Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69efde29-08ee-4f8e-ac98-6477bb18db8f.roa
File:                     69efde29-08ee-4f8e-ac98-6477bb18db8f.roa (raw, json)
Hash identifier:          4BmwwH21f4cuXkaWEmw+Dgj8vllHNSHVVup3W8jmG7I=
Subject key identifier:   94:EB:B5:79:02:93:13:80:F2:7E:BF:1A:32:4B:A6:80:FF:4E:5B:33
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7C6A02F1D2CC308BCAE70CE14EC2667B5A44EE75
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69efde29-08ee-4f8e-ac98-6477bb18db8f.roa
Signing time:             Sat 18 Jul 2026 00:20:05 +0000
ROA not before:           Sat 18 Jul 2026 00:20:05 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        74.250.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:6a:02:f1:d2:cc:30:8b:ca:e7:0c:e1:4e:c2:66:7b:5a:44:ee:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:20:05 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=9dfd179429feefd65e0ad39461b0a581a223bc827805fd69450e98c7611491a6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:14:6c:01:fc:c3:c0:79:bc:c3:29:e9:9f:89:
                    48:ab:ee:48:9a:88:79:1e:a9:05:1b:6f:50:b7:0e:
                    fe:55:fe:1f:51:68:5d:82:9a:f6:0c:7a:dd:57:60:
                    10:5a:0e:f2:a3:af:ac:59:b7:38:7d:76:3c:3d:cc:
                    89:24:2d:31:8e:a3:8c:be:48:7d:88:6e:83:9e:f5:
                    3f:8e:09:7a:16:89:4f:c2:92:ef:f6:44:90:51:52:
                    ce:7d:2e:79:4c:34:99:a6:45:af:a9:53:82:34:2f:
                    01:33:8a:54:66:72:f2:2f:ce:be:e1:cf:ee:7d:13:
                    61:a1:4a:40:c7:3d:65:e5:2c:75:cd:4f:89:c6:9c:
                    a9:a9:df:09:20:5e:83:7c:f4:af:fa:9a:56:10:f7:
                    94:a0:37:17:38:00:ae:05:a8:4d:e6:11:78:84:0d:
                    04:51:15:c4:0f:3d:7a:c1:2a:b0:51:38:10:0d:7d:
                    83:04:f4:46:e1:6b:b7:00:55:19:b9:10:78:c8:0b:
                    96:e0:4b:69:de:c5:70:66:f9:b1:e9:c6:cc:3b:64:
                    83:61:fc:ba:41:65:80:bf:21:54:a5:bc:c0:27:92:
                    95:7e:29:08:86:3c:ad:2f:b3:86:01:1e:54:16:e8:
                    a7:0f:12:6c:bf:e9:76:d4:20:0a:bc:7f:1a:28:e2:
                    57:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:EB:B5:79:02:93:13:80:F2:7E:BF:1A:32:4B:A6:80:FF:4E:5B:33
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69efde29-08ee-4f8e-ac98-6477bb18db8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.250.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         77:de:2d:15:00:ae:02:7b:8e:af:f8:11:39:c5:88:67:d1:0e:
         48:ec:6f:2d:d6:db:c3:fb:7d:33:f0:ed:c8:57:c5:2b:42:4b:
         8d:fc:15:53:c4:58:46:b4:41:37:d1:06:c1:df:4e:33:4f:19:
         72:9b:dc:05:fc:5e:b3:b1:82:25:ff:59:94:34:40:8c:f7:81:
         d0:b7:1b:f0:71:fa:67:4b:ef:03:0f:23:11:6d:54:4e:13:ea:
         dc:5d:8d:3f:c1:00:f2:b6:76:fd:54:b9:80:30:15:85:10:fd:
         dd:a1:ea:4a:9f:27:23:60:42:c5:62:7d:72:6b:91:cf:10:a5:
         fc:15:05:8e:7e:65:7d:9c:c2:59:69:b2:17:9c:95:a8:56:d8:
         ee:bc:54:a9:a3:92:8e:47:43:13:5d:61:1e:d8:56:3b:fe:49:
         03:5b:c6:b1:38:d4:36:9a:84:44:19:a0:17:2f:28:4b:e5:38:
         a6:57:31:ea:d6:43:27:60:b0:2d:92:15:ff:26:58:1a:5a:3d:
         ff:fa:78:68:8d:b7:39:41:be:1a:c5:6f:a1:da:1e:1f:ea:b7:
         fa:85:ee:1c:16:26:13:ba:c5:d7:f7:ca:24:02:85:66:75:ca:
         c2:bd:73:41:98:b9:dc:b4:c9:71:35:2d:83:c8:ae:e8:1f:77:
         2a:68:71:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:28:48 2026 by rpki-client