Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b38083d-f6ad-459e-bab9-8363a8ba76bc.roa
File:                     2b38083d-f6ad-459e-bab9-8363a8ba76bc.roa (raw, json)
Hash identifier:          1+GdM+GFrH7jMSNgrjgq42jWpufL8FTrqnIuNZkO4Tw=
Subject key identifier:   5E:93:51:C3:07:C6:00:A0:7B:DA:B5:4B:A2:E8:BB:AF:C0:95:F9:68
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6ED6029BF6F933DED7E797B5B6C2C7AD3EB8E80F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b38083d-f6ad-459e-bab9-8363a8ba76bc.roa
Signing time:             Fri 10 Jul 2026 00:00:08 +0000
ROA not before:           Fri 10 Jul 2026 00:00:08 +0000
ROA not after:            Thu 08 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        1.178.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d6:02:9b:f6:f9:33:de:d7:e7:97:b5:b6:c2:c7:ad:3e:b8:e8:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 10 00:00:08 2026 GMT
            Not After : Oct  8 23:59:59 2026 GMT
        Subject: serialNumber=c5f9d7451143a80c4545be8d05332b98da1408ff45ac83d3366cfd83466c5727, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:81:c9:2e:c7:1a:f5:08:95:16:1d:50:d0:80:
                    29:18:f2:c5:b0:dc:8d:54:8f:6a:56:f6:dc:82:93:
                    42:d7:50:76:ea:a0:7e:72:66:9c:4e:10:78:27:ee:
                    9f:95:c5:67:b4:bb:78:51:97:5c:65:fa:e5:f6:1e:
                    cd:df:c0:bf:2f:5a:2e:b8:bd:8d:63:87:55:0d:3f:
                    ad:b6:2e:eb:b7:48:c3:60:ea:cb:04:86:bc:dc:3b:
                    b3:c9:2c:99:7e:77:00:af:aa:a0:79:78:05:21:41:
                    5c:50:7f:66:83:30:ee:1c:c0:9c:37:f2:93:5f:25:
                    35:54:27:6e:d4:9f:a0:77:f4:f9:fc:37:c5:c5:9a:
                    5e:50:c9:a0:22:92:a0:72:c1:60:19:bc:af:ce:75:
                    7d:7f:37:f3:66:62:6f:f1:07:08:d9:a8:98:fa:54:
                    b0:da:06:31:74:ea:0f:84:68:16:f5:b1:68:49:18:
                    3c:44:ca:fd:f3:0f:10:bb:a0:42:ad:db:e2:c6:24:
                    43:42:d8:a4:b7:f1:f0:2f:cc:98:67:de:7f:f2:fd:
                    fc:ea:01:c3:04:10:50:be:5b:fb:fc:e5:49:7a:a4:
                    44:67:7c:79:0a:fa:9e:37:f9:eb:06:ea:05:aa:da:
                    0b:24:16:cb:e2:bc:4c:23:10:af:c9:12:82:98:6c:
                    7c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:93:51:C3:07:C6:00:A0:7B:DA:B5:4B:A2:E8:BB:AF:C0:95:F9:68
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b38083d-f6ad-459e-bab9-8363a8ba76bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.178.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:61:2a:81:12:c8:35:82:30:65:10:1f:a9:19:fb:15:b7:f4:
         8c:de:f2:0e:ad:8e:50:ad:29:3c:74:56:4b:a5:42:7b:cb:25:
         c1:57:b5:30:19:8e:bc:ae:c3:64:4f:84:81:93:1e:38:ae:cc:
         69:92:0f:b2:ed:95:0d:4b:9e:84:d1:d8:f1:86:73:94:77:f7:
         80:49:d2:32:55:63:2d:de:a5:f4:5a:76:5f:1d:21:f5:46:63:
         91:21:28:e9:0d:a1:1b:0d:8f:6a:1f:cb:8d:34:b4:f8:0d:d2:
         63:99:08:87:19:dd:69:66:68:bd:1a:5a:9d:da:c5:bb:f0:80:
         1f:de:a5:cf:45:06:63:cf:94:c6:ca:10:1b:0a:36:74:06:c4:
         b7:9b:ca:0f:89:8f:f9:bd:83:bc:1e:84:4a:96:94:52:d4:48:
         f3:4f:2f:2f:1a:6b:d8:61:29:0c:57:27:5a:f6:3e:62:a7:87:
         7e:28:51:8b:58:f0:ac:9e:9d:66:e5:08:1e:7b:c9:83:e1:48:
         8d:c8:11:81:7e:16:a2:86:a9:e0:6c:90:be:a8:aa:ad:69:22:
         b6:e4:1c:cc:71:7a:28:6f:dd:c1:ef:85:2b:e7:9f:57:d0:0f:
         8f:f5:98:fa:64:77:05:2c:cf:da:b2:69:59:11:c9:46:5d:80:
         eb:c8:75:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:48 2026 by rpki-client