d9:e1:fe:bf:f5:
         10:91:1a:b9:d1:11:af:fe:ac:a7:08:83:23:ac:64:44:df:51:
         44:6a:d1:eb:c8:61:3d:0a:00:bc:22:68:ec:83:d6:a2:29:c2:
         cc:69:3c:86:42:b9:37:ab:cb:5c:18:d4:16:0a:b1:28:83:73:
         a2:f3:33:51:73:7a:2b:ed:da:1d:ee:d1:66:ce:a8:e8:60:ae:
         44:2f:a4:39:ac:27:b4:49:b6:3d:36:a1:23:df:7c:20:8b:a5:
         6b:d0:9e:9e:91:ba:33:b2:58:7f:c4:61:9d:2d:68:51:9a:4f:
         4a:74:4e:db:f1:1c:aa:cf:32:3d:55:35:9d:58:35:7c:47:81:
         51:33:9b:5d:1c:8d:ac:af:2a:33:75:59:8f:c3:2c:9f:f9:79:
         2e:2b:8e:5e:c4:08:a6:9d:e6:a5:79:ea:a0:66:78:51:96:7c:
         27:0f:87:1a:9f:93:9b:97:1b:23:8e:d2:79:b9:f9:29:e9:05:
         c9:10:ab:4b:b1:e5:d8:2d:7c:da:b9:5c:15:c6:91:75:0c:fa:
         39:60:b9:3a:26:a7:8d:5c:e8:c9:57:ec:66:97:20:60:08:b5:
         84:81:fd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:20:20 2026 by rpki-client