Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ad87913-b5f6-4855-991c-c99c66eaae99.roa
File:                     9ad87913-b5f6-4855-991c-c99c66eaae99.roa (raw, json)
Hash identifier:          pYs5cvDsS19zD0lZmWXMrsIgE6Z/kEHLIHB+a9eJxSA=
Subject key identifier:   E6:17:96:56:16:FB:20:3E:53:8E:06:89:20:29:98:9C:A2:90:79:2F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4CA145FEF2D268E59B7E28A6A292BFA5296DB0BB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ad87913-b5f6-4855-991c-c99c66eaae99.roa
Signing time:             Mon 20 Jul 2026 00:40:55 +0000
ROA not before:           Mon 20 Jul 2026 00:40:55 +0000
ROA not after:            Sun 18 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        65.37.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a1:45:fe:f2:d2:68:e5:9b:7e:28:a6:a2:92:bf:a5:29:6d:b0:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 20 00:40:55 2026 GMT
            Not After : Oct 18 23:59:59 2026 GMT
        Subject: serialNumber=5fb595b555f27bb8e5039d643cdb050ccf1491ec21008839043362cef5d2f99f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3e:a6:32:74:9f:75:71:22:d2:7f:17:2a:fc:
                    23:10:87:88:e0:83:4d:86:42:c0:de:f6:eb:ac:6c:
                    b3:09:fd:3d:e5:cb:d9:c7:56:80:e7:a6:1f:ae:bd:
                    8e:1b:64:c9:40:c8:fa:52:89:92:3e:1c:fc:35:5e:
                    9c:05:84:8c:e8:11:fe:5d:37:90:b2:e3:3b:c1:c5:
                    d7:8a:d6:af:a4:9d:a3:c1:1b:2b:4d:c3:dc:dd:29:
                    52:af:f8:9f:48:ca:56:10:5f:dd:39:20:09:d8:a9:
                    37:5e:81:1f:fb:44:0e:5e:26:96:3c:a0:81:2e:f9:
                    92:49:fe:3b:0c:9f:c9:c4:ca:0d:8e:5c:04:50:9c:
                    38:ae:d5:6c:4c:e0:df:b7:bc:db:2b:e7:ce:06:d6:
                    e9:3e:c8:4f:c9:1a:71:b5:27:5f:f5:b2:70:04:8e:
                    37:e5:2e:c6:68:5f:90:ef:56:f4:14:57:c5:c2:c9:
                    15:74:0e:92:3e:bd:eb:d0:b9:e5:01:7b:01:a2:d7:
                    10:1d:c6:7a:31:19:1b:cd:03:89:f5:2d:d0:ee:49:
                    10:58:cd:70:c0:6c:06:83:09:35:bf:44:2e:c7:6e:
                    49:75:9f:4d:f1:9c:c3:71:77:ac:72:5e:90:29:d0:
                    82:9b:2b:cb:cc:eb:a3:90:3f:60:0b:c9:da:d3:0c:
                    19:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:17:96:56:16:FB:20:3E:53:8E:06:89:20:29:98:9C:A2:90:79:2F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ad87913-b5f6-4855-991c-c99c66eaae99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.37.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9c:e5:a2:c2:be:27:bd:2f:fd:e0:ff:c2:4a:28:0c:e4:c4:13:
         cc:5d:fe:9a:30:a3:fe:64:8c:4c:d4:f6:bd:6b:02:54:c7:3b:
         e0:35:f5:13:ae:91:f5:48:73:86:3d:0e:8b:26:de:f3:a9:bf:
         b9:67:d5:aa:77:d8:14:b8:b6:8b:e3:b9:f1:d3:46:c2:75:28:
         c4:1f:30:01:75:c8:13:ca:ed:01:44:a6:d5:a9:5a:ca:05:4c:
         0c:ed:6f:52:3d:40:54:90:c4:95:8c:5d:f7:da:4a:eb:2e:9d:
         72:7f:65:0c:a2:47:af:71:95:6c:9a:d7:2a:a3:ed:69:48:49:
         73:f2:ca:6b:f3:0d:ba:df:34:96:aa:b3:d2:a9:59:97:b6:f6:
         e7:a7:fb:d0:74:d0:77:fb:25:fa:d5:5b:41:ee:19:67:3b:58:
         d0:58:69:60:35:c1:62:da:39:70:b6:e7:1b:63:95:a4:a8:48:
         e7:86:b1:e0:43:d0:75:52:ad:15:e1:25:4d:d9:35:9d:3b:34:
         bf:5b:e6:77:be:32:e9:e6:09:83:86:b7:b3:8f:20:29:f7:95:
         38:a0:9a:8c:8f:b7:6d:e5:f9:cb:f1:14:7a:ca:20:c2:aa:03:
         d5:b4:ae:55:dd:c5:36:05:f1:6c:78:37:60:e7:7a:73:98:84:
         6a:58:48:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:32:50 2026 by rpki-client