Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10431809-4b73-43bf-9e88-aaecea2d1af0.roa
File:                     10431809-4b73-43bf-9e88-aaecea2d1af0.roa (raw, json)
Hash identifier:          wKKLzpEdXLtONScgV/ATHX5h2HAZCUgGycPQrHUtM8o=
Subject key identifier:   21:39:1B:37:3A:12:27:BE:27:3A:04:30:78:CF:E1:DC:21:4C:09:04
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       11FD15B7F4333F11CB0FC229405502409ABC4D68
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10431809-4b73-43bf-9e88-aaecea2d1af0.roa
Signing time:             Thu 23 Jul 2026 00:50:48 +0000
ROA not before:           Thu 23 Jul 2026 00:50:48 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        93.77.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:fd:15:b7:f4:33:3f:11:cb:0f:c2:29:40:55:02:40:9a:bc:4d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 23 00:50:48 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=0130e28c468a7887add2372c311a75c295f08cd8d6415fb6fe48692bb594e67d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e9:dc:f5:81:75:df:d8:be:d1:37:5e:8f:10:
                    55:64:64:b6:58:37:88:7d:6e:73:3e:e7:9f:38:b5:
                    48:bb:9f:af:46:cf:07:55:6d:ee:23:2c:48:9d:26:
                    7c:53:a2:18:92:01:22:5c:db:e0:b0:5b:cd:0a:07:
                    df:b1:96:cb:a4:ed:82:21:03:a0:56:1d:8e:e3:64:
                    0c:a2:6f:7f:5a:2b:bf:64:87:65:6f:65:a5:3e:fe:
                    41:d6:28:23:3e:73:7e:4d:8a:c1:b2:55:57:82:64:
                    a6:e9:df:c6:0c:44:8d:61:0c:63:5b:f8:49:64:4c:
                    1c:c9:91:d1:ae:c5:8c:84:43:55:cd:0f:d6:eb:24:
                    bf:a4:29:81:93:cc:8c:3a:a3:56:8c:c1:78:aa:36:
                    0e:b9:85:fa:45:34:bd:ba:3f:82:85:37:7e:ee:34:
                    94:73:fa:3d:2a:28:c3:54:e2:70:04:bb:6e:c0:9c:
                    e5:6f:05:92:5b:d4:96:36:1b:f4:b0:dc:5e:6f:bc:
                    86:f8:b0:a4:2e:ad:1f:c9:46:c5:fd:2c:f2:c8:3c:
                    04:52:6d:e7:9f:73:b7:34:84:27:93:c7:1b:6c:c0:
                    7e:e2:2f:e1:2e:1e:b5:ad:99:b8:f0:70:39:69:d2:
                    25:5f:1f:f8:5d:c6:8f:69:09:e1:9d:99:b7:42:01:
                    b6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:39:1B:37:3A:12:27:BE:27:3A:04:30:78:CF:E1:DC:21:4C:09:04
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10431809-4b73-43bf-9e88-aaecea2d1af0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.77.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:dc:94:c3:77:f7:95:f3:ab:8e:b3:15:a1:10:33:71:dc:f3:
         0f:ae:c1:af:9d:bb:62:f3:4e:14:1f:13:3a:0b:e8:80:9e:fd:
         9c:b1:a6:ff:1e:d6:86:7b:92:23:9a:b0:3f:7f:be:fc:99:67:
         69:50:15:12:49:8b:3c:5f:bd:f1:17:4d:32:f4:af:49:54:98:
         ce:17:56:34:c5:1c:71:4d:24:ab:31:a7:4d:c1:ff:04:1f:46:
         cf:0b:ef:38:be:87:c9:ec:b3:7d:79:ca:0b:2c:dc:1b:b0:99:
         a8:aa:03:33:ad:44:09:9c:ca:e4:5e:47:05:c6:9f:3c:a1:f0:
         50:81:3c:33:ba:b8:3f:12:85:74:ea:a0:0f:64:27:85:9a:a4:
         7d:ba:72:e7:cb:55:60:9b:e3:2e:0a:78:6d:e6:3f:a9:ac:27:
         f5:74:61:38:b6:7a:6d:18:24:a5:a4:c9:c3:6d:e9:c0:01:9d:
         9d:19:2c:3e:d2:d3:bf:1c:af:b0:fb:66:d6:aa:a2:fa:56:ac:
         52:42:6e:cb:e9:56:d3:7b:53:36:2e:4e:6a:d1:a6:3d:62:e0:
         53:19:a5:50:74:a9:4b:a0:0e:d6:d9:49:03:48:19:ac:c3:c3:
         c7:44:9b:1d:c4:6b:97:eb:15:32:24:42:6f:53:82:46:0c:fb:
         eb:07:ca:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:32:21 2026 by rpki-client