Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59b45e95-5c92-40c2-8378-600986966c75.roa
File:                     59b45e95-5c92-40c2-8378-600986966c75.roa (raw, json)
Hash identifier:          pUz+aKgjQjjEn52pIHvNs9aBK63QLaQYHhUmvTt+M6k=
Subject key identifier:   F1:73:2D:BE:07:64:37:88:3A:A2:82:7E:CA:80:89:2D:3B:E6:64:F9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       136859087CD79769E57E4939622A24B76A64FEDE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59b45e95-5c92-40c2-8378-600986966c75.roa
Signing time:             Sat 18 Jul 2026 00:01:24 +0000
ROA not before:           Sat 18 Jul 2026 00:01:24 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        96.0.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:68:59:08:7c:d7:97:69:e5:7e:49:39:62:2a:24:b7:6a:64:fe:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:01:24 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=30c6fcbae481142da704e7171d3a3b6fdaa6c3d4d2bfe0ac3c747b1f3d34b322, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b0:8b:c1:5c:71:c7:17:6c:85:e1:28:82:30:
                    b6:86:3b:9d:9f:82:61:d2:0c:7f:b1:9c:5e:d8:0a:
                    60:ac:18:2f:c6:00:f9:a6:3a:87:3b:32:4b:19:5f:
                    4f:97:d9:ef:4a:cc:1e:c8:24:c7:5a:63:da:5c:b1:
                    b3:ea:db:90:8c:a6:d6:91:4b:11:bc:95:13:14:19:
                    4f:a7:63:83:a9:18:cd:29:f8:76:e9:a9:f1:32:40:
                    34:78:c4:78:a1:12:46:65:ba:1c:f5:81:23:c5:62:
                    70:dc:a0:e8:6a:0e:9a:7f:a0:c1:60:64:c2:89:b5:
                    6c:6f:38:2c:75:47:7b:26:31:35:db:47:de:b6:8b:
                    aa:f2:ab:e1:41:e2:5a:9d:1d:3c:4d:a6:60:15:4c:
                    44:f9:b2:b2:2b:15:b7:93:c0:84:99:d1:81:b5:4c:
                    1c:27:56:11:45:e6:88:85:d0:81:59:4d:af:bd:25:
                    28:12:54:d6:1a:21:66:66:30:3c:90:6c:22:93:7f:
                    4e:2f:69:83:a8:bc:77:eb:aa:89:a1:a3:3d:ab:c2:
                    c0:5f:c0:92:b8:bd:97:18:1d:28:fd:67:6d:32:5d:
                    9d:ac:c0:61:bb:12:51:8d:5c:8e:ac:42:79:79:63:
                    c3:cf:8b:34:44:db:01:14:c0:04:f9:75:78:a9:5f:
                    6e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:73:2D:BE:07:64:37:88:3A:A2:82:7E:CA:80:89:2D:3B:E6:64:F9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59b45e95-5c92-40c2-8378-600986966c75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.0.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:63:96:17:8c:ed:40:43:d8:f6:74:65:2e:30:ee:53:b1:ed:
         86:c1:b7:85:be:59:03:63:d4:ef:3a:c7:ee:17:bc:cd:d3:ca:
         ef:2d:7e:14:96:00:11:4b:dd:60:bb:74:68:17:75:2b:0b:19:
         2d:ef:79:1a:a2:9e:f4:cb:eb:03:18:81:ed:82:9a:d7:f5:55:
         06:c9:35:07:16:37:98:ae:de:93:4f:49:de:5f:39:60:f3:f7:
         86:49:63:26:47:3e:73:91:57:9d:6e:06:2a:50:3f:fb:91:8f:
         85:55:54:5b:b0:9e:de:0f:c8:38:5c:86:80:0d:29:a5:93:6a:
         7d:a1:05:76:47:57:a7:aa:e2:51:77:9d:6a:ac:21:9d:08:2a:
         b1:62:91:0a:85:36:6d:ca:39:33:a2:f8:29:c1:f0:5b:3b:00:
         a0:22:fb:dc:98:c9:df:c4:a3:93:db:5a:17:af:09:73:42:e4:
         cd:c9:fc:57:a0:e0:43:fe:1b:10:6d:e8:16:b6:95:13:d3:33:
         fb:2b:6c:1d:43:1e:03:de:d6:57:79:3f:1e:a2:42:20:3d:d6:
         18:e8:7d:16:cb:b5:5a:56:4a:c4:44:51:80:fc:88:42:15:f7:
         1e:c7:15:60:5d:03:d3:11:af:06:56:40:ef:fe:1c:3f:c9:5a:
         79:bd:84:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:11 2026 by rpki-client