Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7066401-6e27-443a-a174-bf22e8ce1b76.roa
File:                     c7066401-6e27-443a-a174-bf22e8ce1b76.roa (raw, json)
Hash identifier:          rp5P+fbMJhCFWm2DaeDBbEG3X8KhJEqgx5IrH7NWv9w=
Subject key identifier:   17:44:2E:38:C6:30:88:4E:C4:DE:3E:A3:8C:B2:71:3D:3B:1A:CF:54
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       23F4E36A9125DEDB410BE450C35832E63CC5BE04
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7066401-6e27-443a-a174-bf22e8ce1b76.roa
Signing time:             Tue 05 May 2026 00:40:33 +0000
ROA not before:           Tue 05 May 2026 00:40:33 +0000
ROA not after:            Mon 03 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        184.72.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f4:e3:6a:91:25:de:db:41:0b:e4:50:c3:58:32:e6:3c:c5:be:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  5 00:40:33 2026 GMT
            Not After : Aug  3 23:59:59 2026 GMT
        Subject: serialNumber=d8029aa91592b164d5bf879750b498a8f40da58ba192ec5b5addaf0f0fe6163d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:59:d7:af:a8:3b:0c:f0:47:de:49:39:6f:94:
                    8c:69:a4:42:29:7a:6c:55:ce:85:85:76:cd:64:c2:
                    3e:71:b7:a6:5e:a5:b4:ae:a5:d1:28:40:21:9c:0b:
                    b5:2b:a9:79:32:f5:fe:13:6b:ed:e7:80:68:fe:7e:
                    81:15:40:ad:16:60:75:64:51:dc:95:87:1a:b3:60:
                    df:02:67:ff:af:83:36:06:45:0b:c6:a3:76:96:98:
                    c0:98:9d:63:5a:a7:6e:c8:49:4b:46:f3:6d:00:4b:
                    58:c8:54:13:3f:eb:fa:f4:a0:cc:bd:b1:20:ac:56:
                    c2:12:e1:ba:15:06:ff:84:84:02:56:26:ad:24:42:
                    13:aa:03:46:34:44:8f:78:3c:11:e0:19:a7:5f:79:
                    78:b9:26:7c:23:72:3c:e1:14:1a:a0:19:34:ac:8f:
                    76:08:ef:da:e7:5e:9a:12:d4:3c:38:e1:19:9f:2f:
                    aa:0f:13:51:75:70:de:a9:19:f0:0d:b8:ad:67:09:
                    a2:a1:1c:51:ee:24:66:57:1e:13:29:05:65:9b:da:
                    ff:e9:2f:0f:c5:bf:5f:e4:42:d8:92:58:62:6e:b8:
                    c1:fa:65:5e:c5:fc:e3:e9:59:d3:b0:25:69:09:94:
                    50:b8:44:68:ba:db:63:7b:c7:af:69:88:cf:ae:0f:
                    ab:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:44:2E:38:C6:30:88:4E:C4:DE:3E:A3:8C:B2:71:3D:3B:1A:CF:54
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7066401-6e27-443a-a174-bf22e8ce1b76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:2b:01:e2:02:f1:30:8b:85:b4:39:68:e1:c4:b7:1d:a6:ab:
         b5:93:9f:d1:43:07:fd:b9:c2:20:39:08:22:4d:fe:b2:43:9b:
         db:b0:00:52:3c:ce:ce:05:ff:d6:a5:19:5f:e8:a0:47:58:7d:
         2a:d8:bd:02:2f:d6:b2:f5:44:4e:a3:d8:31:ea:1a:5d:9a:c3:
         40:c5:bc:2e:ba:67:82:9d:fe:3e:7f:e3:be:07:bf:26:15:70:
         bb:0b:99:23:c4:a2:c7:65:10:6b:ae:98:3c:09:e1:65:f2:6c:
         ac:82:0a:a2:af:3c:f8:a0:be:d3:43:c7:5d:e7:da:b7:8d:de:
         1a:06:62:1b:af:5d:80:e9:92:cc:3a:93:9c:b7:42:af:a7:57:
         34:d7:6a:54:0a:57:94:28:a6:2e:58:b2:88:87:76:01:0a:19:
         30:6a:f4:a4:8e:7e:66:19:b1:e6:98:92:1d:f0:f7:d5:fd:18:
         51:97:33:24:ec:ee:15:b0:54:6b:87:8f:34:3d:a6:74:f7:ed:
         20:38:a3:99:2b:7c:7b:54:3f:18:c2:56:09:2c:22:8d:70:c3:
         49:b6:0c:ea:28:7f:76:30:a1:d4:b0:8e:af:92:fb:bd:ba:16:
         4a:0b:60:2a:5b:da:ee:8c:0a:d0:15:0c:9d:02:08:a7:da:10:
         d2:66:b2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:29:54 2026 by rpki-client