Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/533f99b1-b818-4380-8b49-b128210a3f25.roa
File:                     533f99b1-b818-4380-8b49-b128210a3f25.roa (raw, json)
Hash identifier:          Kbs4pq6LuU2QE/Zb394sKQCIPU8mQ8UKRVU5vGbVD78=
Subject key identifier:   9C:02:9E:22:44:10:DE:41:5E:A0:E7:0D:1A:96:D7:2C:DC:B9:0C:4D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3EFA3D12904C98A3E7F02414797BE01FB0883C77
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/533f99b1-b818-4380-8b49-b128210a3f25.roa
Signing time:             Sat 18 Jul 2026 00:00:50 +0000
ROA not before:           Sat 18 Jul 2026 00:00:50 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        207.221.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:fa:3d:12:90:4c:98:a3:e7:f0:24:14:79:7b:e0:1f:b0:88:3c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:00:50 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=eeeb2e3adc2d3dfaa53aa1cff58f666e9f7e8d3713b796c19339db81201a66ba, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:70:b4:32:22:f5:0c:32:5a:cd:23:40:2d:
                    a6:58:e2:f6:72:6d:cb:0b:00:a1:b3:5a:3f:d9:ab:
                    60:91:44:ec:10:ee:7a:1a:70:d7:31:5c:76:96:d1:
                    51:8e:54:e2:e8:1c:dd:d5:95:0a:3a:45:82:78:fc:
                    38:61:cf:d8:66:15:ef:5b:a5:4b:be:bd:3f:57:fc:
                    ef:97:66:29:7f:58:ed:b0:ad:a2:cf:3b:57:93:fc:
                    fb:61:cd:d3:8e:2b:6a:7e:e8:9d:be:27:c7:e3:72:
                    80:24:a6:31:80:44:10:68:60:28:a0:1b:d4:19:49:
                    f4:3c:18:e5:67:04:45:95:79:30:f2:b1:95:88:e9:
                    80:1b:54:7b:0d:a0:00:21:4a:24:04:ab:c8:39:44:
                    0e:4f:eb:93:a5:ad:36:3f:75:91:fe:cb:70:19:3b:
                    db:63:da:e1:6e:97:05:72:6c:10:4e:a2:a8:5b:d7:
                    c3:06:3c:40:bc:a1:f8:a8:4f:d5:a6:b5:b5:c9:c2:
                    e1:05:1a:01:d2:51:11:12:c3:30:07:31:05:b3:bf:
                    41:28:b5:5f:87:25:68:02:3d:3c:95:a6:0a:09:a7:
                    56:5e:ca:5e:95:8e:2e:36:2b:9d:c1:d1:08:90:78:
                    e5:7e:6d:b6:c9:e5:d9:aa:7e:8f:d1:cc:9b:d6:2c:
                    69:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:02:9E:22:44:10:DE:41:5E:A0:E7:0D:1A:96:D7:2C:DC:B9:0C:4D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/533f99b1-b818-4380-8b49-b128210a3f25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.221.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6e:e2:94:fb:7f:72:13:49:c4:75:00:48:42:00:26:a8:e9:57:
         00:46:b5:22:f1:92:7d:ba:6d:1b:81:f3:37:87:84:7d:78:b8:
         d8:4e:b0:df:f8:0d:d3:44:6f:e9:b1:ce:d4:81:ff:0c:be:3a:
         35:9e:03:7a:ef:9b:b8:1c:d3:a3:88:c9:e1:a2:bd:d2:05:cf:
         5d:94:b9:67:20:0e:72:8b:3c:7b:58:c6:8e:08:f1:94:c7:a4:
         4c:69:d2:9e:c0:96:13:d7:b4:c2:2b:24:70:c3:de:8f:05:16:
         c7:17:f3:22:a0:d6:27:4b:86:9f:15:5c:e4:81:7f:f0:2e:83:
         19:fa:56:c7:c7:07:1c:ef:81:2c:a5:ed:e5:0a:f9:74:0a:2c:
         88:1b:4c:f0:95:93:21:a1:56:95:32:da:22:fa:c5:d5:e4:2a:
         d7:b5:3f:60:7c:93:ae:0d:17:f2:55:39:42:bb:1e:fe:49:ce:
         2b:57:50:17:89:6f:9d:87:3e:a2:31:d6:91:52:da:52:81:e7:
         63:73:7c:b0:a1:98:48:c2:e5:ef:48:85:9b:dd:d9:8f:df:ec:
         ba:2e:0a:bb:34:fc:2f:c2:74:4e:41:5c:c1:52:5b:1c:26:6f:
         e4:9a:8a:6b:21:a8:43:69:6e:5b:e8:c1:b7:9b:4a:ca:7d:30:
         c0:8e:b8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:34:28 2026 by rpki-client