Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f3125c-a240-4e96-98f9-38d7861a1143.roa
File:                     40f3125c-a240-4e96-98f9-38d7861a1143.roa (raw, json)
Hash identifier:          IP3ls7qQbUKFWgAoON+BTObhGFcyC2flcr7z6YmhFMc=
Subject key identifier:   3F:44:BC:2E:80:2B:10:8B:46:DA:85:C6:91:6C:60:7F:9C:41:92:93
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5B1EC4F9E713F25D91F9695F45F3018FDB9D339F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f3125c-a240-4e96-98f9-38d7861a1143.roa
Signing time:             Fri 24 Jul 2026 00:10:35 +0000
ROA not before:           Fri 24 Jul 2026 00:10:35 +0000
ROA not after:            Thu 22 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        184.73.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:1e:c4:f9:e7:13:f2:5d:91:f9:69:5f:45:f3:01:8f:db:9d:33:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 24 00:10:35 2026 GMT
            Not After : Oct 22 23:59:59 2026 GMT
        Subject: serialNumber=e0d07496d176c787a6697fdb4a9887df92950b7e4c1c81c66e553abd37833f3a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:53:92:72:90:47:1e:32:5c:53:66:82:42:ba:
                    09:59:23:f8:d7:e0:1d:bd:9a:44:97:3f:4c:df:c5:
                    2c:80:7e:3f:de:6a:0d:39:ea:0f:39:4a:af:a9:c5:
                    a1:52:69:68:73:6e:c8:bb:4d:fb:45:1d:c3:5c:dc:
                    e0:86:b7:73:19:43:7a:74:df:a1:81:b1:7e:c6:4e:
                    47:89:4d:cc:61:ac:ec:98:17:25:b1:61:f2:e6:c9:
                    27:7e:35:d2:e6:1a:d4:a7:5f:c2:b2:a2:d6:3d:e0:
                    fb:20:73:c0:8c:30:90:f8:6c:31:4e:ae:a8:10:60:
                    ea:70:32:5d:a2:da:51:a7:e0:48:7e:f8:3b:3a:4e:
                    d6:88:6f:f5:89:4b:e7:84:f9:83:26:6f:2d:09:db:
                    74:7d:78:3d:df:7e:13:ec:ba:80:6e:fc:80:fd:88:
                    23:75:93:5f:0d:c4:e3:e5:4d:70:f4:53:3f:68:5f:
                    71:2b:4f:06:f4:e7:b9:d3:21:48:fe:2e:04:24:ba:
                    ab:9e:df:34:98:48:77:9d:8d:99:47:9f:2a:5b:88:
                    35:73:fd:82:05:45:ec:6f:0d:10:55:e3:b0:dc:81:
                    19:69:54:d2:c3:2b:61:01:7d:6b:fd:9b:1c:d3:23:
                    be:46:63:5b:03:3d:d1:60:72:d4:38:53:af:c6:73:
                    2c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:44:BC:2E:80:2B:10:8B:46:DA:85:C6:91:6C:60:7F:9C:41:92:93
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f3125c-a240-4e96-98f9-38d7861a1143.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.73.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bc:8a:d7:ed:b1:b0:4a:69:38:95:58:83:19:c0:d7:fa:6c:d9:
         d0:89:b1:f2:31:98:1e:7f:77:06:e0:13:cd:e5:03:6d:51:09:
         3b:e8:06:0a:ba:ab:ea:4a:08:9a:b7:03:47:6c:8d:13:b7:33:
         59:1a:b3:e9:2a:cd:4a:e1:b5:ef:c8:71:ee:e1:21:6d:12:92:
         87:05:a5:9d:d0:e9:9a:f8:37:2d:3d:a2:6f:9b:ce:e2:e5:37:
         bb:f8:da:fa:e5:c3:b7:59:94:d1:5c:eb:4f:64:d8:56:cd:f6:
         62:ff:2e:60:e4:9a:9f:97:73:87:da:20:07:73:15:99:fd:3c:
         0b:a3:a7:8f:19:cd:43:75:e5:95:15:ec:a4:73:48:77:42:70:
         ce:e1:de:0e:7c:7d:2e:da:0b:cd:f6:ed:89:a1:14:8e:b9:79:
         0d:da:d3:ad:cd:08:b7:75:f3:ef:bf:8d:10:65:16:20:47:a7:
         20:10:34:fd:3b:56:11:45:ab:1e:1c:4c:1c:02:05:0e:45:4b:
         d0:e0:60:a7:75:a9:75:d5:e1:ec:c3:74:b8:c2:de:9c:3c:dc:
         91:3d:45:77:f0:6c:cd:35:9c:6e:95:17:3c:4a:f0:c5:a2:70:
         e1:73:94:ed:d8:2f:f2:91:18:27:ee:06:9c:02:6e:54:40:cf:
         59:5f:2f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:27 2026 by rpki-client