Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d552d63-bbe6-4c64-9bf6-4790de201429.roa
File:                     8d552d63-bbe6-4c64-9bf6-4790de201429.roa (raw, json)
Hash identifier:          wzg/9r7KnmNlnmnRUxC2/3CjvGtRRNptNbmdUdT64Xs=
Subject key identifier:   0B:67:CE:D4:F2:98:71:0B:AB:E1:8E:6D:0F:36:A5:D3:05:6A:FA:8F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       62DD64E02476B618B48BAAA0520F4DCC3F161307
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d552d63-bbe6-4c64-9bf6-4790de201429.roa
Signing time:             Sat 18 Jul 2026 00:30:49 +0000
ROA not before:           Sat 18 Jul 2026 00:30:49 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        56.51.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:dd:64:e0:24:76:b6:18:b4:8b:aa:a0:52:0f:4d:cc:3f:16:13:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:30:49 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=20e239e754c3a9f682df5712b76a39d18b0fe890df233e3aed22164f421e1ecd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:de:bd:99:8e:7c:65:c3:4b:21:4e:cf:be:40:
                    21:7b:ff:e6:16:7e:ae:9a:7f:2d:3c:b6:94:d2:ab:
                    97:a9:b9:24:ae:a8:4f:3a:09:a1:fc:0c:18:1f:d8:
                    20:2d:1d:29:83:29:98:4a:b7:83:38:ff:2c:36:65:
                    91:14:33:18:62:e8:8d:31:41:0f:57:a5:b6:78:63:
                    78:0d:99:08:7c:c3:d7:01:7b:63:bb:c2:02:a6:1f:
                    93:f6:a1:20:86:15:ea:b4:75:a0:07:e0:30:84:77:
                    ec:50:ea:d8:33:9f:b7:f7:a3:c5:87:9d:b3:e4:24:
                    2c:ab:fc:9c:79:31:ee:7c:0d:23:d9:fc:7a:3a:31:
                    16:8b:dd:98:cd:d9:dd:18:cf:a5:53:b2:72:42:93:
                    d6:4f:36:d4:b0:2e:4b:fc:32:de:c3:76:17:69:8e:
                    57:98:d1:b8:47:a5:91:ad:3b:9c:b7:9a:9a:ad:75:
                    68:70:85:c5:a9:57:76:50:1f:7e:52:fc:50:33:6d:
                    7a:a7:c2:63:a7:ae:2d:19:e4:03:34:63:d9:71:46:
                    9f:f5:85:02:68:63:34:db:43:d3:c5:46:8b:40:98:
                    cd:ca:3e:ef:38:ab:9b:fb:fc:f2:b3:e2:fc:e7:45:
                    1d:49:45:10:62:b3:2c:a6:02:f3:4f:ba:39:a0:31:
                    c1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:67:CE:D4:F2:98:71:0B:AB:E1:8E:6D:0F:36:A5:D3:05:6A:FA:8F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d552d63-bbe6-4c64-9bf6-4790de201429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.51.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6a:e1:71:62:47:95:81:0b:2b:ff:0f:1f:23:49:9d:a6:1f:e3:
         ad:8f:04:0d:bf:cb:d7:84:9a:55:61:1f:cc:17:e2:de:a4:66:
         f3:ee:b2:87:92:55:98:1c:e4:f0:81:24:26:75:31:82:fc:7d:
         f0:d1:33:14:51:3c:02:62:5c:10:a0:ed:0a:79:80:d5:19:d4:
         53:de:99:13:20:52:82:29:95:bb:d6:39:06:83:e3:9f:84:88:
         44:f8:cc:92:b8:dc:27:97:b8:c6:22:16:4b:91:6f:ec:dd:90:
         94:a4:52:ff:c5:73:6e:b5:1a:a3:c8:02:c0:30:05:9a:7a:f8:
         d0:a6:c9:31:85:5a:93:ff:5f:55:55:4a:31:c1:1f:19:3d:32:
         49:45:ef:9f:54:cf:db:b1:4f:88:02:25:ee:3f:e7:7e:a9:fc:
         d3:7b:07:6e:81:57:e5:ae:a8:c4:f9:e0:0b:13:a3:21:f9:e7:
         00:d4:7e:4b:4e:4c:ee:46:a4:f9:ac:5e:3a:e9:1c:c4:76:eb:
         95:2b:df:55:f8:0a:bb:68:11:76:e8:c5:f9:66:98:87:95:d4:
         a9:98:a2:18:98:e0:40:d2:f9:6f:3e:4a:32:53:0a:8e:73:0c:
         e8:6d:85:f7:6e:6a:72:99:be:33:79:4a:31:37:dd:82:75:7c:
         5d:44:21:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:53 2026 by rpki-client