Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27c8a61e-4b54-49e6-9a8e-e3229656a9ad.roa
File:                     27c8a61e-4b54-49e6-9a8e-e3229656a9ad.roa (raw, json)
Hash identifier:          uihbfO/RzXl3FGBOvfYL1JxpleIUdpuq3syE7Y5VelM=
Subject key identifier:   34:11:0E:C6:E9:7A:42:91:51:30:D5:50:3A:F2:62:58:1A:19:E2:9A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       06DF3B76E51E3C2CBB40E587433D4F91AABB5AD3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27c8a61e-4b54-49e6-9a8e-e3229656a9ad.roa
Signing time:             Sat 18 Jul 2026 01:01:20 +0000
ROA not before:           Sat 18 Jul 2026 01:01:20 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        70.240.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:df:3b:76:e5:1e:3c:2c:bb:40:e5:87:43:3d:4f:91:aa:bb:5a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 01:01:20 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=4e276737214bb72b28b963db99330dbd8d62c5b41aeafe229f3283fed380b7f1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8a:18:6b:87:3e:e3:42:bc:36:c6:8c:76:1e:
                    fe:6f:46:6e:11:ba:1b:73:b1:e1:05:92:ac:10:06:
                    11:57:d2:f3:ca:5a:19:f9:b7:5d:9b:94:7c:c2:d3:
                    28:ea:7e:d5:17:42:db:61:ab:1a:e2:0a:f6:ae:d7:
                    4c:2c:d8:24:d0:1b:66:8e:5b:f4:cf:92:6e:39:fc:
                    51:35:f9:51:e7:37:38:c0:29:a0:3a:c2:c6:f6:a1:
                    04:46:62:78:18:32:38:37:52:c4:55:64:ff:cd:b2:
                    8a:f9:6f:2e:0b:ed:54:fb:84:b8:6f:6b:6d:dc:51:
                    b3:e4:46:4a:51:0c:b1:86:bf:5c:00:bb:22:56:22:
                    2e:19:d1:cf:8c:c3:74:82:03:f2:7f:55:e3:2c:77:
                    e9:ae:de:73:f4:23:88:39:e8:7b:36:29:36:fa:84:
                    16:27:aa:c6:14:d8:d7:29:0c:1e:dd:98:ec:bb:93:
                    a4:da:4c:47:9d:99:05:9b:70:63:a7:df:a2:0c:f4:
                    d3:f2:3d:23:80:f0:32:6e:4b:dd:03:49:aa:c8:a0:
                    f1:91:58:6e:dc:30:6b:f3:76:d7:07:8f:36:1e:65:
                    fe:e7:eb:08:67:c3:e4:b4:60:44:d4:ba:db:e6:9b:
                    e1:0f:c2:1f:6d:70:36:0d:e4:b7:e7:a1:76:6a:9e:
                    8e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:11:0E:C6:E9:7A:42:91:51:30:D5:50:3A:F2:62:58:1A:19:E2:9A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27c8a61e-4b54-49e6-9a8e-e3229656a9ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.240.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         28:2e:db:22:3f:4a:0c:be:1f:c2:9c:8a:46:7b:5e:c6:47:40:
         2c:9d:21:89:b6:87:85:0d:d3:d0:95:0c:69:66:48:24:e6:6f:
         af:9e:47:2f:5e:a7:10:8a:52:85:39:e0:59:05:64:7d:ef:a1:
         54:5b:f3:1f:c6:1f:a4:e2:39:e2:fe:97:d5:e8:3c:f0:01:27:
         ea:40:50:a8:5a:a1:f2:ce:bf:e1:92:01:da:b0:ff:88:3b:65:
         2c:aa:bf:11:fd:9f:fa:9e:e5:31:e2:f4:8d:5c:2a:b6:29:e9:
         e4:18:5a:0f:ed:8d:ae:d6:3d:d3:42:6a:ac:47:57:73:1b:4d:
         b8:6f:ba:95:f2:07:04:91:75:de:46:d8:7d:a5:81:4f:62:d6:
         69:e9:fc:8a:0d:de:59:fc:30:f9:a1:5f:84:98:9e:eb:b8:b3:
         fd:1f:47:1e:e4:c5:eb:76:60:0e:7d:49:2c:29:bb:72:42:42:
         e6:d8:9f:9d:fd:a5:e8:21:58:2a:74:b5:96:e7:7d:6f:18:9f:
         98:b5:79:e8:28:0c:1d:ba:17:83:67:2b:a1:91:c0:2a:1d:d4:
         6a:77:2d:b8:c2:09:7c:9d:de:13:13:af:a8:a3:1d:80:04:49:
         25:cc:6d:5b:07:3b:96:f3:7d:5f:cd:88:5e:76:6e:5f:fa:25:
         be:86:a2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:00:43 2026 by rpki-client