Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44b2496f-270e-4583-8750-8d879994d57d.roa
File:                     44b2496f-270e-4583-8750-8d879994d57d.roa (raw, json)
Hash identifier:          43eg8vuEeyXfnni9lk5Dm9CblFF91FydiUo/P0tK1jY=
Subject key identifier:   4F:F3:AE:51:13:04:D7:BD:82:A8:93:6E:B5:7D:6C:AE:D6:74:EC:5C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6EC873B96E29857B9BEBE15A9960036D78999D45
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44b2496f-270e-4583-8750-8d879994d57d.roa
Signing time:             Sat 18 Jul 2026 00:21:22 +0000
ROA not before:           Sat 18 Jul 2026 00:21:22 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        72.41.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c8:73:b9:6e:29:85:7b:9b:eb:e1:5a:99:60:03:6d:78:99:9d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:21:22 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=3c1e9b4cfbfecda93b9226eefb1d83075441991aa5ebd6da1a00662d769caf9f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4f:01:98:0f:2a:7c:e3:b9:3e:20:9d:a9:b6:
                    ef:8c:ed:38:20:cd:45:01:6e:5a:ee:bd:4c:ce:df:
                    43:a1:8b:42:df:7e:03:35:74:06:60:18:6e:83:99:
                    2b:97:8d:85:6f:78:8e:39:0c:6d:e9:c7:8d:74:30:
                    7c:da:66:c6:99:83:c7:45:02:a2:f6:a5:ad:7b:2e:
                    89:ae:dc:40:42:b2:e2:f0:ff:1e:68:b8:e5:0f:6d:
                    10:08:a6:55:1a:88:87:3d:9c:a0:9d:9d:99:10:d3:
                    5e:82:25:92:8d:3d:03:5a:04:01:9f:cb:dd:0d:3b:
                    82:ee:14:93:15:ee:98:b2:83:5d:6e:bb:36:0f:f4:
                    ab:a1:b6:4a:f1:02:9b:5f:b5:fa:0f:b4:bc:1f:ec:
                    48:af:0b:dc:e2:c1:9b:2e:30:c2:f4:ab:f0:e4:de:
                    50:bd:3b:e1:b9:cb:ba:55:a6:3e:42:08:e2:61:4c:
                    01:a7:b6:2d:ce:de:66:5a:69:bc:3c:02:3e:8e:e6:
                    6c:30:23:6f:5f:90:92:04:e3:84:1d:2d:58:e1:35:
                    13:a2:84:30:38:95:ef:e4:99:6f:f8:0e:5f:bc:fc:
                    66:61:58:e4:ba:6d:bc:38:a3:ee:95:9c:76:7d:64:
                    fe:1b:f2:3d:c0:e6:4e:a4:ef:24:9d:fc:05:40:75:
                    2b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F3:AE:51:13:04:D7:BD:82:A8:93:6E:B5:7D:6C:AE:D6:74:EC:5C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44b2496f-270e-4583-8750-8d879994d57d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.41.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6f:c0:94:6d:2d:c0:64:a0:5a:77:44:3b:24:27:38:0a:76:23:
         ff:7f:0a:af:7a:1b:9f:ca:65:65:97:0d:8f:c8:64:83:22:65:
         ec:01:7c:fe:b0:e9:df:c3:dc:aa:f2:35:96:2b:7c:5c:84:2e:
         ac:a0:68:ec:7f:f4:a5:74:b0:9d:0b:76:80:7e:89:71:d1:0c:
         40:cd:09:a6:83:15:d6:1b:21:5d:bd:d1:b4:b4:76:9d:1c:43:
         06:93:64:2f:d1:95:70:1c:46:c7:0f:d6:f6:25:85:5b:cc:de:
         17:33:c6:9a:86:3b:ff:e4:d1:9f:82:41:68:ab:69:be:33:b7:
         96:48:12:ac:40:93:fd:d2:1b:d8:4d:59:5d:07:3d:1f:37:e3:
         e0:ad:2f:90:0c:c7:a8:e1:62:21:cc:cd:bb:f0:b2:5b:82:9a:
         ac:d8:91:a6:0e:81:a4:db:fb:14:36:67:0c:4c:46:f0:09:fe:
         f1:29:ac:79:75:90:a6:36:2a:99:9f:c1:14:13:fb:97:e6:f2:
         e6:48:f2:d7:a0:f9:c8:e9:4d:fa:68:80:e5:aa:18:0c:4d:c3:
         dc:0c:42:24:4c:7f:ff:6c:44:b9:db:55:74:db:42:a9:ef:5f:
         f0:24:bc:6e:59:94:fc:e4:48:1a:88:93:c0:29:47:4d:eb:a5:
         1b:31:cb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:14 2026 by rpki-client