Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be53ea01-b44e-4f52-b5ea-000d05c4e6a2.roa
File:                     be53ea01-b44e-4f52-b5ea-000d05c4e6a2.roa (raw, json)
Hash identifier:          VEBtwKCRxBe9aVtbAmmtf6f00++gDKHiSV0IsYZYy5w=
Subject key identifier:   C2:11:FD:7D:75:75:F7:45:B7:BF:90:E9:8A:E2:64:3F:7A:72:5E:F9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       706C688D5CC5CE4F359981E3864EA801677A243B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be53ea01-b44e-4f52-b5ea-000d05c4e6a2.roa
Signing time:             Tue 05 May 2026 00:41:06 +0000
ROA not before:           Tue 05 May 2026 00:41:06 +0000
ROA not after:            Mon 03 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        150.102.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6c:68:8d:5c:c5:ce:4f:35:99:81:e3:86:4e:a8:01:67:7a:24:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  5 00:41:06 2026 GMT
            Not After : Aug  3 23:59:59 2026 GMT
        Subject: serialNumber=c5e85cc9a8f752da5e5e4d54f9013d6b1b3cdb4f3c82042b6b662187f8c1b459, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:38:b8:ee:54:7f:8c:93:83:a0:4a:a2:94:cd:
                    e9:54:81:40:c4:77:11:e2:f9:a4:27:6c:0e:81:09:
                    07:7b:c2:80:48:49:db:e1:c3:ad:22:bf:f7:e0:51:
                    7c:5e:b1:de:1d:fa:1d:05:46:9e:63:86:ca:cf:63:
                    1c:44:4f:75:b5:98:25:5b:5a:a0:3f:e7:d9:ad:f6:
                    a2:6c:57:51:50:46:a2:b6:92:56:f8:f9:a7:fb:33:
                    3f:ae:cd:c5:f2:bf:a2:a2:2a:9c:62:3d:e9:9f:0d:
                    d3:56:d3:d0:e1:a8:3e:f8:1e:bf:72:4b:80:b4:1c:
                    8d:07:38:76:97:ab:eb:8e:8c:78:e0:4a:b6:e2:33:
                    a1:f3:fa:6f:2d:cf:e9:74:dc:c4:d2:3a:da:a6:1d:
                    41:62:ca:39:73:9b:32:da:ab:7b:7a:34:54:0e:bc:
                    94:f8:d8:45:1b:f4:ab:33:1d:72:9c:b6:7b:fe:89:
                    04:a1:15:30:24:07:27:f1:bf:fe:e0:6b:a8:ad:4e:
                    91:bf:fe:8b:4f:26:d9:fc:f8:41:cb:12:c5:b7:eb:
                    c3:24:e6:a8:39:4e:08:79:20:c4:e7:4d:b4:45:5e:
                    4e:68:72:51:b7:2b:c8:30:ca:b9:cd:02:fa:43:e0:
                    91:46:88:fc:4a:a5:38:18:41:42:ea:60:aa:5e:1a:
                    63:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:11:FD:7D:75:75:F7:45:B7:BF:90:E9:8A:E2:64:3F:7A:72:5E:F9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be53ea01-b44e-4f52-b5ea-000d05c4e6a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.102.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ab:11:e2:15:80:d6:26:4e:3e:a4:da:b9:4b:22:94:85:f7:b9:
         bb:67:ba:5a:d0:a6:1e:01:cb:ea:9f:8b:39:f0:a4:f5:06:0f:
         09:18:50:34:4e:40:93:3f:54:c4:cf:84:16:7c:67:1a:5d:8d:
         dc:fb:b3:74:da:65:75:5f:c2:e1:d2:ab:1a:94:b3:c7:e9:5a:
         6c:cc:5e:a7:8c:8e:6a:be:06:dc:61:9a:86:15:b4:87:8e:29:
         99:39:8f:62:37:fb:4a:2c:7d:50:9b:db:10:cb:cf:bd:d7:e4:
         68:8e:22:01:35:06:f1:dc:c8:93:59:c2:d0:c5:23:9a:eb:84:
         56:b8:24:c5:df:57:68:31:87:3d:47:4d:68:98:75:85:86:97:
         10:36:ea:ec:59:e3:c5:8b:47:b8:f7:5a:b2:5d:91:b5:29:0e:
         0a:0c:b2:76:4d:ed:15:03:b7:10:06:33:30:0f:ed:5a:95:30:
         7a:87:15:5b:e0:08:d8:7f:bf:2c:f5:af:d8:63:bf:6e:f1:67:
         a4:59:d2:be:a9:7c:30:7b:a6:b0:af:de:f6:86:11:6e:3a:50:
         e8:8d:be:c3:86:d0:bf:af:24:67:1c:75:c2:8e:c2:66:2f:e3:
         cd:92:12:31:83:91:99:13:f1:66:b2:23:29:4a:b6:3e:2f:4b:
         f3:2b:6e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:22:59 2026 by rpki-client