Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91ea0496-867b-4435-a47a-de477b4827c7.roa
File:                     91ea0496-867b-4435-a47a-de477b4827c7.roa (raw, json)
Hash identifier:          laZ++YWwkgd8Ssdp70EaDfAdOGS+2t9dQF2f/Pmvlnc=
Subject key identifier:   2E:8B:87:80:7F:01:3B:47:24:91:6D:6B:96:B4:00:16:04:10:ED:AD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       07CD2284B9CC4D498D6DB8AF389A76E4B587F9D2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91ea0496-867b-4435-a47a-de477b4827c7.roa
Signing time:             Thu 23 Jul 2026 00:11:46 +0000
ROA not before:           Thu 23 Jul 2026 00:11:46 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        44.233.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:cd:22:84:b9:cc:4d:49:8d:6d:b8:af:38:9a:76:e4:b5:87:f9:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 23 00:11:46 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=8ba57987507a415b1745678cd9b9af7d4c0a45554b63e7c7ea7143461df4e390, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f8:27:76:4c:59:61:84:f9:3c:48:31:dd:9f:
                    f8:00:a0:c8:05:98:f2:02:5c:1c:22:25:a8:70:71:
                    17:81:f1:a5:cc:f6:00:40:6d:b8:3f:cb:67:99:95:
                    b5:db:6d:41:cc:78:8d:dd:31:d1:69:62:01:1c:87:
                    8b:9f:ec:c7:b5:2f:15:84:c4:f2:25:ef:42:71:22:
                    da:d0:39:e0:41:7d:8c:1c:bd:d4:79:25:17:a7:6c:
                    28:35:d6:56:cb:70:10:d5:8a:27:5a:25:72:05:fe:
                    19:2a:a6:da:ad:6a:ce:03:64:47:d2:8a:61:2d:81:
                    dd:64:1a:50:c0:6a:ee:7a:93:30:da:d0:34:13:c4:
                    b2:78:31:57:15:ef:08:81:dd:00:49:0b:40:7a:b0:
                    2e:78:ba:2e:aa:63:64:7b:20:ff:1f:21:11:1a:7c:
                    10:db:7a:ef:26:42:6f:86:22:cf:c3:0a:37:9c:b2:
                    be:16:8f:e8:4e:41:e2:8c:3d:d3:8f:94:1e:80:7b:
                    fc:7b:c2:c0:f1:32:b7:54:83:8d:2f:1d:32:d8:01:
                    12:86:74:93:67:c1:20:26:21:98:ba:c4:28:a8:a7:
                    02:a6:81:c9:dc:b9:a0:c7:b6:5d:2f:13:56:9f:88:
                    db:8a:79:42:a5:4d:81:50:cd:47:c9:ae:ff:f2:ed:
                    06:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8B:87:80:7F:01:3B:47:24:91:6D:6B:96:B4:00:16:04:10:ED:AD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91ea0496-867b-4435-a47a-de477b4827c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  44.233.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:18:2f:b3:15:3e:e4:ba:cb:df:07:ed:0d:e6:3f:e9:9e:dd:
         ca:b8:fe:df:16:14:01:2a:6e:58:cc:f9:dd:1c:e8:6c:67:9e:
         49:53:32:87:02:18:d2:cc:f6:cf:a7:62:bf:dd:65:17:fc:11:
         08:ca:bd:65:28:83:18:96:42:71:98:a4:a4:6c:5b:a3:33:ea:
         1f:d5:9b:4f:91:38:81:88:f5:34:a6:04:45:0f:44:72:dd:1c:
         6a:10:4a:c5:bd:e2:67:ad:f1:c7:43:3b:32:a5:7a:d9:e9:ee:
         a0:3b:04:99:b6:bb:36:03:43:d3:d7:0b:d3:21:38:42:7d:65:
         86:ca:a5:c2:9b:b9:5b:09:0a:7e:87:09:f7:bb:7b:2b:9f:6c:
         df:6a:20:2c:88:2c:e8:fa:10:a0:7d:41:cc:85:c4:0e:ed:75:
         ae:25:6d:78:36:56:2a:09:58:02:16:64:1c:9c:e6:96:ac:ee:
         b8:4a:62:71:e2:80:23:5b:ae:79:9a:bb:07:c7:6b:c6:c4:ad:
         ac:bf:35:cf:98:66:b5:ba:77:24:3e:83:c0:6d:2f:6a:48:c1:
         c8:a2:ce:67:ff:7a:fc:4d:d4:6e:59:a9:18:0d:46:f2:89:eb:
         95:d8:ac:f0:90:d8:46:61:ea:6e:1a:8c:6c:cd:34:5b:57:82:
         0d:40:9e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:15:20 2026 by rpki-client