Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bdb19a32-70e9-4c69-9856-b4ebce3d5a0c.roa
File:                     bdb19a32-70e9-4c69-9856-b4ebce3d5a0c.roa (raw, json)
Hash identifier:          PdUoG6ztlLzRR7nMdImBhubhRK9HYAEoDwfNxK/t4pg=
Subject key identifier:   0B:02:EA:6C:10:59:CF:C8:78:41:76:24:D1:1B:AC:70:55:45:2B:2E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1349E9FD40EB79A538A66EB400176E6FAE8F34E3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bdb19a32-70e9-4c69-9856-b4ebce3d5a0c.roa
Signing time:             Thu 23 Jul 2026 00:50:13 +0000
ROA not before:           Thu 23 Jul 2026 00:50:13 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        75.2.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:49:e9:fd:40:eb:79:a5:38:a6:6e:b4:00:17:6e:6f:ae:8f:34:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 23 00:50:13 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=277924a1ce8365a56b8b00cd9ad0b0fd5ed56c01f623f11b97fe340e978d8674, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:70:36:a0:9f:ce:bb:27:14:4f:19:c8:44:2a:
                    e0:1f:98:7a:5d:f1:0f:9d:a0:14:d1:df:64:d1:66:
                    77:51:0e:cf:92:e1:1e:e5:aa:68:6f:68:56:f2:e9:
                    c7:45:79:ca:44:03:c3:4d:0d:ad:e9:3f:c4:86:ec:
                    9d:36:10:69:68:16:51:7e:00:c5:29:24:6e:9b:fb:
                    31:dc:58:5a:c8:5c:d6:d8:75:b3:8d:6a:19:ae:42:
                    f1:7d:99:34:15:1d:8f:88:8c:a5:97:74:0c:fd:94:
                    71:1a:52:9f:d3:81:c3:e1:25:4e:bf:21:8a:ce:d4:
                    eb:72:8b:60:89:ae:6a:71:31:54:c0:09:eb:d6:22:
                    bd:e0:aa:31:34:1d:34:81:19:97:18:64:f5:a2:7a:
                    aa:f9:bf:be:12:43:6e:4b:63:0a:bf:12:09:37:18:
                    70:6b:22:85:99:b3:24:c8:6e:ed:20:07:f5:de:69:
                    e5:d5:06:47:98:a3:28:93:c6:aa:9f:9b:fb:43:78:
                    a9:ef:fc:13:09:e2:d9:c0:b3:3d:26:48:d9:7c:37:
                    8c:ba:2e:9f:fe:c5:7f:63:de:d8:40:d3:71:d5:a8:
                    64:5b:ab:32:a5:41:21:a6:9f:32:c2:0c:2f:52:b9:
                    33:83:42:92:91:62:ac:9a:db:39:c1:38:c6:24:58:
                    e3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:02:EA:6C:10:59:CF:C8:78:41:76:24:D1:1B:AC:70:55:45:2B:2E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bdb19a32-70e9-4c69-9856-b4ebce3d5a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.2.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         83:5b:d5:85:31:9c:0a:46:82:35:b9:36:37:c7:d2:12:40:94:
         29:09:2d:7b:08:bc:2b:76:8e:96:d8:7c:32:8b:da:c3:54:e7:
         d6:e9:14:a4:9f:52:ab:42:18:d5:28:e2:6f:dd:49:cb:be:c7:
         f9:13:a3:ae:e3:7d:20:88:9a:79:0d:9f:37:95:71:07:6c:95:
         c6:2d:f8:3d:18:df:b1:e4:6a:cd:33:fc:28:63:63:83:c1:db:
         7e:a1:99:53:c7:19:7a:7b:78:93:d1:a9:80:56:3f:63:4e:23:
         20:e8:ed:11:a3:5b:21:40:4e:a4:d1:8a:96:2f:2e:5a:07:fd:
         b0:80:73:32:66:6e:71:b5:2a:c7:7e:b0:ba:74:1b:19:42:3b:
         57:c6:27:22:1a:66:b7:74:42:2c:79:9d:ae:ca:bd:c1:77:36:
         ee:bd:7b:6c:44:e2:0d:67:4c:4d:ea:e4:3c:30:8f:03:bc:79:
         5f:7d:e4:9e:16:9e:20:50:b0:80:d1:c1:f2:b8:a0:db:94:1f:
         65:a0:f2:b8:16:0a:33:96:48:66:99:c5:37:56:8c:34:92:32:
         2a:6c:9e:0b:5c:c6:ba:12:8a:61:56:38:e1:4b:6d:95:e1:57:
         6f:c6:81:57:35:98:df:b7:52:4e:e8:0c:e5:2d:11:30:db:64:
         56:09:55:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:14:38 2026 by rpki-client