Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4059ac45-caf2-479c-909d-d2782d4ce815.roa
File:                     4059ac45-caf2-479c-909d-d2782d4ce815.roa (raw, json)
Hash identifier:          EFoh1Y7mnZhL+cB4v8Z+MKOxxLbWRdTnw8J+TKyXliE=
Subject key identifier:   0B:B6:DE:D9:6A:1E:83:66:48:28:66:73:B7:5C:9E:1E:B7:40:26:99
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3E873E18F810A7CBDF94E3F8ACE5FCB54A216E08
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4059ac45-caf2-479c-909d-d2782d4ce815.roa
Signing time:             Mon 04 May 2026 01:20:04 +0000
ROA not before:           Mon 04 May 2026 01:20:04 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        93.77.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:87:3e:18:f8:10:a7:cb:df:94:e3:f8:ac:e5:fc:b5:4a:21:6e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  4 01:20:04 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=1da1cf7f69d771a4a4c232aa1c7eaa5098a53343288e635df0d6c13446970659, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8d:6a:b2:0e:b8:06:92:36:6c:1a:57:c2:7d:
                    18:0e:73:ad:ea:85:a1:4f:71:d8:ac:a6:bb:43:fc:
                    15:8f:0a:f0:f8:49:34:92:50:5d:f3:91:64:36:3d:
                    66:18:4f:e4:0b:c6:c0:18:df:40:b8:ed:48:bd:e7:
                    ce:52:ab:61:d4:16:fe:2f:5b:50:72:4b:e2:9d:4a:
                    be:c7:17:74:d9:3d:c3:fa:b9:bf:36:cf:e3:be:49:
                    3f:bb:97:a8:02:35:67:aa:5e:87:3d:c7:c9:60:25:
                    f5:0a:e4:bf:fc:6b:a3:02:53:97:15:8c:51:a1:bc:
                    93:f4:b6:e0:49:be:ca:7e:73:1c:8b:21:fc:8f:fa:
                    1e:23:12:04:b4:d9:e8:bb:d5:6f:da:6a:52:e7:dc:
                    b5:d2:6e:54:10:97:9a:9c:1e:0c:d3:e5:df:af:a8:
                    63:99:f0:91:a0:c3:45:34:e5:52:26:6c:32:f6:0e:
                    b3:3d:4f:a3:95:69:92:51:88:0e:0f:b1:2d:ac:84:
                    de:42:a9:ae:4d:25:98:71:71:4c:70:42:19:59:90:
                    42:64:4b:56:da:08:06:4a:8a:a5:44:68:f3:d7:69:
                    54:02:f6:72:00:a6:24:35:0c:8a:43:33:2b:84:2b:
                    71:24:6d:56:3c:ab:2f:f4:1f:50:cc:c7:65:ab:31:
                    b9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B6:DE:D9:6A:1E:83:66:48:28:66:73:B7:5C:9E:1E:B7:40:26:99
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4059ac45-caf2-479c-909d-d2782d4ce815.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.77.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:0f:35:69:dc:0c:2e:d4:11:10:2d:12:8c:4f:97:96:ef:87:
         a3:ff:a1:7b:15:0a:85:b2:43:d7:df:16:c3:75:32:bb:6c:85:
         b1:d0:55:d5:91:51:02:27:58:f9:41:5f:db:e2:4d:39:bd:da:
         2a:93:59:b1:6d:0c:c4:95:a9:da:a8:6c:6c:78:65:c1:2b:90:
         49:03:19:82:73:1f:cf:35:c6:48:76:93:92:4f:f2:bb:ef:c0:
         d7:c2:1b:1b:4b:dd:73:7e:98:5e:93:fa:f6:da:0f:f7:9c:0d:
         f5:65:5a:c7:af:5a:51:2a:f0:dd:3e:11:8d:e6:73:5d:36:94:
         a0:8b:ac:97:18:ec:d9:05:f5:e1:e1:67:f0:c0:1f:22:e3:55:
         f4:19:b9:b8:6d:f7:d8:79:3a:6b:88:e3:c2:eb:f7:11:b8:d2:
         e7:17:ad:fb:db:7b:0b:e1:2b:75:12:38:62:76:8a:46:61:8d:
         18:03:29:dd:fb:b6:0d:0c:5d:66:37:03:fe:99:05:fa:8b:44:
         25:77:da:37:10:d1:94:67:84:74:28:60:8b:e3:1e:98:92:71:
         ca:ba:60:65:46:33:b7:ec:76:0b:13:a3:a9:d8:3d:78:53:c9:
         b6:31:da:e5:38:ac:f6:a3:eb:00:d8:c7:98:f9:9f:54:ad:ff:
         aa:22:a8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:24:18 2026 by rpki-client