Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78823995-1ea3-458b-919e-48e1b3b2cfc4.roa
File:                     78823995-1ea3-458b-919e-48e1b3b2cfc4.roa (raw, json)
Hash identifier:          k6ofnQF5Se34ojCJRO3HBk8jrgXV51iqkQwsN2ZA8DM=
Subject key identifier:   0B:E7:48:FA:25:D3:1C:38:A3:BA:D1:10:8B:F5:CF:C3:48:DB:AB:3E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       558C74AB18A066F3D82C3AD5F4D188E120C622B3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78823995-1ea3-458b-919e-48e1b3b2cfc4.roa
Signing time:             Tue 28 Apr 2026 00:30:47 +0000
ROA not before:           Tue 28 Apr 2026 00:30:47 +0000
ROA not after:            Mon 27 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        129.30.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:8c:74:ab:18:a0:66:f3:d8:2c:3a:d5:f4:d1:88:e1:20:c6:22:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 28 00:30:47 2026 GMT
            Not After : Jul 27 23:59:59 2026 GMT
        Subject: serialNumber=5f9c8751850aebf10035fb31944adda0baa35f698b9d0d2097f09f43efaa07bc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:69:69:ca:4f:d3:8b:c0:02:e5:d3:16:03:7b:
                    83:9d:d4:d5:05:6b:cf:9e:97:80:b6:33:a3:82:ff:
                    e1:35:d3:e3:9f:22:57:9f:4c:7e:37:1a:96:36:40:
                    54:54:94:bf:71:46:1b:14:bc:ea:92:7b:b3:55:44:
                    87:89:a9:39:e3:2c:ef:a2:b6:9d:ae:86:04:ee:8e:
                    2e:48:51:06:c8:7d:26:07:48:65:a7:54:45:a1:76:
                    78:cf:40:0b:01:cb:66:e9:9c:d3:7c:d0:0b:ca:33:
                    e2:d3:35:5d:5a:75:b8:80:96:eb:d4:17:4a:93:2d:
                    ac:ed:66:67:b9:1d:20:c0:1b:5b:8e:14:af:9f:b1:
                    1a:51:d1:75:31:fb:9d:32:8c:9c:37:57:b8:d8:ad:
                    41:82:a1:ff:3b:6f:f4:bd:19:52:9e:c7:44:7c:74:
                    85:ba:68:43:d6:94:20:07:8e:72:3f:9e:cb:a8:3b:
                    23:e5:6f:69:f9:bf:8e:bd:33:36:60:99:19:11:53:
                    8c:c9:73:71:84:d1:3e:f8:20:60:87:fd:f2:e9:f6:
                    80:cd:7e:ba:96:58:72:bb:0e:66:d6:98:d2:05:34:
                    82:a4:b7:20:be:7c:4e:f8:8e:8d:d8:28:e4:71:5a:
                    19:ef:3d:96:8a:5f:8d:8a:6c:4c:5a:fa:83:8f:90:
                    41:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E7:48:FA:25:D3:1C:38:A3:BA:D1:10:8B:F5:CF:C3:48:DB:AB:3E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78823995-1ea3-458b-919e-48e1b3b2cfc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.30.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         81:47:be:b0:6c:fe:1a:61:07:aa:a6:69:d4:d9:fd:c6:76:b8:
         dc:0b:90:15:11:ce:c5:76:f0:ce:e6:eb:48:16:56:f5:e8:86:
         c1:a2:83:ed:19:1e:1c:17:e0:4f:d9:d5:7e:14:92:e1:be:28:
         db:87:a5:fb:40:14:41:a4:f7:02:7c:9d:09:52:a9:a4:ef:42:
         30:f0:ee:41:7c:44:f7:48:41:c2:ea:cd:17:2b:9a:25:06:c9:
         7a:95:69:26:b8:60:75:92:f3:46:63:f2:f2:fc:c7:b8:88:ba:
         a1:45:03:85:f2:05:c9:26:31:cd:5a:31:4e:5f:dd:26:22:63:
         e5:85:80:dd:50:49:90:b7:63:8f:c4:12:6a:0e:28:b0:46:a1:
         d7:6b:84:86:c5:ef:9b:0e:de:33:ab:fb:5a:f4:e9:38:62:dd:
         88:39:a7:62:bc:d1:94:42:ea:bd:5b:d3:cd:35:83:18:0f:25:
         8d:d2:39:15:36:3f:74:41:36:0d:0d:b5:c1:6c:dc:26:c8:5f:
         19:b2:36:88:0f:50:eb:de:f4:8e:3e:4f:61:0d:56:3e:65:de:
         a7:d5:f1:1e:aa:d8:ae:ae:16:02:eb:f6:94:0e:53:2c:3f:88:
         39:a0:7d:04:4a:6f:66:eb:2d:3f:1e:b5:4e:82:25:d6:fd:28:
         22:da:6a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:00:33 2026 by rpki-client