Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f819a5-5299-444e-b14f-d6f196396aa1.roa
File:                     40f819a5-5299-444e-b14f-d6f196396aa1.roa (raw, json)
Hash identifier:          oFJE5FRqmC73Ua2sp3XjhSlD2ZgxEOXjAZImrcghorU=
Subject key identifier:   44:40:75:F1:86:92:46:31:CC:EF:6C:19:0D:ED:E4:69:5E:EC:93:90
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       03D26E8761222C795F49479E7C9259E8E7C63EE9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f819a5-5299-444e-b14f-d6f196396aa1.roa
Signing time:             Sat 18 Jul 2026 00:10:37 +0000
ROA not before:           Sat 18 Jul 2026 00:10:37 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        56.52.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d2:6e:87:61:22:2c:79:5f:49:47:9e:7c:92:59:e8:e7:c6:3e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:10:37 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=683ef713717d4359556db93d728e80cb7801fc6842e5657f091a4deba67bac8c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:42:ba:64:4a:fd:48:c4:39:a9:cc:c4:3c:29:
                    1f:ac:f6:88:e6:30:e6:4f:1e:47:1a:4f:42:b7:4f:
                    a8:83:1f:ba:54:f6:6f:7c:4a:fa:d0:1e:62:c8:98:
                    01:c6:ea:ac:69:39:6a:bb:5c:5d:c3:ad:2b:ee:bc:
                    86:98:26:ff:e3:20:0d:7f:dc:b5:84:55:b8:4a:3c:
                    25:57:5a:13:76:db:c0:5f:60:30:50:64:ef:92:5a:
                    86:cb:f6:a6:6c:04:0a:05:91:5b:1b:6a:e1:27:95:
                    32:12:50:52:3e:97:e5:d9:a4:e9:22:e8:e4:04:11:
                    c6:f9:7c:11:d0:8f:cf:00:7e:c6:d2:0c:20:ee:69:
                    df:47:71:35:30:98:93:0f:67:56:8f:d6:c6:5b:ec:
                    95:e1:ca:34:71:1b:dc:24:ca:d6:22:ed:fe:56:b1:
                    bc:03:c4:ba:b9:5f:14:59:3d:b8:a6:2d:f4:07:8c:
                    5b:ce:ab:a8:2f:af:00:93:ac:e4:8d:af:c9:9e:07:
                    3b:fb:16:0a:2d:0e:30:6c:4c:6c:ab:35:02:06:b3:
                    f1:c5:91:b5:ae:5d:0c:bf:e7:c4:2d:33:ef:a1:f8:
                    bb:67:08:91:87:11:0e:fd:9e:cb:57:82:2a:53:b6:
                    1e:1b:29:00:eb:07:73:65:bb:dc:7b:c5:ba:c5:0d:
                    54:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:40:75:F1:86:92:46:31:CC:EF:6C:19:0D:ED:E4:69:5E:EC:93:90
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f819a5-5299-444e-b14f-d6f196396aa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.52.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         aa:9a:e1:ed:f2:43:aa:f2:60:80:1a:44:d9:ff:d8:fa:41:b1:
         b1:a4:1c:05:b9:35:41:86:d6:9c:c7:e3:9c:6d:1d:a8:12:63:
         95:98:2f:14:c0:d7:5a:2d:4f:0c:39:81:28:16:51:dc:04:98:
         98:69:19:e8:40:64:aa:ab:27:d6:95:c0:d3:ec:c2:51:9e:44:
         82:a9:12:3e:5d:de:d2:13:30:56:3d:c1:2b:d0:3d:30:87:41:
         6d:f5:b7:ef:39:1f:bd:28:0c:78:07:91:82:9e:73:fe:ef:81:
         df:02:87:6c:ef:ec:0a:24:df:4a:17:0b:a1:d9:82:09:c7:8c:
         e5:15:fd:a9:9d:30:db:35:4b:50:39:2a:5b:08:c8:56:99:ac:
         21:96:1d:e3:ce:d5:4b:27:09:a1:67:f7:fd:b2:e6:4e:af:db:
         23:c9:77:bc:82:39:69:97:19:f2:e8:a4:96:88:da:cc:f0:dd:
         d1:77:fb:76:69:ff:de:c4:8d:af:4f:89:71:60:b2:1d:89:20:
         b8:e2:9e:30:22:69:38:89:c2:22:03:c8:15:90:7e:40:d8:97:
         00:6e:95:30:c1:bf:8f:83:81:f2:08:48:13:c2:c2:30:39:66:
         2b:39:49:c6:e0:be:1c:3b:c7:2b:5c:1e:22:16:1c:39:c3:09:
         ba:f6:e0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:33:57 2026 by rpki-client