Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59994030-fa77-46f8-8c5a-9301b2931210.roa
File:                     59994030-fa77-46f8-8c5a-9301b2931210.roa (raw, json)
Hash identifier:          3Q3u/EB0NZ6RCGkDt+9VoA1eLZGqpExVHxX6tNy9TQw=
Subject key identifier:   76:CB:A6:7C:52:78:82:07:FE:10:79:A3:87:DF:05:5B:CE:5D:7A:F1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4590304F86D0CFA561165B98FE8CB14B26170246
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59994030-fa77-46f8-8c5a-9301b2931210.roa
Signing time:             Sat 09 May 2026 00:10:52 +0000
ROA not before:           Sat 09 May 2026 00:10:52 +0000
ROA not after:            Fri 07 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        185.7.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:90:30:4f:86:d0:cf:a5:61:16:5b:98:fe:8c:b1:4b:26:17:02:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  9 00:10:52 2026 GMT
            Not After : Aug  7 23:59:59 2026 GMT
        Subject: serialNumber=6cfca10d4e25a91b707e0aa573dad4f07b352b27954b93713658b60d08463c0e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:40:c2:39:c0:2b:4c:08:b6:6b:63:e5:7f:b6:
                    fc:3a:52:34:cc:b1:ef:c4:c5:17:08:9e:9d:78:01:
                    1f:0a:c0:f2:51:60:fa:b7:1d:48:19:6e:05:95:73:
                    8e:c5:b5:50:39:65:a1:a9:ce:a0:b9:44:8a:8e:d2:
                    d2:89:b4:05:fb:f0:3c:6a:36:49:4d:69:86:fa:eb:
                    a5:53:fb:5c:42:86:2b:78:3a:81:83:e7:a6:c6:d2:
                    aa:93:e1:ea:3e:23:7a:76:8c:7f:b9:53:f3:78:60:
                    9a:85:07:c3:2e:a9:3c:92:bf:af:2a:70:f9:11:b8:
                    7f:57:0c:d3:f0:6c:9b:d2:48:4e:15:20:4e:fa:a3:
                    dd:f9:8f:fa:84:fc:d4:fd:9f:f2:74:fc:c2:2c:a8:
                    f1:e0:b9:98:b1:e1:37:b6:a8:ec:01:62:33:6b:54:
                    2c:85:5f:a6:23:36:f9:cd:16:1e:da:61:d1:c9:62:
                    e0:82:02:ce:34:38:25:f6:c5:99:92:c6:5a:bf:ff:
                    6a:03:52:23:67:a2:e6:63:df:e2:1f:91:31:62:fb:
                    5e:48:be:a0:ad:35:27:38:89:2c:3e:e2:70:7d:e7:
                    64:fe:b0:6e:3a:7c:e3:fa:b9:63:dd:de:2f:0a:5d:
                    a4:b6:6e:7b:5d:ee:f9:b7:d0:02:3e:5a:24:d5:05:
                    c9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CB:A6:7C:52:78:82:07:FE:10:79:A3:87:DF:05:5B:CE:5D:7A:F1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59994030-fa77-46f8-8c5a-9301b2931210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.7.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:fe:09:62:24:13:53:88:70:6d:74:b5:d7:f3:5d:46:7b:a6:
         34:26:f0:43:3e:9d:74:e2:34:c5:be:91:0f:21:48:c4:39:89:
         21:5e:72:e6:b3:dc:14:61:6a:6b:ac:29:05:31:4b:f6:9d:be:
         e2:bc:b0:72:92:f1:44:ba:2f:0f:39:75:2b:ef:57:3e:42:8c:
         22:e5:46:0e:4b:6f:91:00:5e:31:8e:04:26:9c:89:b1:c1:c8:
         78:df:04:e8:1b:26:36:ea:32:1c:fc:33:fb:fc:f8:76:a1:a7:
         60:ab:be:97:36:05:43:ab:ee:24:0d:cf:d7:f3:36:f6:24:3f:
         68:ae:c4:e1:66:dc:56:2e:4d:39:06:b9:40:44:be:1d:24:15:
         e6:0d:b9:30:3f:d6:03:72:23:d9:61:ae:2a:22:ab:a8:2a:23:
         d9:30:a6:96:52:80:d5:5c:25:65:44:ee:ef:0d:8b:46:5a:ef:
         70:4d:b2:d3:e8:1d:d9:5c:a6:e5:0d:e7:b4:f1:c0:47:f4:86:
         fd:fd:70:c0:0b:18:97:f9:e3:10:2d:95:df:0a:68:9b:10:20:
         c9:21:74:3a:9c:7d:9a:1e:de:27:1d:99:bc:9d:2f:2c:db:7d:
         a8:94:b2:a0:2c:bc:26:27:70:10:8c:08:b1:07:ac:6f:aa:43:
         61:00:b6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:16:01 2026 by rpki-client