Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfa47097-52bc-4989-842a-2cceba90b7a6.roa
File:                     cfa47097-52bc-4989-842a-2cceba90b7a6.roa (raw, json)
Hash identifier:          L34hDZEo1Xwh9K/4PiiubeL5SuVJzIOzrzO9jEgGuoI=
Subject key identifier:   F2:7F:50:46:DB:3A:CF:EA:C1:A3:49:87:08:CC:98:F0:9A:57:30:29
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       065FC5B200247A57DB620F9CADC70D084A50F600
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfa47097-52bc-4989-842a-2cceba90b7a6.roa
Signing time:             Wed 15 Jul 2026 00:00:09 +0000
ROA not before:           Wed 15 Jul 2026 00:00:09 +0000
ROA not after:            Tue 13 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        182.24.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:5f:c5:b2:00:24:7a:57:db:62:0f:9c:ad:c7:0d:08:4a:50:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 15 00:00:09 2026 GMT
            Not After : Oct 13 23:59:59 2026 GMT
        Subject: serialNumber=193841e385f357eb9e7ad4284bf13c53d8bd729e39bc6fc4dbdf842ae242a39a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:50:b8:07:03:9a:b3:5d:af:0f:ef:1c:b6:70:
                    97:1d:82:e9:15:b2:58:e2:82:96:1f:6f:57:2b:2a:
                    8a:a2:b7:82:a0:0d:7b:26:6e:e6:cb:dc:8d:0e:5d:
                    be:87:17:4f:27:25:29:1c:30:52:18:a6:14:4b:92:
                    b2:71:06:1a:64:1a:9c:90:81:82:ec:d5:89:4a:c8:
                    54:8c:74:05:50:09:bc:6c:0d:75:ab:31:b8:4e:08:
                    cb:11:59:2d:05:5a:71:c5:c4:11:bd:37:a3:ff:b2:
                    53:d1:97:81:c7:2e:d1:f4:2e:9a:0e:fa:17:68:d0:
                    0d:3c:f8:fe:50:e3:49:c3:7d:07:63:c9:84:b8:cf:
                    6d:b4:20:2e:81:b9:14:08:04:ea:19:0b:97:53:d1:
                    de:fe:bd:51:ca:f9:1c:d9:a9:e2:ca:66:d6:9a:95:
                    49:ee:b0:e3:43:c0:29:45:c1:40:bf:66:81:53:c8:
                    88:f5:fa:be:3c:68:05:ea:47:e7:47:49:a5:3f:a3:
                    0d:7d:e5:f9:e3:6d:64:de:1c:06:08:22:c9:cd:56:
                    9c:f5:f4:02:97:5e:8e:39:f6:51:3a:43:99:13:ab:
                    11:86:35:18:9d:74:df:20:44:dc:71:c2:aa:b3:11:
                    e6:ea:7b:b3:39:f4:90:96:6d:be:b0:e4:ce:52:e0:
                    cc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7F:50:46:DB:3A:CF:EA:C1:A3:49:87:08:CC:98:F0:9A:57:30:29
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfa47097-52bc-4989-842a-2cceba90b7a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.24.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         1f:f0:07:56:c7:c4:d2:f6:7c:e6:64:4a:5c:05:8e:8b:25:ba:
         9f:04:e4:85:a8:e0:41:1a:16:64:5c:af:dc:c5:af:c3:06:cb:
         00:6a:a8:92:a5:8b:d2:72:0d:52:37:c0:0f:1b:69:5c:d2:f0:
         9f:3a:67:0f:3e:0a:eb:fc:03:76:91:84:d3:35:69:1c:4f:7b:
         53:69:2b:b0:f2:d3:2a:a3:37:3f:32:bf:eb:d7:59:ed:30:4f:
         e3:38:9a:4d:a6:13:49:6b:51:4d:de:02:1c:ce:ee:95:6d:43:
         61:71:24:dc:2d:ef:f6:a9:13:5f:4d:b7:f4:59:a4:b8:46:d2:
         97:bc:69:73:51:9b:0d:3a:dd:c8:18:64:a3:e5:03:fc:5a:bd:
         47:fc:43:b1:25:94:e6:3f:66:84:de:db:a9:8a:9b:0f:ad:1e:
         84:b2:5f:ac:98:fe:4c:0b:49:eb:f3:ed:a1:a2:fd:3c:45:2b:
         7d:19:66:cd:95:62:a5:49:d3:9a:89:10:95:9d:39:25:04:59:
         ab:40:57:65:d9:62:34:29:ad:ac:15:bd:7b:94:bb:88:ea:d8:
         01:81:d9:86:18:78:db:b0:e4:f1:45:f5:bd:2c:30:23:7f:36:
         b0:9f:1e:92:e9:91:4a:fd:e5:6e:29:98:0a:9a:8d:14:d5:c1:
         ec:31:c2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:44:38 2026 by rpki-client