Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4259c68a-93ef-43e1-9e0d-14ebf785bc7b.roa
File:                     4259c68a-93ef-43e1-9e0d-14ebf785bc7b.roa (raw, json)
Hash identifier:          hohEgf1MB6uXjq/l3w413A0dhP4+14Nf/H6hNXqSybE=
Subject key identifier:   30:C9:E2:70:83:EF:A2:91:0C:78:2B:5A:B8:5F:F8:83:4B:F3:43:69
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       534856212DEC69EB9A503B7044BA1A5281D68E66
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4259c68a-93ef-43e1-9e0d-14ebf785bc7b.roa
Signing time:             Fri 08 May 2026 00:10:33 +0000
ROA not before:           Fri 08 May 2026 00:10:33 +0000
ROA not after:            Thu 06 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        64.95.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:48:56:21:2d:ec:69:eb:9a:50:3b:70:44:ba:1a:52:81:d6:8e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  8 00:10:33 2026 GMT
            Not After : Aug  6 23:59:59 2026 GMT
        Subject: serialNumber=50093f5c695bf50f80355bc7f28822e8d0fba5a2d4ea1e60d660084615042d2f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:54:89:80:cf:f4:d3:e9:76:9a:07:b5:5d:2b:
                    d9:7c:92:bb:d7:62:8b:2f:59:87:d7:2f:b8:a5:0d:
                    83:d7:3d:be:2a:0b:a9:28:5c:68:b5:98:90:ef:6b:
                    e5:bd:c4:8f:bc:a0:75:80:2c:53:fe:6e:4c:3a:75:
                    ad:a8:c2:e6:64:30:41:7b:7c:78:b7:d2:c1:1e:ed:
                    1f:b3:b0:63:c5:37:cf:a2:53:61:09:5c:1f:8c:53:
                    27:42:6c:36:c5:21:a1:eb:2d:cd:20:4d:1e:12:b9:
                    0b:65:7f:ed:83:82:fa:50:76:63:ec:48:8f:5e:fd:
                    10:a8:7c:0d:6b:1d:d2:10:28:14:5f:78:3a:62:62:
                    57:b4:7a:46:4e:95:65:ac:8e:2e:9a:2e:ee:d3:07:
                    c8:9c:7f:45:e6:23:28:02:a4:20:b2:b5:15:14:0b:
                    90:21:5d:12:b7:85:bd:92:5f:6f:18:c5:06:4e:99:
                    99:87:79:cf:e5:4c:5c:c4:a8:63:30:b9:2f:84:7b:
                    03:27:09:7f:ed:4e:d9:8b:13:34:77:cf:b7:79:e3:
                    33:c4:82:3c:77:ab:fe:35:43:ed:10:14:0d:91:d9:
                    bf:32:9a:05:65:ff:d7:9f:87:21:58:5f:e0:32:a9:
                    6f:b9:f9:b9:51:a7:21:5f:ac:7b:3e:93:48:38:79:
                    9e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C9:E2:70:83:EF:A2:91:0C:78:2B:5A:B8:5F:F8:83:4B:F3:43:69
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4259c68a-93ef-43e1-9e0d-14ebf785bc7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.95.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:d2:a8:f4:6a:8a:ff:78:38:57:5a:c1:08:1d:96:8c:33:7a:
         42:6b:42:6e:cb:ae:28:4b:35:8d:65:83:ed:8b:ef:7c:7d:da:
         7d:20:2c:b1:96:6b:b4:62:f3:c5:b1:52:49:33:5f:5e:c1:bc:
         64:7f:e4:ff:74:d0:3c:e0:74:b4:d5:ee:72:0f:6e:23:b4:e0:
         be:7f:89:7a:33:b7:af:4c:cd:ea:60:22:04:d6:47:a2:da:5c:
         65:c7:49:13:bc:2a:de:66:a6:8c:8f:94:d4:2b:db:bc:51:d3:
         45:95:ab:b5:f8:9e:bc:ee:49:22:57:c3:4d:02:7b:a9:58:43:
         2a:24:ff:7a:e9:90:f3:e9:ad:10:af:df:7f:42:e7:b8:71:f3:
         7b:98:3a:01:f2:27:3e:06:74:5c:4e:37:99:94:e5:76:eb:b3:
         2d:4a:12:ac:6d:c3:44:43:3a:6b:6e:fd:27:c4:bd:72:86:df:
         ae:b8:f8:1a:d6:08:c6:49:26:6c:12:ee:90:27:f8:bd:36:32:
         2a:63:6b:f1:c4:a9:43:96:e9:ba:4d:be:d9:64:f0:46:d9:a2:
         26:67:c9:05:5a:a2:ea:4d:66:b3:e1:3b:dc:39:9c:08:5d:1b:
         e7:d5:5e:9b:19:39:e8:76:42:0c:51:4c:f3:7a:a3:42:42:34:
         47:54:09:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:29:21 2026 by rpki-client