Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51794e4c-498f-49b0-8592-9181ab69aabb.roa
File:                     51794e4c-498f-49b0-8592-9181ab69aabb.roa (raw, json)
Hash identifier:          6kSkKuv2IywLhZG+rAK00cxd9slnLdiADNG4tTSNA0Y=
Subject key identifier:   98:7B:07:2F:5E:AA:15:0B:DE:7B:EF:4D:CC:A3:D9:C7:0A:9C:DD:44
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3166EBE29B66AB0CE5C35189480562F8CFC93789
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51794e4c-498f-49b0-8592-9181ab69aabb.roa
Signing time:             Wed 22 Jul 2026 00:00:11 +0000
ROA not before:           Wed 22 Jul 2026 00:00:11 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        23.238.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:66:eb:e2:9b:66:ab:0c:e5:c3:51:89:48:05:62:f8:cf:c9:37:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 22 00:00:11 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=1c4b1eaaab9d482efeece678273781f5d0c7689dd5af62cd95ab8efb9d0c15b1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:15:75:95:b3:55:9d:09:7c:d9:07:0f:fd:32:
                    8a:72:cb:f4:75:66:76:34:28:47:e2:8f:63:24:7d:
                    ff:55:0e:1b:30:bf:2b:35:95:51:90:8a:60:46:bb:
                    77:ef:15:67:43:a5:41:86:8b:50:4c:60:be:ab:14:
                    e2:bc:d9:73:b5:9f:af:80:49:67:89:ce:23:5f:ff:
                    92:23:c6:a5:23:9a:1b:3a:27:fb:5c:09:3a:e4:80:
                    a5:1a:f6:f3:df:0e:4d:d3:0d:49:30:f8:4f:0f:5f:
                    e2:e5:99:5e:8b:23:3d:34:f8:20:b9:86:26:8a:6c:
                    e5:07:99:39:bf:11:c1:cd:fa:e1:8f:47:2b:84:98:
                    4e:ba:d2:3c:58:35:96:65:09:85:c5:0f:c8:5d:a3:
                    65:4c:32:2e:dc:87:3a:e7:8b:2b:16:de:f1:08:8e:
                    63:bb:bb:2b:db:cf:51:dd:d6:65:10:aa:85:0f:66:
                    d2:68:c8:e9:ef:2b:63:e7:e9:6c:ca:a2:85:8e:1a:
                    e0:80:45:20:4c:ab:00:7c:52:87:2a:39:d4:96:d4:
                    53:2c:53:2b:ae:f0:98:6e:b5:dc:36:ba:b1:87:03:
                    1e:b8:23:5f:d6:c9:2d:ef:66:81:8a:8d:71:b5:27:
                    d3:cd:3f:2f:05:92:2f:f1:6c:75:12:5e:30:46:81:
                    f9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7B:07:2F:5E:AA:15:0B:DE:7B:EF:4D:CC:A3:D9:C7:0A:9C:DD:44
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51794e4c-498f-49b0-8592-9181ab69aabb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.238.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:9b:c6:4c:15:5c:2f:3e:13:75:f5:c3:7b:c7:9f:24:24:26:
         46:35:30:98:c2:dd:63:bc:21:69:f8:20:30:2d:84:e1:69:f4:
         5d:d8:16:b4:3c:15:51:a7:4d:c6:8d:87:a9:bb:5b:87:94:f1:
         71:bc:7a:fa:4d:4a:12:23:71:2d:fb:4c:7f:95:b0:dd:2a:7e:
         44:be:74:bf:24:47:cb:f6:3b:87:f9:29:51:7f:63:a9:86:96:
         9d:67:aa:d5:55:7e:d1:c1:a8:31:b2:b6:f9:a0:18:72:5f:d8:
         05:19:f4:a6:4d:9c:c0:d1:42:66:3b:9e:05:ca:6f:25:24:f3:
         4b:54:eb:ee:51:a3:1d:a0:c8:ea:86:f7:3d:17:2b:9c:10:ea:
         43:75:b4:42:c8:e5:94:f0:b8:67:33:3f:06:71:3b:91:74:d3:
         52:ef:4b:cc:7f:9d:6f:7b:8b:33:b3:83:88:cc:6b:98:ce:05:
         04:e7:72:34:74:89:d3:d7:ff:3f:26:61:d7:23:80:8e:ca:3e:
         aa:5d:ed:fb:86:f5:36:aa:96:3b:75:45:60:24:46:f6:1c:1e:
         8c:e8:ae:e8:b8:54:24:1d:cf:c4:7e:1b:61:85:51:17:7d:c6:
         27:33:b7:32:d6:86:05:f2:4d:79:c4:bf:b9:53:1d:d2:8a:eb:
         0d:e1:57:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:19 2026 by rpki-client