Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb4a9276-b5b0-4ac4-88ef-ad750b611dba.roa
File:                     bb4a9276-b5b0-4ac4-88ef-ad750b611dba.roa (raw, json)
Hash identifier:          GQAxVXlEp5YoGg0NF1NrGzyKMpuqeVbWAXGg7DI2PzE=
Subject key identifier:   F2:A1:77:60:4D:D4:48:8C:9C:A2:71:A3:CD:FA:9F:DB:6B:1F:BB:06
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2ECB0B675062C3CB374E42EDA9FB3B812E895B47
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb4a9276-b5b0-4ac4-88ef-ad750b611dba.roa
Signing time:             Fri 17 Jul 2026 00:11:12 +0000
ROA not before:           Fri 17 Jul 2026 00:11:12 +0000
ROA not after:            Thu 15 Oct 2026 23:59:59 +0000
asID:                     7224
IP address blocks:        173.83.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:cb:0b:67:50:62:c3:cb:37:4e:42:ed:a9:fb:3b:81:2e:89:5b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 17 00:11:12 2026 GMT
            Not After : Oct 15 23:59:59 2026 GMT
        Subject: serialNumber=c3a8748fc4214c6df09d4dd3c0b77f8e6cb4a2e6cc4112394349f3eaec3f34f0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:39:ca:48:36:4d:c9:ac:92:1d:1a:17:53:f2:
                    8b:6d:f8:84:22:fb:c1:f2:af:25:4d:0b:72:d6:9f:
                    a8:97:02:18:25:8f:63:23:43:41:e5:91:f5:e5:5c:
                    f3:1b:0a:6e:b9:dc:98:68:95:71:77:36:e1:eb:50:
                    8e:cb:20:31:b5:59:f0:d3:19:e9:63:7c:73:d9:aa:
                    c9:e8:5c:a1:b3:fe:90:10:43:ee:3f:34:80:6b:95:
                    34:21:da:05:31:2a:c0:60:cc:18:ab:a5:4b:c6:b5:
                    2a:95:18:2c:03:4d:c6:44:c1:b2:38:2e:44:46:6a:
                    4c:09:95:66:73:b3:d7:59:a6:15:54:4b:15:77:c0:
                    ab:94:91:55:1e:68:d1:a1:d8:90:74:70:43:69:67:
                    ef:1d:ce:27:5b:83:18:15:77:11:e9:1b:f0:53:85:
                    a3:4a:6b:6d:39:fb:4c:13:c0:cd:13:06:4d:02:33:
                    c2:5a:0f:01:57:4b:fe:5f:8e:4c:76:3d:31:fe:d2:
                    7b:c0:62:e4:a6:ed:74:cd:5e:56:ae:96:0d:4c:1c:
                    80:42:a1:91:64:45:7d:92:da:d4:8d:b5:2e:f7:21:
                    9f:78:dc:9a:98:61:5c:00:9c:4c:23:5c:48:01:76:
                    ec:f0:95:0f:10:1b:6c:aa:76:ee:0c:99:7c:da:5a:
                    9b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A1:77:60:4D:D4:48:8C:9C:A2:71:A3:CD:FA:9F:DB:6B:1F:BB:06
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb4a9276-b5b0-4ac4-88ef-ad750b611dba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.83.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         64:83:9c:f1:eb:d0:b8:64:86:1d:79:da:a8:31:9a:ea:c6:9a:
         bd:c0:57:76:25:27:08:f7:dc:b5:6f:40:3f:ac:b5:1b:42:de:
         c1:0c:28:e7:01:3f:be:f0:93:11:74:8e:4a:36:36:c9:a5:4f:
         cf:78:2f:11:35:0d:d0:c5:d0:c9:38:e2:0f:77:91:89:57:29:
         db:b8:a7:fb:17:d6:33:2b:b0:30:9b:e9:06:f0:57:d9:47:03:
         1f:c3:7a:97:91:41:bb:5b:b5:9f:57:c4:46:b5:15:2e:8a:12:
         1a:a3:d6:ef:8d:44:94:b8:fd:9e:1d:98:7a:62:1f:af:f5:91:
         4e:a2:5d:bb:cb:1d:33:b1:6f:01:ab:e6:5e:0c:71:d8:69:54:
         ed:84:6d:fa:58:58:61:89:b7:23:fc:60:46:65:56:e7:14:a6:
         bc:26:a1:10:e2:8e:d4:89:da:21:ea:2c:36:dd:40:3b:83:8f:
         da:83:3f:fa:50:28:77:7a:51:e2:5c:fd:a3:11:4a:d7:16:88:
         b1:59:94:85:98:98:eb:00:f6:67:f9:0f:51:18:62:79:59:78:
         b6:a9:94:ac:5d:2c:63:45:3c:23:39:0c:bb:d6:95:80:14:68:
         6b:c7:0a:51:ff:85:5c:7b:59:a3:a3:f9:56:62:34:ad:80:24:
         c7:19:60:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:47 2026 by rpki-client