Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/110221ea-3727-4ae8-a95a-c96075931bf2.roa
File:                     110221ea-3727-4ae8-a95a-c96075931bf2.roa (raw, json)
Hash identifier:          n8NEs134Lv1MAJahqdW35UHKJPxNgCNW0fFzZhNU3dk=
Subject key identifier:   56:EE:14:97:47:7F:F0:6F:BC:F0:C2:7D:A9:7C:92:6E:92:72:E7:DD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       480EE4A17DD8AEDEFC757329FAC39079A3B263C6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/110221ea-3727-4ae8-a95a-c96075931bf2.roa
Signing time:             Tue 05 May 2026 00:11:04 +0000
ROA not before:           Tue 05 May 2026 00:11:04 +0000
ROA not after:            Mon 03 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.231.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:0e:e4:a1:7d:d8:ae:de:fc:75:73:29:fa:c3:90:79:a3:b2:63:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  5 00:11:04 2026 GMT
            Not After : Aug  3 23:59:59 2026 GMT
        Subject: serialNumber=8919380fd7c0bf5c4365bc773458eda91b7b749460ea1f0e65c65b40f8dbe73d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:aa:cd:61:0a:43:61:93:d4:92:15:8e:63:43:
                    58:8a:ed:1c:4b:39:bd:2a:69:c2:0e:0a:7b:68:02:
                    65:3d:8d:b9:11:81:26:f9:3a:c4:0a:42:b2:13:88:
                    60:a9:29:7c:4a:cf:c7:7e:3a:fa:ae:b3:c8:ca:11:
                    55:38:8d:ad:e1:c6:a5:d3:32:67:fc:5b:fb:3f:fd:
                    9c:89:0e:56:ae:49:aa:30:26:1c:72:67:00:a0:c7:
                    18:74:90:d7:e1:28:25:e3:9d:d7:32:05:b0:9b:2c:
                    ec:8d:aa:86:45:27:46:a3:ad:96:1e:bb:99:20:c3:
                    8a:02:82:ac:20:4d:ee:7b:7e:d0:7b:a3:61:f3:fe:
                    ad:29:37:2b:ab:41:2e:a6:bf:47:1f:87:d6:6e:38:
                    f2:6f:fc:f9:8f:47:1b:b6:1e:40:0a:bb:01:88:e4:
                    a6:6c:2e:4e:88:42:69:bb:79:60:75:18:43:30:be:
                    5d:1e:b0:eb:7a:0e:fc:b3:b1:65:69:94:b8:ac:3f:
                    18:ea:21:f0:88:55:7f:3f:1c:b8:1a:e9:19:b9:08:
                    d4:d3:b0:07:3e:a3:85:f4:b4:0c:d1:98:fd:be:f1:
                    23:fa:8b:7c:6b:61:4f:2a:9c:4b:81:b6:24:e0:7a:
                    97:ea:48:4b:4f:d2:3b:c5:bc:c4:6a:05:61:48:93:
                    c4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EE:14:97:47:7F:F0:6F:BC:F0:C2:7D:A9:7C:92:6E:92:72:E7:DD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/110221ea-3727-4ae8-a95a-c96075931bf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.231.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         be:fa:68:25:57:e2:5f:27:a0:ca:fe:fb:b0:cf:be:28:56:8b:
         d4:50:fe:b2:07:59:18:c0:55:2e:5a:87:1a:2c:30:ea:8a:3a:
         91:47:04:75:1b:45:76:59:92:03:33:52:17:e9:b2:19:a7:9d:
         7b:57:6b:2a:f0:f3:b9:a3:c3:cd:8b:f3:97:c2:72:2d:9f:6a:
         da:8d:25:18:76:5c:3a:7a:81:7e:f4:1b:aa:02:fa:b2:8a:ad:
         57:0a:a1:22:2a:16:62:07:07:f5:64:ba:77:9c:3b:f1:34:48:
         1e:1c:0f:bf:3a:2f:fb:5e:4a:fd:72:93:9b:5e:25:68:5c:01:
         4f:c3:a8:37:10:fb:78:85:14:ca:04:05:1f:09:e8:b3:b4:ba:
         aa:df:6b:30:dc:43:54:92:ff:41:8f:16:df:40:1a:e2:02:5a:
         44:b0:7b:d1:aa:dc:a0:f3:cf:6b:b4:24:9d:ed:72:c1:a0:8c:
         e4:ed:00:fe:28:09:e6:6a:fd:ad:d1:8c:0d:e2:bd:08:b5:96:
         c6:61:8a:2f:32:ff:fe:8c:7f:8f:65:7d:51:2f:4d:d0:6f:3f:
         5d:9c:8d:41:90:d5:87:b7:30:b3:9d:d4:4c:00:a0:3a:24:d3:
         a6:0b:2e:84:06:1d:66:04:4f:0d:13:19:36:1c:fa:8a:61:c7:
         1e:1b:e7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:55:11 2026 by rpki-client