Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17277f34-9e2d-4b33-93f2-78f65d7f4618.roa
File:                     17277f34-9e2d-4b33-93f2-78f65d7f4618.roa (raw, json)
Hash identifier:          ShG9IpCWWGy3jF7eAvtf+RRy3jLB8uJotpRwU1Dpae4=
Subject key identifier:   69:F4:57:4B:F6:35:E7:1D:F7:68:40:28:E1:73:EC:5F:08:AE:07:4F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2FDFCC17F1249DA6D60A03C1347639A216CA763C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17277f34-9e2d-4b33-93f2-78f65d7f4618.roa
Signing time:             Tue 21 Jul 2026 00:40:44 +0000
ROA not before:           Tue 21 Jul 2026 00:40:44 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        136.18.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:df:cc:17:f1:24:9d:a6:d6:0a:03:c1:34:76:39:a2:16:ca:76:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 21 00:40:44 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=c7802992cd5ce19588ac0563c99c12af84887b925104cba83ed2fb46ba336bfd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d0:ef:12:5a:7c:e7:cc:d2:38:5b:84:6b:97:
                    bf:30:12:c2:00:f8:f1:43:50:3e:5f:d4:51:46:34:
                    b5:e5:38:b9:e3:c0:5c:4c:e4:ad:b2:11:64:0f:1d:
                    58:b5:85:c8:0b:ef:53:6d:b8:f8:1e:87:19:31:be:
                    75:84:0b:55:76:7f:1e:34:88:93:9c:03:c7:bb:f3:
                    61:23:f2:db:c4:cf:4a:13:c3:f8:33:12:99:ef:9d:
                    9d:0e:1f:83:7a:c9:1f:0e:c1:52:85:48:c5:9e:ee:
                    6c:f2:2f:00:db:d8:3f:18:4e:69:7d:53:88:11:e9:
                    dc:bb:8f:70:db:b3:ad:83:05:bd:85:59:79:b7:22:
                    70:c6:9d:df:b7:2c:74:a5:bb:89:2f:83:14:3d:2a:
                    6c:7e:d0:11:84:c8:58:bd:79:b0:ab:28:34:bc:ce:
                    22:a9:35:44:f2:a1:de:11:16:90:d5:a5:20:f9:8f:
                    08:3f:94:32:83:e1:fc:8b:6c:99:91:c1:c8:fe:9d:
                    41:74:31:b2:91:7a:f0:73:56:bb:4c:52:9d:8e:70:
                    e2:5d:0e:35:a4:10:c8:55:7e:f6:af:2c:b6:0b:97:
                    7a:51:aa:f3:d3:9d:29:f4:2a:a2:26:8e:3d:5d:42:
                    b0:a6:16:ce:b5:44:ec:bc:cf:fe:5d:61:52:39:78:
                    2c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F4:57:4B:F6:35:E7:1D:F7:68:40:28:E1:73:EC:5F:08:AE:07:4F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17277f34-9e2d-4b33-93f2-78f65d7f4618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:27:63:b1:df:f3:03:77:70:bc:90:ee:56:43:6d:ab:ba:6a:
         92:71:ba:7d:08:b1:35:cc:ea:cf:3a:7f:84:b8:60:b8:20:19:
         16:ca:b2:cd:af:c7:9e:10:f3:e0:86:2c:a4:57:6a:5f:ad:e2:
         59:97:7c:51:5f:3a:f6:34:36:21:33:c5:81:c4:32:39:d0:76:
         29:de:bc:04:7e:35:e7:17:89:f2:0d:8a:73:51:62:78:90:ad:
         c2:98:f4:80:26:95:8e:a9:6b:d4:71:38:aa:7a:61:fe:c8:9e:
         f3:ca:63:3a:64:51:0f:b5:50:23:2e:fb:44:45:21:f5:df:15:
         e6:6d:85:38:c2:ee:be:5d:73:06:61:77:36:1e:47:2c:27:76:
         43:d6:30:d7:3f:a2:48:fa:97:da:ea:d7:40:4a:de:6e:f2:d1:
         78:15:2e:6c:98:b2:be:d6:16:99:d4:8b:29:ba:15:17:e5:2b:
         b1:8f:37:51:54:4e:35:43:b1:49:92:6f:f9:99:f5:c4:78:7a:
         85:a4:81:72:c3:e2:d4:d7:c9:1e:6a:5e:f3:3b:fe:f6:17:58:
         52:e9:f5:c9:b5:7d:8a:fb:f8:c5:4e:49:11:79:7e:09:30:fd:
         5a:47:df:1e:b6:23:d8:b6:72:9c:98:b3:2b:31:18:60:37:71:
         d2:ba:cd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:31:58 2026 by rpki-client