Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18fa7199-3dc5-4ca9-bc26-096bf3df3e9d.roa
File:                     18fa7199-3dc5-4ca9-bc26-096bf3df3e9d.roa (raw, json)
Hash identifier:          KRKmuuWZUrY6ZXSbm9a1kB7SXR2NOb+ycoIVmEy6RTA=
Subject key identifier:   85:0E:41:D8:CA:34:0E:21:50:B9:06:07:8C:85:18:D9:9B:A8:16:C0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0157E286303137794E2EABD25F60968A24EBECD0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18fa7199-3dc5-4ca9-bc26-096bf3df3e9d.roa
Signing time:             Tue 05 May 2026 00:30:11 +0000
ROA not before:           Tue 05 May 2026 00:30:11 +0000
ROA not after:            Mon 03 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        184.73.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:57:e2:86:30:31:37:79:4e:2e:ab:d2:5f:60:96:8a:24:eb:ec:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  5 00:30:11 2026 GMT
            Not After : Aug  3 23:59:59 2026 GMT
        Subject: serialNumber=a7c9f6943ddc0172efe92d0dca6b44a58f4895f06cc774f5b94acbf985795005, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:22:7a:14:65:d9:ce:63:b7:61:41:61:0b:c2:
                    c2:25:85:d8:aa:22:ee:6b:fe:ad:9d:63:16:cf:ad:
                    af:2b:52:ee:49:82:1b:07:a3:1b:8d:1d:4f:96:42:
                    69:ef:82:26:ce:20:f5:67:af:6c:c1:c6:06:60:e3:
                    a4:5b:bd:44:a6:24:f5:28:9c:8a:62:1e:6c:cf:7f:
                    85:9c:a4:79:1e:57:b3:1b:21:90:94:5a:95:e2:72:
                    90:2f:17:fb:44:6b:f7:ee:02:d3:0f:9e:de:74:ab:
                    81:e6:dc:de:d1:37:99:98:73:a0:ee:65:eb:4f:9d:
                    63:bb:52:3a:30:0f:a8:9a:bf:4d:a2:0f:35:97:9e:
                    ca:1e:02:22:6f:c2:bf:d2:f9:1a:46:42:9d:e1:9c:
                    93:f7:4c:02:9a:f4:b8:df:84:4a:df:88:a0:33:49:
                    06:90:87:53:ae:21:16:21:2e:d8:22:91:3e:52:0e:
                    bb:65:6d:84:6b:d6:4b:b1:5b:50:ac:f2:60:fe:48:
                    ad:d2:d2:e1:ea:60:30:b5:6a:43:ba:1d:b7:8c:8f:
                    f6:63:aa:f9:81:a2:4f:7b:c1:97:2f:63:2d:db:53:
                    35:be:c7:b8:70:43:3b:ea:11:d5:ac:5b:e8:2d:d4:
                    fa:5a:6f:52:24:d6:be:a2:95:99:6f:b8:0e:ac:59:
                    fb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:0E:41:D8:CA:34:0E:21:50:B9:06:07:8C:85:18:D9:9B:A8:16:C0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18fa7199-3dc5-4ca9-bc26-096bf3df3e9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.73.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         92:b2:15:a7:e9:02:1b:0c:90:49:58:5c:3a:1d:bd:2b:42:fb:
         47:41:4b:a6:ef:14:61:17:d8:94:bc:42:da:6f:1a:ac:3f:fb:
         a8:e5:01:3f:2f:00:5b:65:78:cf:b7:ac:c6:83:5b:f8:2f:1a:
         41:d5:40:e0:24:b8:dc:ab:ea:fe:19:ae:ce:f7:4d:b8:a8:3f:
         58:89:10:9e:e6:df:91:94:c3:88:b5:69:30:99:14:ab:61:80:
         96:b0:86:f8:a2:4d:92:68:a6:38:00:bf:6c:6d:f5:23:78:aa:
         3a:8b:39:1d:2c:ec:ab:6e:ac:52:0f:3f:7f:1f:c6:c2:fd:52:
         da:ae:bc:46:fe:d4:d5:df:69:25:41:9d:47:6a:48:9a:6d:c0:
         5a:f8:53:12:34:ea:14:f9:e2:d3:2b:43:1f:a1:35:85:1d:9b:
         84:6c:90:e4:e3:49:a4:fd:e6:ca:6c:fb:0b:38:4a:55:22:34:
         85:72:4f:7d:b2:bb:43:24:6d:d1:a0:8c:73:fb:92:2c:84:38:
         9f:ca:39:b9:be:7c:f3:c4:b8:0f:4f:b4:de:9d:ea:81:ea:03:
         67:a7:39:f7:e5:44:91:1a:a1:d0:97:44:61:12:93:1a:69:5f:
         9b:ed:fc:6e:2c:fd:06:58:cb:0d:c3:83:ce:cf:b9:1a:a3:39:
         0d:f9:4c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:22:51 2026 by rpki-client