Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81f20b3f-a3c5-41dd-8d1c-0a6bb7cea300.roa
File:                     81f20b3f-a3c5-41dd-8d1c-0a6bb7cea300.roa (raw, json)
Hash identifier:          mR8YeUCefpG0eFbjpPd1OQXxAQxgkrNOlFducVi4d8g=
Subject key identifier:   45:1A:27:97:79:B9:16:70:C5:D7:DB:57:7B:20:1B:92:EB:EC:6A:EA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5A5FE5317D3239D5FC9427EE6A7D85C32558B6ED
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81f20b3f-a3c5-41dd-8d1c-0a6bb7cea300.roa
Signing time:             Wed 06 May 2026 00:11:09 +0000
ROA not before:           Wed 06 May 2026 00:11:09 +0000
ROA not after:            Tue 04 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        66.63.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:5f:e5:31:7d:32:39:d5:fc:94:27:ee:6a:7d:85:c3:25:58:b6:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  6 00:11:09 2026 GMT
            Not After : Aug  4 23:59:59 2026 GMT
        Subject: serialNumber=1f9931acb10f33d8cc20186ae27275e0b13d1bb4e93191567b50065e44ba6450, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7d:52:c9:af:d2:36:40:de:38:22:19:d0:82:
                    44:2e:bb:df:b4:2f:5b:4e:4b:61:60:43:b3:d3:70:
                    67:73:f7:49:2a:85:f2:a4:b4:40:b5:8c:9d:ed:0f:
                    18:1f:d1:e6:bf:fd:bc:a6:ba:46:74:6a:7c:83:df:
                    14:21:d6:ee:af:80:13:86:ce:32:14:d5:55:4b:7a:
                    f1:c7:03:99:df:cf:37:ac:62:a2:2e:43:7e:ed:b4:
                    ef:bf:85:eb:55:69:7a:62:98:c0:86:7b:e6:b7:30:
                    24:46:47:a4:23:fa:0f:64:7f:d2:8f:6b:92:fa:52:
                    46:9f:be:bf:d2:2f:87:81:e5:94:48:55:14:ba:a6:
                    f0:33:3e:4e:cf:3f:c1:35:c7:7a:86:74:9b:33:59:
                    1c:eb:30:f3:6e:9d:87:5a:cf:ae:1b:c0:65:87:dc:
                    ae:e8:45:99:70:9d:77:bb:98:8d:64:dd:a2:b6:ad:
                    db:44:8e:24:87:ad:f2:bc:c4:4d:6d:f5:7a:c1:bb:
                    8b:a7:11:68:32:a9:a5:a6:af:ff:e1:e8:50:1d:b8:
                    e3:6d:9d:8e:63:9c:24:80:e3:2f:69:2b:b9:d1:e2:
                    c7:fe:9d:bd:b0:4f:93:8c:d0:42:1f:05:6a:6e:71:
                    49:b8:69:18:ff:02:75:3a:99:0b:94:ce:08:cf:e5:
                    f1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1A:27:97:79:B9:16:70:C5:D7:DB:57:7B:20:1B:92:EB:EC:6A:EA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81f20b3f-a3c5-41dd-8d1c-0a6bb7cea300.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.63.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9d:09:18:e8:42:b7:41:79:b1:0a:0a:32:ed:0f:29:8c:02:c4:
         f7:f4:de:90:80:a9:73:5c:16:6c:2c:53:1a:78:9d:43:b3:0b:
         b7:b8:c6:da:cf:88:7b:03:b1:28:a0:0f:38:c8:79:7f:33:bc:
         90:12:af:cb:b1:a0:53:b8:61:d4:22:cb:ef:4d:07:67:1e:35:
         0a:22:d3:d7:7f:bb:0f:57:1c:19:bb:8d:e2:f4:f6:92:6e:c1:
         01:04:f7:01:1d:45:fd:56:4c:95:73:54:4a:9e:58:4c:15:9a:
         26:eb:f3:e2:ed:1b:ef:a5:24:8c:43:bc:40:81:3f:59:7b:04:
         08:57:c5:43:a0:4c:91:14:39:41:e7:ac:0e:2c:1d:f7:ff:13:
         40:14:a2:62:37:10:0f:da:40:2a:4b:91:43:65:d9:24:b1:60:
         89:30:94:53:89:56:cc:8c:ae:e3:f3:5c:75:05:26:78:2b:0a:
         f3:91:07:c7:7e:4b:85:da:b1:23:14:06:6c:37:73:de:70:25:
         e4:24:89:47:36:6d:db:af:f8:de:d9:1e:74:fc:1b:3b:ad:ce:
         d2:93:88:28:0d:de:93:dc:60:78:6e:61:bc:67:25:be:fe:9e:
         7f:72:8d:f5:32:c4:b9:48:5d:c1:58:fb:9c:71:2c:a5:cd:9f:
         ad:3a:cb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:50:24 2026 by rpki-client