Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88296b80-7a2f-4c78-bca6-31fd9a45902e.roa
File:                     88296b80-7a2f-4c78-bca6-31fd9a45902e.roa (raw, json)
Hash identifier:          C60uBvB/BiwbcyoDd4DcXs1DbU9mriEVDXch+ri9oJk=
Subject key identifier:   27:7C:65:CA:ED:1F:55:FE:98:D1:BF:87:D9:75:EE:1D:15:58:32:A9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       45FE340ABEA01268C5A6C89843C9B63F0A4A26B5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88296b80-7a2f-4c78-bca6-31fd9a45902e.roa
Signing time:             Sat 18 Jul 2026 01:00:44 +0000
ROA not before:           Sat 18 Jul 2026 01:00:44 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        66.245.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:fe:34:0a:be:a0:12:68:c5:a6:c8:98:43:c9:b6:3f:0a:4a:26:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 01:00:44 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=4c274f84f3f4dcbc0a2a2d0e48d5531f83894eee6ebc31b7b6ac36c9e4fa13af, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f1:7c:06:e6:0c:d6:44:eb:10:e9:55:89:bd:
                    f1:55:dc:2e:9a:8d:0d:f1:27:a2:6b:e3:ab:35:de:
                    2f:f6:26:a7:d2:bf:49:a1:55:f8:5d:4a:d1:0b:ac:
                    cb:5a:35:17:42:76:1b:ff:69:66:6d:ed:c6:26:ee:
                    56:91:95:2b:89:38:6e:1e:e1:02:15:a3:3d:d0:b7:
                    1e:2d:48:ef:09:6d:25:bc:f6:05:c5:a7:c7:b7:0a:
                    01:1b:6b:3c:26:8c:9f:8d:13:29:ba:01:78:b0:30:
                    6f:31:d9:f1:7c:25:08:82:ae:e5:40:e2:c8:47:61:
                    74:f3:65:fb:f3:78:79:16:d3:f9:0f:60:a9:d0:21:
                    90:fa:ef:2d:0a:69:a8:ed:7d:4c:01:78:a7:bc:9b:
                    a3:58:dc:c8:f7:a9:2d:1a:db:a3:93:db:cc:35:1c:
                    7d:22:68:ca:ed:78:e3:67:25:49:94:84:b5:d6:80:
                    32:59:70:41:93:41:3c:75:bf:4b:3f:d5:65:64:79:
                    7f:fb:79:ce:52:85:72:98:31:22:dc:67:2f:bd:cf:
                    98:ce:4a:c7:08:61:e8:06:7c:b5:44:90:86:f9:03:
                    d1:d9:a4:1b:74:a2:0f:8c:4e:98:1b:76:10:53:ed:
                    a9:80:4b:1d:b6:74:48:ba:b8:41:17:d4:6f:15:b2:
                    71:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7C:65:CA:ED:1F:55:FE:98:D1:BF:87:D9:75:EE:1D:15:58:32:A9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88296b80-7a2f-4c78-bca6-31fd9a45902e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.245.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         08:e1:5a:6d:88:c7:2a:ff:2a:6d:74:2a:33:44:71:19:f4:19:
         a0:46:4b:2c:df:64:01:1b:3a:46:c0:b3:24:4a:8a:61:55:2b:
         0e:43:fc:bf:04:9b:dc:4b:5e:d3:df:b1:74:7c:d5:8e:0d:99:
         0a:ca:02:f6:8b:de:cb:b8:e7:88:e1:1c:2c:2a:46:de:c4:eb:
         2d:b9:0a:fd:68:a2:3b:1f:e0:06:05:a0:81:bd:9d:74:40:20:
         05:b1:47:4e:e5:3c:55:16:58:b0:49:5b:24:3a:82:0a:f1:52:
         93:d1:81:9f:6b:53:bb:b5:7b:69:72:63:4c:47:1d:b6:6f:f5:
         e5:21:2b:3c:e2:13:cd:c6:e2:ca:fd:24:7c:cd:d4:df:03:cc:
         db:b0:89:09:46:7a:ac:14:96:d5:de:f3:6c:09:88:44:82:82:
         57:4e:69:97:29:bd:24:7c:31:63:61:81:cf:a2:30:c0:3c:4a:
         99:d9:7a:27:6c:fe:4f:e9:69:79:9b:24:fc:92:2b:33:c5:e4:
         4c:43:84:3b:2d:ad:d9:80:35:ba:e2:64:11:6b:f3:8e:bc:72:
         6e:8a:c7:be:ef:fc:8e:7b:88:85:d1:95:20:b0:5c:9e:3a:b1:
         cf:a1:43:f2:44:a3:41:7a:7e:2d:a5:62:11:c4:04:16:7e:f6:
         3f:32:92:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:32:10 2026 by rpki-client