Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/929c70ac-6fb3-463e-89bc-8fe3ea05d47e.roa
File:                     929c70ac-6fb3-463e-89bc-8fe3ea05d47e.roa (raw, json)
Hash identifier:          CGBNx5S8LK7Ae6ajgAcPaRNb0u5PXEF/3wYIYYb3CGo=
Subject key identifier:   C6:EF:EA:AB:1C:FC:B5:71:94:99:4E:3A:69:3E:58:86:84:7A:EB:54
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1512DAFA77F0A2674ADC8E8015E49CE92965AC74
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/929c70ac-6fb3-463e-89bc-8fe3ea05d47e.roa
Signing time:             Mon 11 May 2026 00:40:37 +0000
ROA not before:           Mon 11 May 2026 00:40:37 +0000
ROA not after:            Sun 09 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        23.91.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:12:da:fa:77:f0:a2:67:4a:dc:8e:80:15:e4:9c:e9:29:65:ac:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 11 00:40:37 2026 GMT
            Not After : Aug  9 23:59:59 2026 GMT
        Subject: serialNumber=1162285c2bc4097612085a861d8107002f2eabe4438eed4332fa18b9655c8300, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:61:a0:81:72:49:11:75:c9:a3:21:b8:46:
                    74:d8:21:c7:6f:36:4b:2d:6b:43:96:13:2b:37:ba:
                    98:9e:ed:3b:b7:51:2d:e4:73:17:17:2a:08:78:11:
                    7f:16:01:63:43:88:ef:8c:fa:fa:5f:71:f9:93:74:
                    65:f9:cd:a8:c9:cc:f3:97:f8:ea:9e:cb:65:9f:48:
                    d7:4e:0f:05:4c:f6:7c:ae:7f:90:e2:1f:9a:57:1b:
                    4b:9c:97:ff:21:56:be:fa:d4:26:c8:e4:e7:74:c7:
                    d9:5f:82:06:9f:72:6f:6d:da:f1:57:3a:5a:b5:21:
                    4b:0f:41:2f:ab:00:65:cf:32:07:84:00:2b:36:55:
                    e2:c2:cf:7d:e6:1d:f8:df:8f:eb:91:57:a8:04:f4:
                    a8:4f:a9:47:da:72:5e:37:0b:76:4c:ab:ae:d2:b9:
                    a6:2a:27:a2:08:71:3a:34:aa:75:00:14:73:d1:91:
                    05:a3:9e:40:8f:33:ce:93:1a:d4:f2:d9:6b:64:fe:
                    c3:f4:d3:6d:cd:9b:b5:63:6f:dd:60:7d:a4:4e:e2:
                    26:2a:d1:fa:dd:85:18:a9:79:74:20:be:03:c4:38:
                    65:90:df:58:73:26:52:e4:3f:50:cf:8d:02:ae:b3:
                    eb:4f:df:c4:d6:71:43:c7:15:71:aa:82:02:65:69:
                    ad:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EF:EA:AB:1C:FC:B5:71:94:99:4E:3A:69:3E:58:86:84:7A:EB:54
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/929c70ac-6fb3-463e-89bc-8fe3ea05d47e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:af:c2:bc:a3:a6:ea:55:80:ea:92:f3:53:74:51:48:38:f6:
         5a:82:1c:d7:b3:fd:bd:33:aa:45:ed:9c:93:38:5b:94:7b:63:
         42:2d:59:de:37:da:8d:66:e0:a9:ac:ab:54:67:69:db:c9:77:
         4a:c5:01:8b:c8:aa:b2:31:72:fb:92:f6:bb:cf:74:69:af:99:
         5f:e7:4c:72:1b:90:c8:a5:42:4b:c9:48:55:0c:aa:e5:0d:b6:
         6a:68:b4:5c:ff:6a:8c:50:14:d3:0d:d1:9a:77:a7:0f:f6:0a:
         44:c5:4b:85:54:6b:cc:42:0a:31:d3:e3:f3:41:e1:37:6a:5a:
         cc:bd:d2:f3:c5:26:b1:7b:bc:ed:03:0c:99:e3:14:39:67:5a:
         4f:a1:cd:00:95:84:9b:bc:ad:3f:fc:19:17:4d:43:67:87:00:
         b0:a4:d5:c9:90:10:91:38:94:e2:62:6e:f6:91:63:15:b8:e0:
         d2:98:47:be:40:fc:df:e3:ef:42:d0:20:62:75:2e:ae:ca:64:
         5b:a5:ba:47:be:a8:77:15:cf:a2:33:69:67:5c:73:4e:6e:bb:
         6b:f7:72:5c:ff:bb:27:34:c8:a4:b7:33:8b:f1:78:d5:1b:d3:
         59:18:fc:4f:ef:de:36:14:f8:77:82:2b:38:ca:9e:cb:d0:0b:
         9b:63:4f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:25 2026 by rpki-client