Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f82466f-3c42-4c5a-bdf5-5c16a5740bdc.roa
File:                     5f82466f-3c42-4c5a-bdf5-5c16a5740bdc.roa (raw, json)
Hash identifier:          pwL9gTw8suq5S1aKNTlv3TSXn2HR1gpAAhofvj2S5eo=
Subject key identifier:   C6:14:F9:22:EE:91:63:3F:01:EE:A1:69:1F:CF:A0:DE:78:4E:A8:1D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       17ABDB87AE92C13B9DCEB22450A0377E7F70
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f82466f-3c42-4c5a-bdf5-5c16a5740bdc.roa
Signing time:             Mon 20 Jul 2026 00:31:20 +0000
ROA not before:           Mon 20 Jul 2026 00:31:20 +0000
ROA not after:            Sun 18 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        66.255.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ab:db:87:ae:92:c1:3b:9d:ce:b2:24:50:a0:37:7e:7f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 20 00:31:20 2026 GMT
            Not After : Oct 18 23:59:59 2026 GMT
        Subject: serialNumber=468170489fdbc899c37a39bc22355d426e9df626f615264e852dadbe36b454fa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1d:f9:ae:9d:24:da:30:68:e0:7a:f8:4a:10:
                    4d:ff:18:be:c1:ed:29:c1:d8:ca:ff:c1:e8:01:16:
                    9e:23:51:cb:e8:ac:67:65:97:42:ae:e5:16:3a:1e:
                    60:f6:e3:64:3c:c2:fd:ac:c0:4c:54:26:e1:05:56:
                    f3:2e:1d:ae:71:d8:ad:65:13:50:9d:e9:7c:45:b6:
                    90:19:e2:39:87:ee:23:e0:cf:56:44:d9:4b:11:7a:
                    af:40:4a:51:da:4e:42:04:e4:85:fb:0f:23:c7:b9:
                    94:a0:15:b2:2a:22:72:81:41:43:d2:ad:4f:bc:b8:
                    a2:67:7a:5a:a2:1c:b5:8f:c6:c8:f8:b8:b4:3a:9c:
                    57:22:ca:e0:f2:15:a7:25:f4:d6:c7:e6:58:37:8a:
                    41:59:88:58:52:ee:8c:83:9c:47:3b:38:53:ee:30:
                    86:2f:5e:4a:c1:46:9a:47:75:50:ef:c5:28:09:8b:
                    0f:5b:db:71:54:80:21:2e:24:ff:bc:e0:2d:e8:1c:
                    36:47:5c:f5:02:64:ca:42:0c:18:9f:44:c5:90:88:
                    53:f9:ed:60:3f:a1:b7:e9:80:54:75:fc:ff:3c:9a:
                    a8:0d:5d:e2:2b:7c:5f:71:fa:bb:77:72:1e:85:de:
                    33:c1:32:91:ac:06:7a:0f:c7:31:1c:b8:9a:19:3e:
                    d0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:14:F9:22:EE:91:63:3F:01:EE:A1:69:1F:CF:A0:DE:78:4E:A8:1D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f82466f-3c42-4c5a-bdf5-5c16a5740bdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.255.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         60:6d:8a:9f:28:8b:a0:0d:0d:29:9a:61:e6:10:85:12:55:2c:
         02:6b:dd:85:7a:e2:46:74:0a:34:9e:28:e3:3f:6a:e2:73:ec:
         ac:38:43:b0:eb:da:3b:a4:5a:a0:99:53:d9:73:ea:6c:6d:d3:
         ae:77:6a:76:04:d0:26:72:43:34:97:ee:7d:e4:c1:2b:b8:09:
         35:38:e9:cd:d9:1d:34:23:12:a6:1e:95:90:b2:ce:4c:2c:31:
         3b:32:04:4f:59:d7:16:d4:e7:ac:b9:20:71:85:23:f3:a8:85:
         40:98:e1:58:3b:39:8a:68:7a:1c:a8:83:36:1e:af:34:5e:18:
         25:32:dd:a8:23:c6:92:69:e4:33:7b:49:1d:6b:c2:1b:59:21:
         d3:3b:f9:b0:66:6e:f3:31:b1:09:8e:0f:8e:b5:7b:2d:c9:79:
         04:22:8f:85:ff:51:e7:63:ae:36:b9:a2:ed:92:1d:ce:aa:3f:
         dc:21:5c:d2:8b:60:a3:c7:b5:84:12:a1:da:f0:91:08:1d:f9:
         74:a9:8d:6b:9e:9f:18:e7:3e:b9:60:30:6d:19:0a:a0:38:39:
         d4:d2:4c:97:3c:36:eb:2b:21:f8:30:13:5c:61:06:58:97:21:
         10:08:a6:63:3f:57:d3:e4:16:22:55:9a:65:2d:00:75:69:94:
         a1:ad:51:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:32:40 2026 by rpki-client