Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/929a3b2b-92c7-45f2-905b-1ffb4708fcf7.roa
File:                     929a3b2b-92c7-45f2-905b-1ffb4708fcf7.roa (raw, json)
Hash identifier:          02u+jccjsNtiDjncWpuaTAZVNNiXg23za/X/f9jTu+o=
Subject key identifier:   FE:BE:1B:E6:DF:ED:58:57:9D:BF:43:C9:49:D3:89:4E:08:57:27:FD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       57026E67B48004F55C802935AD891605D5B46336
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/929a3b2b-92c7-45f2-905b-1ffb4708fcf7.roa
Signing time:             Sat 18 Jul 2026 00:51:05 +0000
ROA not before:           Sat 18 Jul 2026 00:51:05 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.249.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:02:6e:67:b4:80:04:f5:5c:80:29:35:ad:89:16:05:d5:b4:63:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:51:05 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=ef23f76215b5f08dc5394e4f2ba05a2a10300f69688db71b9d7053b9a5066769, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b2:81:02:b6:b8:f3:f7:2f:43:d0:4a:40:34:
                    f7:e9:46:d9:2a:90:2d:9a:4d:df:ec:11:fb:92:22:
                    4c:ed:d6:c4:47:7c:c6:82:c5:d7:4f:06:50:97:cb:
                    94:f4:aa:75:da:12:a4:ba:86:30:67:c8:e0:28:d6:
                    d4:54:a4:6f:f0:3e:08:23:c2:4f:fd:43:ae:38:9a:
                    4b:99:fd:d8:5a:02:d9:83:0a:7f:04:f4:79:5b:31:
                    91:ce:9a:61:71:cb:cf:c6:e2:b1:02:d6:19:88:c6:
                    f7:8f:8c:43:c8:f8:dc:51:68:4d:74:18:14:6c:0c:
                    8c:86:bd:9e:98:f8:00:80:3d:cc:58:aa:b8:ed:1b:
                    00:29:c6:49:c0:1a:84:bb:89:c3:6b:aa:4a:7d:35:
                    25:47:08:9c:f7:f0:50:ab:94:a0:dd:74:9e:1a:6d:
                    21:dc:c1:c8:df:a0:53:5b:c7:91:20:84:0f:b8:00:
                    08:12:4c:91:83:fb:74:fe:89:b1:ba:d7:f7:0e:01:
                    25:44:5e:1b:e2:d5:ae:51:5c:e3:90:9d:15:91:74:
                    6c:ed:44:38:a2:bb:2b:2c:54:1f:88:ed:7f:e6:5c:
                    b6:7e:30:61:b8:07:32:02:60:80:50:98:1c:be:97:
                    30:be:a1:ba:7b:eb:ad:bd:23:6f:e2:86:28:1d:0c:
                    b7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BE:1B:E6:DF:ED:58:57:9D:BF:43:C9:49:D3:89:4E:08:57:27:FD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/929a3b2b-92c7-45f2-905b-1ffb4708fcf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.249.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         76:64:8e:5a:48:1f:31:eb:dd:82:13:7d:6f:88:91:60:17:c1:
         9b:2f:84:bf:02:f4:4f:68:79:66:e4:43:94:aa:e4:cb:a7:67:
         3e:1b:64:b8:9d:8f:a0:c4:72:08:a1:37:81:5a:e0:b3:5c:f2:
         25:54:2b:1f:aa:1f:56:c2:55:52:99:aa:30:c7:af:91:bc:a1:
         7b:05:5c:9e:9d:80:1b:10:8f:96:47:06:b0:89:ab:ed:e5:d3:
         c4:5c:77:d2:43:13:ae:f3:55:c6:62:bc:76:4c:59:bd:4f:a9:
         26:5b:65:69:52:6b:8b:55:a6:fc:16:3c:19:26:e0:ad:62:21:
         e7:4e:23:b6:8c:d2:f2:83:f2:56:0c:7c:b0:31:49:57:23:25:
         76:ad:f4:65:bc:49:4a:99:5e:0e:a7:9c:b3:39:0f:01:32:09:
         62:70:3b:1f:76:b6:ce:67:c3:de:9e:c1:8a:e7:0e:31:4a:9f:
         a7:29:8d:62:69:dd:11:54:a7:5e:5c:da:bc:b3:fb:d7:16:07:
         57:b6:3c:f0:1f:ae:4a:d5:eb:27:a8:05:9d:6e:d7:4e:0d:4e:
         70:46:6b:f2:ab:2e:1a:38:7f:24:1c:3a:1d:15:03:99:8a:35:
         ad:81:a4:e2:ac:b9:9a:10:81:ca:77:ca:d8:e9:26:8f:0a:cd:
         75:59:de:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:17 2026 by rpki-client