Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ade72e7c-4e83-4945-a86d-27853db34be6.roa
File:                     ade72e7c-4e83-4945-a86d-27853db34be6.roa (raw, json)
Hash identifier:          LN0UajWUbJ+PiD0zcqo6AsVCQ4VZQ9m265vFSIPulM4=
Subject key identifier:   A2:4B:7A:E7:F8:2B:94:9B:13:66:AE:56:0B:FB:B9:53:DF:81:FA:A8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7DEB8A8B79A29B2D51497E7971C88113864C7779
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ade72e7c-4e83-4945-a86d-27853db34be6.roa
Signing time:             Fri 08 May 2026 17:47:12 +0000
ROA not before:           Fri 08 May 2026 17:47:12 +0000
ROA not after:            Thu 06 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        23.254.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:eb:8a:8b:79:a2:9b:2d:51:49:7e:79:71:c8:81:13:86:4c:77:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  8 17:47:12 2026 GMT
            Not After : Aug  6 23:59:59 2026 GMT
        Subject: serialNumber=80ccfbb093b86b3f425dc3b331b230471b7dd65bf09258542012c0e4f581cfa6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ae:9b:b5:72:48:58:2e:17:fc:3c:95:65:2f:
                    e5:71:12:ff:50:ee:46:43:7a:03:d6:c4:b7:da:6b:
                    24:83:c3:3e:a6:2c:3b:df:2e:0d:64:e6:77:e7:4e:
                    f2:37:07:5c:16:62:37:a0:0a:71:6e:4f:8b:68:69:
                    38:21:53:08:73:59:0c:9c:84:ff:f4:54:1f:cf:85:
                    e0:b5:a7:89:5f:d7:78:cf:7a:46:6b:0e:7c:ac:26:
                    3f:ff:a4:43:04:15:f4:44:b3:bc:92:c3:9c:3e:ba:
                    c0:22:7c:b6:b8:99:1f:a5:a6:1e:21:09:35:34:1a:
                    2d:31:a9:2f:bc:98:15:1f:c2:7b:2d:ed:39:05:7b:
                    4a:81:60:77:6a:db:ed:52:9c:43:ca:f0:f8:99:42:
                    f7:f3:b9:af:b6:56:bf:1e:e3:7d:9a:ac:35:57:94:
                    79:29:76:79:81:38:56:d4:2c:39:b4:2a:3c:27:04:
                    45:08:cf:f7:35:42:9f:df:7e:1f:c5:f1:92:7a:79:
                    f7:bb:5d:6e:35:d1:56:3c:a1:7b:0f:cd:58:3d:e1:
                    5d:bb:e4:79:fd:df:92:50:7d:90:74:01:3a:a0:67:
                    90:e8:8f:87:e3:d5:24:5e:e8:6b:1f:30:6c:c8:e3:
                    e8:21:d0:a1:ff:1a:f2:20:c8:88:f7:d9:c1:25:bd:
                    1d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4B:7A:E7:F8:2B:94:9B:13:66:AE:56:0B:FB:B9:53:DF:81:FA:A8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ade72e7c-4e83-4945-a86d-27853db34be6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.254.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5c:8f:59:a9:e0:35:9f:db:50:ad:53:62:5d:84:37:89:87:51:
         11:3c:e0:6d:ab:5f:60:5c:95:cb:94:06:50:b9:17:29:c8:6b:
         12:70:f7:da:55:5d:cd:1d:aa:37:d0:f3:bc:19:0f:aa:bd:bf:
         bb:0b:e4:8e:6c:96:48:ad:72:d9:d7:9f:ee:a6:a9:b7:98:32:
         5f:93:3a:3e:b4:2e:dd:b4:02:9a:56:5b:91:a5:b6:a6:c5:c3:
         c1:96:62:34:78:7b:15:41:72:f4:43:7d:84:3a:33:b2:3d:8f:
         5b:b3:68:b5:2d:15:08:03:08:74:04:0b:9f:a6:e7:d1:6e:5b:
         c9:af:8f:67:f1:50:dd:76:a5:99:50:03:52:26:cc:2c:41:37:
         96:51:55:0c:bb:8a:80:96:9d:a7:c8:9e:22:ff:54:9a:ac:f5:
         5d:d4:db:b4:1c:5b:05:00:7b:cd:0d:a5:fd:ae:1b:c9:00:f5:
         c2:40:32:c3:c4:7d:19:02:45:a0:3f:75:0f:fd:3c:c6:41:b5:
         9f:13:94:83:18:de:81:61:57:ac:58:2b:3d:63:10:de:98:56:
         a7:f7:84:60:c4:69:fe:12:77:29:23:ed:4f:ad:1f:91:04:00:
         0c:ae:41:8b:a9:f4:c0:86:ef:2e:f8:ce:3c:03:45:c7:12:59:
         5d:02:fc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:38:27 2026 by rpki-client