Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/764f43c2-e082-43ab-bc88-6880529588f0.roa
File:                     764f43c2-e082-43ab-bc88-6880529588f0.roa (raw, json)
Hash identifier:          bDduKx0SjsLS6Mhe0P4yDH7bQ4xKHzdikzm4wfZM4VQ=
Subject key identifier:   73:D8:59:E0:37:93:C4:15:52:B8:FF:31:45:A8:67:71:D6:E1:97:B2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       578523AEBAB579C93ABC7DEB91C022037894A646
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/764f43c2-e082-43ab-bc88-6880529588f0.roa
Signing time:             Tue 05 May 2026 00:30:11 +0000
ROA not before:           Tue 05 May 2026 00:30:11 +0000
ROA not after:            Mon 03 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        184.73.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:85:23:ae:ba:b5:79:c9:3a:bc:7d:eb:91:c0:22:03:78:94:a6:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  5 00:30:11 2026 GMT
            Not After : Aug  3 23:59:59 2026 GMT
        Subject: serialNumber=7d3fc843a167439bb93586a0b473334a2b028cd5c410b0553aaefdffa84385be, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:05:25:c6:a6:bd:c3:e5:3d:48:76:90:24:c8:
                    dd:11:81:f0:7f:56:fe:d7:24:86:bb:3d:21:21:f8:
                    09:7a:8a:40:f3:ed:62:5a:69:13:96:cd:1b:be:d3:
                    81:f4:6c:d7:8a:17:0f:a7:38:bb:f3:69:94:e0:9b:
                    e6:e6:2a:17:fb:a3:3f:fa:e1:1d:50:f4:1f:95:15:
                    80:a0:ff:78:0e:e1:c4:1f:02:15:fe:b1:eb:bf:0d:
                    16:0e:33:d7:a3:c3:7e:f2:bf:f0:11:7b:21:75:37:
                    d7:4e:73:b8:ec:55:81:b6:2c:29:df:c1:74:7b:6f:
                    ec:b1:4d:43:e5:39:2a:86:ca:f2:91:10:ba:07:f9:
                    34:b1:6c:83:3b:a2:94:9b:b2:a2:3a:f4:00:29:7e:
                    0e:44:b7:3c:03:ac:20:d7:f7:a7:d0:97:15:eb:44:
                    99:f7:53:a8:94:45:8b:26:18:0e:a5:43:9d:af:20:
                    86:e7:44:03:48:5f:3c:6d:55:33:45:a4:a3:7d:60:
                    3b:90:1e:bd:d5:cf:11:73:ec:f5:fb:a8:7e:cd:89:
                    4e:45:50:c9:33:73:6a:d8:78:e2:9b:5d:81:84:27:
                    11:d4:cd:d5:07:f0:4f:b0:e9:18:8b:67:93:04:14:
                    51:fa:18:39:32:55:cd:ae:89:4d:c6:d1:2f:0f:26:
                    4d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D8:59:E0:37:93:C4:15:52:B8:FF:31:45:A8:67:71:D6:E1:97:B2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/764f43c2-e082-43ab-bc88-6880529588f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.73.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         d1:d7:81:e2:88:ca:3d:58:9b:90:38:3d:cc:be:dc:02:a9:41:
         1f:5f:9b:99:9c:89:77:5a:3b:b6:c4:70:95:41:5f:ba:ac:57:
         1d:2d:47:a4:60:2f:2a:a4:50:fd:68:d6:b9:96:ce:3c:ba:04:
         06:27:c5:77:54:91:4a:03:0e:40:8a:5a:c6:90:af:8a:d5:b5:
         b7:50:b4:e9:11:b3:7f:2e:c8:f8:57:1e:87:60:de:9f:90:30:
         48:29:ad:4f:52:5c:41:8b:1c:5c:4c:ea:7c:d3:93:bb:9a:63:
         39:f9:23:58:08:f9:fe:ba:91:2f:2b:29:3b:a8:f4:82:9f:e7:
         1d:33:34:9e:73:dd:63:8b:59:65:81:76:4a:53:d8:c6:bf:86:
         9c:61:76:a2:1f:d3:c8:4f:25:58:68:3e:40:4b:f6:7f:73:52:
         ca:71:6b:7b:34:e0:32:ee:e2:a6:a1:db:3b:d5:0b:65:19:df:
         e9:f2:f2:99:cd:f4:15:88:29:b6:7b:af:40:9d:13:5f:bc:15:
         7a:a8:9b:40:ec:0f:ba:8c:1b:ea:d9:d1:c0:ab:e6:e3:3f:45:
         7b:a1:da:fc:c9:10:d0:c2:82:78:e3:78:e7:20:3c:b2:52:90:
         12:3c:05:c1:25:61:52:ab:41:01:a7:6f:e2:49:06:48:32:bc:
         70:00:bf:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:48:35 2026 by rpki-client