Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b5120f-9da8-4835-9d8b-0c7948eafa35.roa
File:                     24b5120f-9da8-4835-9d8b-0c7948eafa35.roa (raw, json)
Hash identifier:          wzBacORjqv8GzdDrD/zuJmMd/LU+OcLsb1kOigPLMZc=
Subject key identifier:   2A:6E:1E:2B:D3:AF:D4:EF:72:5F:2D:2B:58:D4:3E:A7:03:62:A0:9D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2D75F30EFC31FEA853FA31BEDAD9A20C96B77AD3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b5120f-9da8-4835-9d8b-0c7948eafa35.roa
Signing time:             Thu 23 Jul 2026 01:21:01 +0000
ROA not before:           Thu 23 Jul 2026 01:21:01 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        13.162.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:75:f3:0e:fc:31:fe:a8:53:fa:31:be:da:d9:a2:0c:96:b7:7a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 23 01:21:01 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=0e9fee980e96133e4bae981f47ad7b219195c9608a529d805b1d12b545ec250e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ee:b3:b9:60:f2:b7:a2:84:6a:a2:83:9d:38:
                    5a:4a:54:f4:64:21:dd:e2:f6:31:a0:76:fe:7e:c3:
                    6c:21:12:58:14:ea:5b:1a:b9:62:2d:b7:01:d6:83:
                    c1:63:12:92:47:cc:55:14:7b:51:19:35:f8:c3:1c:
                    63:d8:f3:79:2a:05:07:69:ee:29:72:ca:30:8f:ff:
                    fc:8e:d5:f3:0e:99:4d:bb:a8:05:27:f6:c9:95:5a:
                    3a:a4:40:1f:54:75:b2:45:69:06:8f:ff:96:65:83:
                    59:01:df:6e:db:f9:15:65:cd:73:29:32:cd:f7:0c:
                    7b:47:69:b9:aa:7d:4a:b2:e4:8a:4f:8e:db:b4:e5:
                    05:b4:0f:c0:21:f0:5b:8f:d6:9d:fc:76:ba:ff:da:
                    d6:fc:e9:9a:da:be:34:23:68:5e:23:1c:69:15:8d:
                    59:54:f6:36:d4:33:96:00:15:2c:e7:cf:2d:fd:fe:
                    1a:67:8a:40:2e:f4:3c:0a:9c:76:78:2e:ea:ea:0e:
                    ad:46:ef:ee:95:53:30:fc:21:51:7e:65:a2:e8:1b:
                    1a:b7:a2:08:e9:c8:77:55:10:1e:a7:0c:11:87:72:
                    3e:db:d1:b2:66:e4:5c:e3:ae:67:18:c7:d0:15:53:
                    3a:b5:a1:22:1b:32:b9:cb:17:b0:1b:31:b6:58:cc:
                    9f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6E:1E:2B:D3:AF:D4:EF:72:5F:2D:2B:58:D4:3E:A7:03:62:A0:9D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b5120f-9da8-4835-9d8b-0c7948eafa35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.162.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a7:02:ae:90:a3:e1:85:31:cb:73:2f:ad:20:a0:f8:bc:84:a2:
         2b:66:a3:4c:a1:67:03:c8:e9:fb:8d:cf:2f:96:3b:a8:b7:af:
         f6:1e:fc:b5:1c:a3:94:d6:df:b8:22:b4:b8:c8:61:c4:7c:eb:
         5e:d0:0f:74:0d:fc:7b:bb:95:5e:35:c4:3c:86:e5:fe:16:24:
         3a:79:6e:7f:0f:bb:a3:21:b5:5e:d2:05:d1:cf:6b:e0:54:ce:
         4b:a5:d9:48:63:92:0a:8c:f7:21:db:eb:89:e7:d9:78:a0:1b:
         bd:41:81:eb:7f:5e:25:a0:89:9d:e4:42:21:71:bd:6b:15:21:
         6a:be:99:86:a9:39:0b:78:7d:a0:7a:b6:1c:03:17:9d:4a:c1:
         83:34:94:85:8c:6e:5b:35:ff:b0:ad:50:f3:5d:fb:24:20:ca:
         de:9f:10:99:83:2a:33:76:e7:25:5c:e5:b0:e0:1e:f7:2d:a9:
         5a:52:a8:d4:ad:17:f4:d9:72:9f:7c:e7:74:f9:86:bf:31:b6:
         76:1e:ed:c1:1a:14:37:94:fa:24:f6:f7:03:bd:c1:59:46:78:
         19:26:d1:90:63:48:63:00:ea:71:5f:df:2c:19:d8:43:e9:83:
         ca:d8:2c:b7:0a:17:ca:6a:65:4f:7f:0f:0f:d1:5f:1a:3f:79:
         ce:bf:39:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:51:46 2026 by rpki-client