Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/979075fe-5e31-4991-89a6-32d53a57687d.roa
File:                     979075fe-5e31-4991-89a6-32d53a57687d.roa (raw, json)
Hash identifier:          8IyQwKecIrSCrXDhYeJ3dETF3U4AUdjMCxyhacG1zfg=
Subject key identifier:   FA:EE:CF:26:E2:E7:2A:54:09:0C:EA:27:87:1E:D0:BF:87:C3:22:B7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6B9AB0731519721511DACF596D0BFD641B6CBD4A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/979075fe-5e31-4991-89a6-32d53a57687d.roa
Signing time:             Thu 16 Jul 2026 00:20:08 +0000
ROA not before:           Thu 16 Jul 2026 00:20:08 +0000
ROA not after:            Wed 14 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:9a:b0:73:15:19:72:15:11:da:cf:59:6d:0b:fd:64:1b:6c:bd:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 16 00:20:08 2026 GMT
            Not After : Oct 14 23:59:59 2026 GMT
        Subject: serialNumber=0e8b105e3c0c30ee7cd28839e5c8a7d1fc276e8f53b667df208dfce475b57ff3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9e:0f:56:f3:7a:36:83:06:15:d7:67:6c:67:
                    92:87:a6:02:6a:bf:80:8c:85:46:69:91:b0:64:33:
                    a1:8e:ea:a1:5d:33:33:5b:ed:ef:7d:24:4f:2a:f7:
                    b9:dc:36:55:20:e6:06:11:83:95:f5:56:26:9b:90:
                    a0:b9:8c:ff:81:ef:31:fe:21:e5:82:db:e1:43:8b:
                    c7:6d:64:af:a5:0a:5f:83:f3:e8:78:8b:e2:f8:4e:
                    71:4b:18:f6:71:38:50:57:2b:11:95:0c:ad:90:7f:
                    7b:60:98:52:97:dc:d0:e8:a2:2e:de:c8:d1:cf:8b:
                    8f:58:81:e4:07:c5:3b:5e:93:13:16:b9:b8:6a:93:
                    1c:1b:a7:80:b5:a9:8a:ed:7d:fd:df:e5:34:36:9f:
                    04:1c:9c:fa:b9:33:a1:0f:47:48:50:e3:c3:8a:f3:
                    64:97:b6:1c:9b:f3:c6:a7:82:ef:39:8f:ee:2c:ee:
                    1e:58:32:8b:b6:bd:09:a8:ce:fe:ec:89:9d:a8:db:
                    0f:66:b2:08:ed:f4:60:91:fb:0b:22:d1:eb:5e:b6:
                    1e:52:44:94:bc:82:a8:7b:04:a1:aa:05:ff:3e:8c:
                    0e:51:da:f8:64:8d:1f:a2:45:6b:eb:bb:5d:4d:a9:
                    a0:96:76:ad:fe:f5:dc:28:76:e8:3c:bc:79:51:31:
                    82:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EE:CF:26:E2:E7:2A:54:09:0C:EA:27:87:1E:D0:BF:87:C3:22:B7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/979075fe-5e31-4991-89a6-32d53a57687d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a7:ee:14:a1:a1:2d:f3:81:af:12:55:3c:29:b3:93:5c:72:52:
         56:01:e3:79:d0:67:6a:a5:cc:a5:22:70:90:d5:df:83:b9:31:
         4a:8c:cb:d2:8b:46:e7:7b:86:b8:81:b3:96:8e:69:df:db:21:
         82:a2:e6:fc:8c:34:d0:42:95:4f:37:4e:e4:7d:e6:b0:ac:fb:
         3d:4a:0d:06:5e:4a:65:ce:b8:80:6e:d5:c5:69:69:23:dc:7a:
         ed:41:89:54:16:ed:e7:55:7f:e5:d3:98:02:8a:28:0e:1f:19:
         47:09:f4:9f:56:a8:22:a2:ae:e0:2f:56:cd:c1:51:87:d5:7a:
         8d:47:b4:cd:8f:b5:b6:87:4a:5e:ab:4c:da:bf:34:66:61:ae:
         44:4a:03:ea:73:43:83:0c:0e:c1:61:45:9c:6c:14:80:34:26:
         64:3e:fc:13:eb:76:28:9f:10:e0:22:80:55:91:96:ec:9a:54:
         95:49:80:59:7a:07:e7:8a:68:56:8a:20:0c:9e:5f:e5:71:6f:
         04:b6:fc:5c:66:77:00:0c:cc:d6:79:fc:43:1c:eb:33:4f:07:
         c4:56:0a:3c:90:97:c4:73:6f:c0:4b:3a:76:3f:c6:9f:4e:d0:
         56:44:b0:f4:ff:38:9a:50:75:5a:6f:d3:91:d0:2c:52:0c:8a:
         72:17:55:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:42 2026 by rpki-client