Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22e0224f-add1-4750-9889-4168c3af1743.roa
File:                     22e0224f-add1-4750-9889-4168c3af1743.roa (raw, json)
Hash identifier:          TfWeO5EIl6owD0OZUdgMaX6ffCTx4zL7xRCPpSOBbpg=
Subject key identifier:   14:C7:FC:73:83:AC:7A:5E:54:DB:16:77:8A:88:8A:87:32:62:D7:3A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       63280056A51F579A42B0C3AE77D294080C9C25D0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22e0224f-add1-4750-9889-4168c3af1743.roa
Signing time:             Fri 01 May 2026 00:00:08 +0000
ROA not before:           Fri 01 May 2026 00:00:08 +0000
ROA not after:            Thu 30 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        104.153.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:28:00:56:a5:1f:57:9a:42:b0:c3:ae:77:d2:94:08:0c:9c:25:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  1 00:00:08 2026 GMT
            Not After : Jul 30 23:59:59 2026 GMT
        Subject: serialNumber=5618ddd07c66b8ef2daba93a0edf89bdb59485689a3125f2d2d009a5c0e6ca1f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:ca:eb:c1:07:e6:e1:d7:ef:c0:ba:b6:b9:
                    4d:42:2a:a7:ba:9e:05:0a:d5:bb:cd:bb:eb:a4:09:
                    ab:e6:f5:2a:5f:4b:e8:4e:96:fb:dd:81:5b:f1:7a:
                    04:c4:62:30:92:af:18:09:d1:4d:1f:c1:68:07:73:
                    df:58:d3:12:fb:ef:ae:e2:3b:1f:25:cb:ef:b4:1f:
                    6b:ac:b5:4b:aa:06:23:8b:af:3d:45:32:a6:f6:77:
                    26:6a:2a:0e:68:f5:47:3f:3a:d3:31:6e:13:f3:9a:
                    40:d4:6f:6a:5d:5b:80:fe:8a:c1:83:0b:ad:da:70:
                    4e:b8:b9:1d:e5:2c:d3:8e:c2:5a:8c:82:65:bc:f7:
                    78:84:13:92:50:c7:33:02:c1:fd:87:cb:f3:ae:d3:
                    15:9b:f6:d6:87:83:fa:05:a7:44:24:de:e3:eb:6d:
                    1c:19:46:6d:40:81:6c:16:29:27:c9:3a:16:b7:4d:
                    ce:91:97:a0:a0:f4:c7:f5:44:c4:56:87:21:54:a8:
                    65:9a:d7:27:90:06:b7:8b:a9:ae:22:1c:da:43:e3:
                    f8:6a:46:81:3c:11:46:cc:5a:43:2c:b6:2c:12:55:
                    c0:42:62:87:8a:2f:06:f5:49:ff:e8:e6:a3:e9:24:
                    45:15:f9:59:9b:5b:18:de:17:7d:4c:c7:12:11:f7:
                    8a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C7:FC:73:83:AC:7A:5E:54:DB:16:77:8A:88:8A:87:32:62:D7:3A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22e0224f-add1-4750-9889-4168c3af1743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         15:cc:e2:e5:24:97:20:c7:21:b6:80:d0:16:12:25:4a:4c:5c:
         8a:dd:58:1c:f6:e4:3a:8e:78:b2:3a:18:5b:79:95:96:55:f5:
         8f:ff:95:4a:21:a3:c4:13:75:06:29:ff:fc:17:4e:32:ab:48:
         46:4a:68:e8:7f:8b:7f:bc:15:d0:df:fa:ce:ba:5c:33:19:dd:
         10:12:2f:5e:ce:dd:03:6a:75:1a:ad:ca:f8:ee:8b:3c:33:56:
         ce:d0:0d:a1:e1:55:7f:ba:b1:8f:3d:90:c9:8f:63:64:48:d5:
         a4:a7:11:08:31:b7:61:60:07:66:b4:aa:31:49:cf:52:db:76:
         19:e5:76:3d:e0:de:40:01:20:60:dd:37:4a:bd:f1:68:03:bb:
         ba:30:70:6c:2b:e6:7e:65:da:59:51:b6:18:53:4b:e3:13:a9:
         57:92:37:69:ab:b8:e6:cf:17:9d:44:14:a0:5a:5e:4b:79:29:
         a2:32:78:5c:bf:75:41:50:c5:7e:ad:4a:1c:ff:f1:cd:bc:f5:
         c4:a9:1f:89:21:a7:9e:e8:fb:33:aa:e4:69:38:eb:b2:af:3d:
         19:42:8f:cb:b8:6a:ef:cb:9c:ca:e3:b7:42:40:92:70:96:5b:
         00:6e:1b:d3:92:c7:71:01:65:dd:20:44:49:79:1f:43:ca:06:
         be:7c:08:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:18:46 2026 by rpki-client