Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82d7dbf7-e4ac-4069-b055-f84a863c4316.roa
File:                     82d7dbf7-e4ac-4069-b055-f84a863c4316.roa (raw, json)
Hash identifier:          tENKEV4K7S4DJpMq83nPHXxEpEPxLlFiDpyPyarnEn0=
Subject key identifier:   CB:80:CD:C3:B9:00:3D:D3:3E:2A:F7:54:B1:10:14:C9:BE:9A:44:DF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1AAB242F45666EE8D2F78F6F9FD0B77154561DF0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82d7dbf7-e4ac-4069-b055-f84a863c4316.roa
Signing time:             Sat 18 Jul 2026 00:40:10 +0000
ROA not before:           Sat 18 Jul 2026 00:40:10 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        64.41.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ab:24:2f:45:66:6e:e8:d2:f7:8f:6f:9f:d0:b7:71:54:56:1d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:40:10 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=6ec41af89100781215dacdfd56004dd46e5db801cc1e82f080bf4d521d95aaed, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:d0:2b:ed:94:41:83:e6:ee:d3:0c:74:8f:
                    46:c3:71:f7:6e:2c:97:ad:e1:9a:3c:1b:90:50:d2:
                    f9:dc:af:73:14:05:f3:ed:b6:24:33:b4:ec:bc:e4:
                    37:28:22:cc:5b:11:c2:6e:59:b4:e9:57:73:61:fe:
                    b7:f2:d5:f5:a3:e5:24:af:6b:87:05:da:04:b3:45:
                    ac:00:df:f8:a4:aa:61:e1:6f:05:d5:66:07:19:45:
                    23:d1:05:80:00:2e:70:88:99:03:87:02:4d:cb:34:
                    33:05:2c:4d:76:d2:a3:d4:41:ad:62:3e:1b:f5:1f:
                    fa:82:c1:cd:8f:88:f1:06:b9:4d:d2:d0:36:41:7f:
                    64:89:f9:8e:cc:af:5b:bf:48:cf:82:69:a1:45:89:
                    51:b8:bf:ad:17:54:19:98:77:f6:83:5b:e3:a2:37:
                    48:c3:88:ac:d4:cd:82:6d:4f:48:d4:7d:94:c7:c0:
                    34:10:1e:ee:de:7c:b5:e6:9c:d7:ca:cf:38:e0:8d:
                    c4:a0:62:fb:68:75:3b:8b:30:07:0d:36:d8:df:ec:
                    81:82:78:4e:a5:45:f1:d8:31:cf:58:b4:a2:8e:90:
                    a6:6d:c0:68:5c:7c:0f:3b:49:66:b9:cd:7d:08:d9:
                    27:a6:ca:69:74:f9:a1:72:1f:8c:85:df:6b:56:7f:
                    a7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:80:CD:C3:B9:00:3D:D3:3E:2A:F7:54:B1:10:14:C9:BE:9A:44:DF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82d7dbf7-e4ac-4069-b055-f84a863c4316.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.41.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b9:0e:d7:a2:1e:e8:9c:59:05:92:fc:04:de:c3:67:69:94:d1:
         6a:07:b6:19:8f:42:6d:61:a2:46:c9:f1:c5:cc:18:82:50:15:
         82:0b:ab:4c:60:30:d3:57:3a:07:53:b1:64:73:b0:a0:a9:dd:
         15:9d:08:9e:b2:95:62:56:f7:55:d1:63:12:9e:83:1c:d4:63:
         ea:4a:92:b7:9c:a4:7b:27:6a:06:4e:83:db:c8:df:db:fb:7d:
         ba:09:f2:13:e0:98:8a:1c:dd:7e:0d:6e:3a:2a:a8:c4:e4:dc:
         d6:b8:e5:c2:fa:84:0b:b7:58:ac:99:95:d6:f4:3a:f1:4c:79:
         54:88:a8:75:bf:d5:40:ee:a9:6b:06:d6:b5:dd:55:94:cd:8a:
         d8:4f:13:6e:3a:ff:24:97:54:a1:f9:1c:e1:64:44:06:34:08:
         e2:cc:2b:7c:cd:7d:07:62:24:89:31:9e:08:ee:ce:cd:f7:97:
         de:6d:ab:f9:ff:ad:92:50:1a:e3:0d:ee:12:5c:a1:32:1b:c2:
         73:03:ae:b5:d1:c7:3a:a8:a2:10:72:25:18:70:01:c0:c1:24:
         77:6a:a7:26:76:59:92:a2:a1:f5:83:7d:5b:6d:af:73:b6:2a:
         92:91:36:58:95:9d:84:50:ec:61:df:fc:48:87:b5:6d:94:a7:
         e4:cb:8c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:25 2026 by rpki-client