Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d15f5b55-989f-4c31-8bbc-194a3f547286.roa
File:                     d15f5b55-989f-4c31-8bbc-194a3f547286.roa (raw, json)
Hash identifier:          O41aOejmUVUrsH21xhlHeVJZF4hD/Zgo4r/6Y5GMp14=
Subject key identifier:   D5:AF:CD:1C:E8:06:DF:B9:A8:08:E7:2A:6C:E5:81:1D:BF:52:1D:34
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4D8013699A4BD6EAAA546D075C8F7EBB93504FA5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d15f5b55-989f-4c31-8bbc-194a3f547286.roa
Signing time:             Thu 23 Jul 2026 01:11:31 +0000
ROA not before:           Thu 23 Jul 2026 01:11:31 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        93.77.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:80:13:69:9a:4b:d6:ea:aa:54:6d:07:5c:8f:7e:bb:93:50:4f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 23 01:11:31 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=691b4f7392ec4ca09a961ef6f857aab0748c67d1b4fc3ea400ca7a770df02713, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b0:c7:d8:5c:bf:3d:7b:fe:e3:02:bc:80:2d:
                    89:ac:cc:ed:28:b3:9a:a5:4c:e4:2b:a3:06:6c:d4:
                    76:35:ec:56:7a:99:97:da:59:f9:d1:35:37:68:b7:
                    de:63:a3:43:86:48:da:51:12:99:54:9d:3e:91:eb:
                    b4:3e:24:31:b2:67:39:ea:f8:59:54:a2:fa:38:cb:
                    be:72:82:e8:d6:3c:a4:8f:0f:83:91:0f:64:e1:ae:
                    fd:cb:7e:c5:f3:85:4a:04:a1:9c:f7:b5:7a:b9:e7:
                    a8:7b:0d:48:75:29:75:d6:01:6b:d3:39:d1:f1:90:
                    32:67:f3:10:85:4a:32:77:79:f4:02:1f:a5:d2:50:
                    ce:fe:6f:68:d4:5d:db:3d:04:a4:c5:43:23:45:6e:
                    14:01:27:96:99:a6:50:ce:2d:46:b1:ce:76:61:4b:
                    70:f1:3d:79:82:a7:96:f4:64:23:f3:2c:3a:09:27:
                    ac:45:d8:a7:7b:97:b6:e2:0e:14:20:17:89:57:e5:
                    93:11:82:c4:a6:d5:9c:d9:c4:03:b2:14:2e:6d:1c:
                    ff:c5:93:9e:01:19:e9:da:11:5e:24:78:ce:ec:da:
                    58:4c:4f:3f:d2:1e:09:ba:df:0c:bf:e0:d0:a3:84:
                    4f:a7:d8:a7:15:1f:be:e4:4f:36:b2:09:34:16:d7:
                    a4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AF:CD:1C:E8:06:DF:B9:A8:08:E7:2A:6C:E5:81:1D:BF:52:1D:34
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d15f5b55-989f-4c31-8bbc-194a3f547286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.77.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:8b:b8:65:59:c9:bc:74:79:14:56:b7:df:f0:e3:98:86:f9:
         b2:03:8f:dd:bd:7c:64:66:8a:5f:34:94:cb:36:17:89:04:88:
         f2:7e:b2:f5:d8:e4:f2:ca:64:58:15:e1:5a:95:0b:a3:b3:43:
         69:bf:37:6f:9d:fb:d4:ee:14:4b:4c:c0:20:ed:b1:19:25:8f:
         1c:1f:f6:e9:c7:0d:87:cb:69:83:d4:44:cb:6e:1f:61:1a:c7:
         1c:f5:c4:48:aa:c0:11:95:6d:85:6f:bd:5d:23:37:1e:ec:73:
         7a:bc:fe:eb:5e:13:2c:ac:c2:b0:4a:23:2e:b3:c2:f2:8d:71:
         c0:2b:91:fd:5c:36:6a:0c:32:03:d4:63:9e:5b:92:95:22:b1:
         04:bc:f6:57:c6:cc:f4:71:bd:fb:6e:59:b0:51:d0:3c:71:ec:
         be:3d:76:96:58:eb:7a:bc:b4:d5:cd:1c:4f:8a:2c:5c:d0:f4:
         b2:25:eb:2d:13:c8:81:17:d3:23:c1:87:35:44:4e:66:5e:c6:
         62:de:3d:5d:bb:61:c7:44:c0:61:0d:74:00:be:d4:c6:ca:50:
         f3:25:10:07:78:a1:8f:af:44:34:99:79:f7:a3:59:05:c7:79:
         f7:03:8a:b9:51:6a:10:17:14:26:02:10:49:f6:4e:8b:87:59:
         77:50:d5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:34:17 2026 by rpki-client