Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59549cf5-0d12-4294-bde9-17545fc36227.roa
File:                     59549cf5-0d12-4294-bde9-17545fc36227.roa (raw, json)
Hash identifier:          K4Q3YV6dMZeeL+W6awcXv5sovM+xJGMV5rhUSCMnae4=
Subject key identifier:   61:98:D2:34:C2:01:0D:16:9F:59:9E:6D:AA:29:09:F5:6F:E0:5C:94
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4195A7B5F28D1A4C79D3F686752B50AD38F25371
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59549cf5-0d12-4294-bde9-17545fc36227.roa
Signing time:             Sat 18 Jul 2026 00:40:06 +0000
ROA not before:           Sat 18 Jul 2026 00:40:06 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.66.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:95:a7:b5:f2:8d:1a:4c:79:d3:f6:86:75:2b:50:ad:38:f2:53:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:40:06 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=3714bf746ea70cb6f972b3739227d9c659eb8a00bbd5b5e9516ab5df81d585a5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:01:bc:a3:1c:96:93:e1:bb:63:45:0e:4f:0e:
                    11:89:20:7c:cc:22:22:38:e2:13:16:4d:19:78:7d:
                    7b:7e:73:0d:6f:82:24:f4:06:9b:39:a6:00:69:62:
                    32:7e:a7:c5:0a:11:02:03:a6:e6:1e:f7:d6:26:58:
                    be:79:45:88:5c:57:bb:78:ad:79:49:f6:58:61:61:
                    30:11:43:72:29:b7:df:73:5a:9f:f1:4b:7e:14:94:
                    84:8f:14:a1:df:40:a0:3f:72:5b:dd:33:20:5d:f7:
                    32:02:57:f4:c0:ce:26:e3:da:28:a7:a8:c2:93:6d:
                    81:60:bf:ce:d5:a7:ad:ac:7b:67:ff:02:c0:1f:92:
                    67:2d:e2:d4:04:49:8b:24:27:f3:b8:72:50:76:21:
                    fc:c8:56:55:76:ba:c7:d3:37:07:6b:b9:aa:e7:d1:
                    29:d9:3b:ff:88:0b:2c:ef:fc:b0:cc:d8:b5:47:e1:
                    f2:78:6d:9b:47:fa:19:df:fb:ff:57:f6:b8:20:ea:
                    1c:5a:7d:13:12:fd:44:84:48:e2:82:45:4e:a5:eb:
                    0c:1d:57:fb:e1:97:07:2f:d8:4c:3a:c6:76:80:d4:
                    09:3f:45:37:71:17:14:2e:c8:bf:71:98:f7:72:be:
                    95:7d:ab:9d:c0:bb:4a:7a:43:3d:c8:14:f1:16:ba:
                    b5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:98:D2:34:C2:01:0D:16:9F:59:9E:6D:AA:29:09:F5:6F:E0:5C:94
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59549cf5-0d12-4294-bde9-17545fc36227.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.66.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cd:a6:db:a2:69:12:92:a7:21:11:43:73:59:07:ca:96:54:49:
         85:a2:8c:b5:17:67:c4:3c:e3:26:43:0c:c0:ca:aa:45:72:f6:
         c7:c0:cf:25:7c:21:12:ae:32:99:65:d1:82:a9:40:3c:6d:7e:
         c9:b7:3c:06:ad:47:03:93:f8:5d:ed:fb:39:78:58:87:8e:6e:
         d4:f8:af:56:e2:b4:9f:ed:34:5e:da:12:f5:63:6d:bc:f8:2a:
         9f:6a:46:a0:e8:cb:70:d3:fb:47:70:ba:1f:3e:24:1e:1b:5f:
         4f:b7:73:a8:45:c2:33:70:f8:2b:47:9f:13:ee:e1:82:38:61:
         eb:8d:f7:5a:95:90:7d:ea:a5:5c:64:a0:30:d7:8a:c1:26:4c:
         1c:10:f3:08:3e:a3:38:9f:4d:f3:ea:49:84:90:e2:38:27:be:
         2d:57:11:c6:ba:34:15:c0:ae:38:53:84:01:09:45:00:95:51:
         4d:0d:ed:c1:36:d7:98:13:a6:ae:35:67:28:a9:90:6e:fb:e4:
         30:bd:f5:63:ae:54:ac:9a:0e:51:32:9b:6c:4b:51:ac:75:3f:
         4c:17:f3:ae:9f:f4:82:3c:68:d4:d1:0d:a8:7a:27:52:e6:f0:
         2b:b0:91:6b:9a:c8:eb:43:42:76:af:73:6f:46:2e:da:a9:fa:
         bf:64:39:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:30 2026 by rpki-client