Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab1fe4e8-3271-4143-8027-178c2b1ad8f4.roa
File:                     ab1fe4e8-3271-4143-8027-178c2b1ad8f4.roa (raw, json)
Hash identifier:          1fVQM1p6PdlMHkfGV+/iiAVralCRVk7aF2OojZOXsNs=
Subject key identifier:   87:32:0B:FB:AD:94:6E:60:31:D5:3B:83:86:29:39:6F:F0:4A:46:A2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5F9D8E37A7EC96B2FE8560112FF88AABBB1D3107
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab1fe4e8-3271-4143-8027-178c2b1ad8f4.roa
Signing time:             Fri 17 Jul 2026 04:47:55 +0000
ROA not before:           Fri 17 Jul 2026 04:47:55 +0000
ROA not after:            Thu 15 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        45.33.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:9d:8e:37:a7:ec:96:b2:fe:85:60:11:2f:f8:8a:ab:bb:1d:31:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 17 04:47:55 2026 GMT
            Not After : Oct 15 23:59:59 2026 GMT
        Subject: serialNumber=cb9063f18424a2e1ca01e434cee6a8c3875c5437818fca8968659b742c9d0f79, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:d3:11:3b:a6:a2:e7:60:bc:c5:37:1c:6c:
                    ce:ea:81:f0:4f:27:b2:19:58:8f:8b:c4:90:25:58:
                    07:f3:8b:5f:43:1b:34:27:b4:74:66:24:2c:8a:9e:
                    f9:7b:b6:f4:ea:27:be:55:e3:49:35:83:41:99:be:
                    a5:56:28:b1:52:c4:f2:67:61:05:76:c1:7a:d0:92:
                    9c:d4:b3:73:9b:f1:98:07:2b:51:16:fc:31:90:a6:
                    5e:84:f1:fd:af:86:4c:cb:1c:47:b1:25:6f:85:68:
                    6e:21:20:93:1e:b9:ab:aa:4d:09:ff:6c:7f:ac:a0:
                    08:12:41:8f:cb:70:4c:98:69:1e:8a:58:f4:14:87:
                    6a:94:6e:27:f5:80:b9:33:88:6b:a8:8c:54:64:6a:
                    03:68:1d:83:8d:4d:53:27:a3:61:1c:09:f1:5e:92:
                    59:0c:ce:59:a2:e3:a9:2c:26:29:6a:65:e5:47:80:
                    42:3a:c5:bb:4e:b2:9c:f5:6d:13:e6:36:e0:64:21:
                    43:e2:e1:ec:92:7b:3c:9e:6e:ea:5a:af:e6:cc:99:
                    58:3f:81:bd:10:cd:11:f6:09:fa:42:cb:21:36:93:
                    22:08:63:07:ce:0e:83:fa:a0:82:cc:fd:b3:c3:45:
                    ff:52:b3:37:b1:64:7f:d9:d4:b2:38:01:ee:2c:ba:
                    8f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:32:0B:FB:AD:94:6E:60:31:D5:3B:83:86:29:39:6F:F0:4A:46:A2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab1fe4e8-3271-4143-8027-178c2b1ad8f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.33.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:6e:13:6b:22:1b:a8:9a:37:69:04:fa:ae:54:a2:19:17:1e:
         30:56:29:9c:06:42:2f:7e:64:b2:3c:4f:4d:60:47:55:96:90:
         41:b0:1d:67:47:9d:1a:1d:cd:f5:2d:00:cf:32:fe:44:49:a7:
         c2:fe:15:54:57:13:9f:ed:e2:b1:e7:04:78:74:5d:d6:e4:95:
         dc:16:0c:49:9b:72:06:66:92:cd:e8:14:27:0d:83:52:11:88:
         a6:d7:ed:ec:3b:6b:71:25:08:5d:3e:ff:98:1e:3e:13:38:9f:
         08:87:c5:db:19:f4:20:f5:a2:73:1b:8e:7e:53:ee:48:81:3a:
         b7:ed:20:04:9f:5d:f6:87:20:6b:d6:34:e5:f3:82:27:e3:36:
         a2:40:0a:44:2a:a3:7d:f9:c0:38:2a:a0:b3:81:1b:b6:b1:9c:
         62:d1:c9:3d:fa:28:9d:dd:c9:ae:a8:50:5c:85:af:f0:a8:bf:
         88:6d:e7:5b:02:d8:8d:62:44:59:fa:6b:23:89:9c:43:70:1f:
         26:01:5d:4f:17:b5:42:79:de:28:33:d0:17:09:42:03:35:21:
         bb:29:fb:ea:a2:c9:93:5e:e2:bd:c2:c8:9c:6c:cd:a7:7a:e6:
         29:ab:16:d6:b5:ab:8f:d5:12:eb:61:4e:7f:82:b1:cb:96:4b:
         85:06:6c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:51 2026 by rpki-client