Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b72f4616-5ee0-476d-82ee-4c547532502d.roa
File:                     b72f4616-5ee0-476d-82ee-4c547532502d.roa (raw, json)
Hash identifier:          Y/XYCBVVx2Dv8cUswurO2v6VzsJJqmk1+ganpdPK9q4=
Subject key identifier:   45:35:57:AE:B6:46:EA:C3:06:85:3E:C1:34:E9:FF:08:13:EF:6F:D1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1893F237426629817B1B3F1E5EEA2AAE88605F7E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b72f4616-5ee0-476d-82ee-4c547532502d.roa
Signing time:             Mon 20 Jul 2026 00:10:37 +0000
ROA not before:           Mon 20 Jul 2026 00:10:37 +0000
ROA not after:            Sun 18 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        157.135.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:93:f2:37:42:66:29:81:7b:1b:3f:1e:5e:ea:2a:ae:88:60:5f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 20 00:10:37 2026 GMT
            Not After : Oct 18 23:59:59 2026 GMT
        Subject: serialNumber=932b5cdf41e88ab744bb7c3a347cbb42bc36916fdd4c9db3b227205896f30e9b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e7:b2:cd:9e:fa:8a:63:62:0f:a3:0f:c7:41:
                    ea:5a:42:86:c1:85:3e:93:0b:fc:6a:59:13:9e:d9:
                    94:dc:92:d6:22:24:ec:ae:de:3a:bc:f3:4f:ed:6f:
                    0e:a2:1b:6b:42:63:75:72:c8:27:c6:02:97:39:14:
                    32:05:71:eb:ee:22:62:01:53:36:18:20:b1:32:ab:
                    5a:9c:be:26:48:c6:86:64:9c:41:60:02:9a:ff:c9:
                    5d:20:d6:59:f2:86:48:67:ef:89:62:4a:cd:10:c4:
                    90:4b:fc:d9:5b:63:f2:f2:7c:f7:eb:de:b8:ee:ee:
                    f7:54:04:1e:1f:f2:e9:7a:04:1f:d2:ac:44:10:fb:
                    7b:df:eb:8d:e5:c2:06:e3:fa:34:dd:2f:30:bf:44:
                    ca:5f:42:8b:84:4c:f6:0e:ac:cf:59:97:09:ee:9e:
                    da:4f:95:c2:8b:98:c7:47:f7:ac:f5:93:75:c7:3b:
                    df:f3:b0:84:28:7f:09:e4:71:db:e7:6c:35:82:19:
                    1f:86:db:b5:ea:0f:5b:ba:2d:73:d9:cd:d3:4a:6c:
                    8a:92:f0:ca:7f:20:e4:52:4f:18:2a:ea:d7:25:fc:
                    34:9b:db:16:83:28:d6:fe:7f:b5:35:1a:40:56:1e:
                    8b:5c:4d:23:80:f4:9b:eb:d3:b9:da:ab:5e:33:52:
                    16:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:35:57:AE:B6:46:EA:C3:06:85:3E:C1:34:E9:FF:08:13:EF:6F:D1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b72f4616-5ee0-476d-82ee-4c547532502d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.135.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         28:5e:44:7b:1d:63:26:be:06:ff:8d:04:71:26:06:1b:70:fb:
         8f:b0:6c:07:34:7c:8c:d6:4f:8c:d0:8f:dc:8f:a4:f7:b3:83:
         19:11:a7:a1:4c:35:4f:48:11:b3:ac:b9:2a:41:92:dd:90:6c:
         02:c9:68:88:be:44:38:07:44:4f:08:2c:60:9d:80:8c:44:8d:
         d7:aa:7b:10:c8:cc:b5:b3:91:ec:4c:9c:ea:07:fd:34:04:26:
         f7:9c:fb:3b:3a:c4:a4:e5:24:0d:4d:fd:b8:69:15:c5:84:ae:
         39:aa:6d:f9:df:89:15:74:09:fe:d6:89:fc:97:c5:ff:7f:56:
         c5:eb:5d:96:33:b0:90:ff:c6:a3:91:b8:bb:94:ae:3d:b7:8e:
         74:f6:ac:b3:c6:51:8a:61:89:d4:77:ae:8d:83:ef:c9:3b:33:
         0b:67:d3:89:b9:2b:ee:8c:61:85:00:ae:57:98:46:b3:c5:dc:
         1a:52:0d:65:71:b5:fb:fa:c4:01:d8:0f:1d:d0:02:11:f4:f1:
         b7:53:f6:2b:05:72:80:b4:e8:e1:7d:b4:93:b6:f1:e6:bc:ab:
         fa:ac:fc:7b:00:dc:bb:5b:dc:0f:70:b3:25:af:af:38:c2:4c:
         82:da:20:01:1e:f8:76:9d:84:26:32:31:07:ab:ba:09:a8:88:
         a1:ca:78:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:03 2026 by rpki-client