Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e4d4a7d-c1f7-4655-87ba-3956e2f6bad4.roa
File:                     2e4d4a7d-c1f7-4655-87ba-3956e2f6bad4.roa (raw, json)
Hash identifier:          1fxjuUHUfxWQC9JdJrAi1+m9YMju+Lsg3uFBEYwBwsw=
Subject key identifier:   0D:CA:27:04:58:81:89:83:14:A5:54:16:C7:44:F8:F5:C1:E7:01:B7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6C08D9FE349095AC5C2EB7F9E1BDB4FBA90F4270
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e4d4a7d-c1f7-4655-87ba-3956e2f6bad4.roa
Signing time:             Mon 20 Jul 2026 00:01:19 +0000
ROA not before:           Mon 20 Jul 2026 00:01:19 +0000
ROA not after:            Sun 18 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        104.153.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:08:d9:fe:34:90:95:ac:5c:2e:b7:f9:e1:bd:b4:fb:a9:0f:42:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 20 00:01:19 2026 GMT
            Not After : Oct 18 23:59:59 2026 GMT
        Subject: serialNumber=5b567b84fa5673631ffb563d78fb6dbba241517b7b2c05eb0e954ead9e10fe3d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:49:36:96:c1:cc:a6:5f:2d:d4:43:41:31:04:
                    f2:b0:39:56:6c:dc:56:d2:9e:7b:9b:68:72:37:53:
                    b2:52:dc:b1:da:b2:8f:f0:85:39:2c:d7:aa:ca:a3:
                    da:0a:ba:c1:82:e1:78:e0:0b:7a:af:c6:c3:54:4a:
                    cc:76:31:c5:8d:40:32:62:06:d3:cd:fd:f9:b6:2a:
                    0e:f0:7e:55:67:f0:f0:7b:1c:c3:db:81:de:64:3a:
                    c8:85:f8:ff:8a:0f:7f:dc:e6:35:9f:31:c1:95:4a:
                    8d:04:53:50:92:d5:b6:ec:b3:df:63:3f:80:dd:44:
                    a9:6d:61:62:aa:68:2e:1b:3f:72:f3:a1:41:58:74:
                    83:39:ae:d0:e5:ed:53:57:67:72:ec:6c:8e:f0:78:
                    7e:32:bd:d6:98:51:f4:56:0e:b6:f9:3b:12:ff:bf:
                    72:da:3a:13:2a:cc:a2:bb:e0:66:8d:df:2b:25:d7:
                    de:36:6a:8d:91:e2:d3:19:63:d4:82:5b:7e:31:73:
                    e1:34:94:99:08:ce:c0:79:53:ad:23:73:45:02:f5:
                    de:4c:f7:64:90:da:6d:5f:89:9b:50:df:5d:97:86:
                    88:98:4f:a3:88:34:9b:46:45:b8:50:8c:60:c8:ce:
                    33:68:47:7f:fe:b5:fa:29:28:a1:69:1d:af:bc:0d:
                    81:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CA:27:04:58:81:89:83:14:A5:54:16:C7:44:F8:F5:C1:E7:01:B7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e4d4a7d-c1f7-4655-87ba-3956e2f6bad4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:b3:0b:f8:7d:de:92:86:82:81:65:82:4e:55:f7:f0:96:c8:
         77:e0:19:c4:f6:c0:5f:a4:c6:9d:7c:58:14:ac:e8:04:46:0e:
         72:fb:10:e7:3e:3a:19:d6:ec:6c:39:cf:f0:de:34:b8:81:0d:
         fa:c0:71:41:c7:a1:eb:59:8f:ab:8a:43:59:11:e2:2f:c6:63:
         8d:0b:02:c0:66:87:1a:0f:b6:7d:8a:81:9d:81:31:10:cf:53:
         6f:33:2e:a5:06:00:b9:95:ea:f8:ce:98:a2:ed:b6:52:8b:9a:
         13:3c:f7:28:d2:57:4a:f5:5e:83:67:7a:53:4a:48:bd:24:64:
         06:eb:a2:bc:61:54:c8:f9:12:88:f2:d6:db:06:e6:f7:ca:b0:
         59:e3:ce:5c:c3:32:79:16:50:01:a9:74:8c:46:15:30:4c:57:
         b4:e0:42:88:5b:17:31:5f:dc:f2:91:2c:54:44:1c:12:c5:38:
         bf:8e:4f:62:50:e7:68:81:48:65:71:79:cf:83:14:0b:94:bf:
         a4:e3:e2:1c:47:dc:70:a9:4c:f0:69:8b:e8:c2:82:6a:4c:b2:
         5c:10:79:bc:b8:4a:53:82:73:bc:b1:f0:6d:14:14:22:95:6a:
         26:3f:96:32:83:7e:0b:56:a3:5a:60:30:1f:67:c3:b9:c2:ca:
         c2:9c:e0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:04:01 2026 by rpki-client