Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6dbdebba-e361-477e-ae11-d68def64ccc4.roa
File:                     6dbdebba-e361-477e-ae11-d68def64ccc4.roa (raw, json)
Hash identifier:          Pxki2ifRdpOeh91RSoWGownakce0m2OvBSz+q2rWHqY=
Subject key identifier:   70:4D:7D:08:B0:B3:2D:37:E2:CF:AB:57:BB:E6:2B:89:60:84:61:6E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       79D18ACF40CC7D1BD20F2600E86379E350FA9D13
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6dbdebba-e361-477e-ae11-d68def64ccc4.roa
Signing time:             Mon 27 Apr 2026 00:20:05 +0000
ROA not before:           Mon 27 Apr 2026 00:20:05 +0000
ROA not after:            Sun 26 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        136.17.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d1:8a:cf:40:cc:7d:1b:d2:0f:26:00:e8:63:79:e3:50:fa:9d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 27 00:20:05 2026 GMT
            Not After : Jul 26 23:59:59 2026 GMT
        Subject: serialNumber=7b7db46e3c1992ccf2ca74292765f48902fa602ff68e6f326576fbf6be1d4a98, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f7:14:c8:ab:f4:d6:ba:2e:06:fb:b5:c2:0a:
                    d0:3f:bc:6e:76:42:b0:b1:bf:73:5e:f3:a7:09:52:
                    2b:af:dd:bc:38:4c:f2:33:87:89:bd:36:93:da:35:
                    9a:e3:03:29:15:a5:69:ab:9d:a8:2f:dd:c5:6a:5c:
                    23:ea:24:d2:4c:c9:fa:41:db:35:67:bf:a2:a6:62:
                    85:5b:a0:7a:e9:f2:c4:07:4f:4f:c1:7c:a5:32:ef:
                    8b:61:7a:c5:1d:73:a4:89:8b:33:f6:be:3a:d4:19:
                    e0:3c:ff:6b:4b:4e:63:3c:b9:ce:fa:bb:70:ff:cc:
                    91:ca:49:a2:53:80:91:17:ab:bb:81:08:e4:87:26:
                    84:a4:94:a8:39:e6:bf:7e:2a:d9:24:d4:de:04:e6:
                    95:38:ea:05:28:ed:4c:87:5d:82:1b:15:bb:0f:ee:
                    30:00:47:e2:62:79:35:5e:21:27:a5:9c:c1:e6:ff:
                    e6:3b:de:76:09:61:75:75:1f:0f:6c:21:c3:cb:2c:
                    ca:ee:06:0a:2a:7b:9c:d0:2a:ab:f7:ee:bf:47:82:
                    c7:a3:2f:34:c6:d9:76:fc:10:4c:05:c5:21:5b:68:
                    9b:ac:2b:75:02:0b:3d:8d:93:b8:dd:c3:26:70:be:
                    45:eb:f3:9b:86:46:57:f0:72:2e:27:65:9c:e0:5c:
                    d2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4D:7D:08:B0:B3:2D:37:E2:CF:AB:57:BB:E6:2B:89:60:84:61:6E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6dbdebba-e361-477e-ae11-d68def64ccc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.17.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1d:16:9c:12:6f:6a:0c:e5:1d:d0:99:f3:77:bb:66:ee:82:6f:
         d5:f9:71:98:36:2a:3f:07:ae:bf:7d:10:13:86:ec:70:ec:eb:
         ec:b3:74:c6:ac:52:3f:0d:c5:37:7b:89:53:a0:fa:83:14:02:
         42:c5:b1:a8:1c:ff:11:59:51:9e:7d:b8:71:5d:e2:09:6d:f5:
         26:b3:fd:92:d6:0b:86:e2:09:54:b1:47:86:1f:a5:93:bf:f4:
         95:74:af:bc:79:21:37:a0:63:94:56:f1:e3:67:91:fb:90:2b:
         2c:b2:80:4f:88:09:e5:61:6c:ed:15:d8:23:f7:f3:0a:bb:fd:
         e5:e6:5b:8d:14:f0:ac:19:80:4d:21:f8:e8:db:02:d1:d4:3c:
         22:83:f5:9a:96:83:e2:e1:c5:05:39:ee:a1:1c:cd:b5:27:79:
         ed:a3:04:39:b9:6d:89:e3:be:90:30:05:ea:58:95:86:cd:63:
         a4:38:af:07:1a:2b:ee:fb:b2:55:e5:c9:1a:bb:0a:8c:f2:cb:
         82:d8:83:1f:d0:ee:5d:e4:1f:83:fa:c0:91:3c:59:8f:64:cb:
         ca:a7:e3:c8:96:08:86:0f:f0:58:b9:dc:c7:16:0c:fe:75:45:
         66:8a:5b:0b:dd:cb:9a:89:f5:7a:a9:0e:18:11:d9:7e:9d:25:
         ee:35:32:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:40:31 2026 by rpki-client