Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d600ccd6-ff43-419e-9c88-f766b917445a.roa
File:                     d600ccd6-ff43-419e-9c88-f766b917445a.roa (raw, json)
Hash identifier:          qrf6LYLGZJ0LeFCNNrX34/+nvus0QZVHhl0Z3RrDuM4=
Subject key identifier:   2C:1C:54:0A:55:DF:FF:D8:AD:FB:57:33:36:CC:A8:C9:00:8D:D1:BA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       376A9B1B30C96532971E677EE9CA4F8F9718B2AA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d600ccd6-ff43-419e-9c88-f766b917445a.roa
Signing time:             Sat 18 Jul 2026 00:30:49 +0000
ROA not before:           Sat 18 Jul 2026 00:30:49 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.51.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6a:9b:1b:30:c9:65:32:97:1e:67:7e:e9:ca:4f:8f:97:18:b2:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:30:49 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=141f3b114980d4bbac0f04206fd6b294652d97afc2ea357f37c488480512fa92, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:45:d1:bf:a3:19:1a:9a:eb:54:aa:3f:85:ad:
                    e7:8b:36:af:6d:5e:40:33:e2:11:e7:96:1c:32:ed:
                    e9:75:cd:13:53:82:0f:71:22:65:0e:f8:6d:b1:66:
                    ed:9f:d8:37:21:9a:fd:53:24:45:99:22:1d:92:e1:
                    b6:ec:87:65:9d:63:04:22:77:7c:87:43:e3:c8:48:
                    98:9b:af:29:3c:01:03:1f:cc:8e:5e:72:60:10:b4:
                    29:c2:ed:c4:f1:b4:1d:22:1a:01:f7:bd:ee:93:0b:
                    95:ee:b8:98:e5:0a:d1:d3:85:1a:6b:bc:c0:a3:eb:
                    ce:a0:ec:50:6f:8d:8d:20:7f:f3:61:82:71:c5:f1:
                    ab:1d:3a:87:82:3a:d3:a5:34:31:2d:35:16:81:63:
                    c6:73:48:89:6d:13:1b:fb:49:d4:4f:27:ae:7b:0b:
                    c3:a9:c3:94:f6:3b:19:14:4e:88:d6:e9:47:83:19:
                    5f:33:47:92:71:84:ab:2c:65:c1:87:82:1a:41:d1:
                    c6:51:9c:e5:77:22:3e:1c:fe:00:37:f0:10:31:38:
                    8e:99:b9:3b:d9:ef:ea:01:47:64:26:45:d9:ac:49:
                    da:4e:30:35:cc:45:78:3e:ea:e0:a1:4d:22:6e:d4:
                    63:7f:21:07:37:64:e3:fc:0c:5d:60:fc:e7:73:86:
                    7b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1C:54:0A:55:DF:FF:D8:AD:FB:57:33:36:CC:A8:C9:00:8D:D1:BA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d600ccd6-ff43-419e-9c88-f766b917445a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.51.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9a:4c:16:4a:a6:ea:1e:bd:e0:1f:d5:51:49:9f:0e:b8:d8:e4:
         68:6b:99:7f:0d:d6:bb:6d:38:fc:d0:82:93:60:c8:12:9b:d7:
         b1:9c:df:49:c9:58:67:d0:a1:ba:d1:12:d8:a0:7c:25:8d:42:
         1e:ef:b1:0e:66:9b:93:fc:29:5c:f2:53:5c:2e:77:85:e6:ba:
         76:29:a6:b9:24:17:53:15:ec:06:b7:72:f9:d3:69:7c:12:8c:
         e8:77:1c:a3:4c:51:89:10:b5:44:e8:d8:f7:8d:e1:a2:3b:5c:
         92:c8:c6:e1:77:05:ea:0b:be:87:8e:cb:3c:88:3c:ea:4e:79:
         78:a7:19:52:11:2b:5a:03:14:c6:84:9d:ce:7f:77:2a:df:42:
         c2:99:ce:8a:d9:18:c2:1d:98:aa:5e:99:ab:81:5e:ef:17:f1:
         5d:f5:95:84:97:bd:b2:0c:2b:75:d3:9a:f6:4f:5a:21:44:9d:
         e6:ad:d2:3c:83:92:43:12:f6:07:00:43:8a:ce:90:d9:84:cf:
         76:24:98:71:2a:49:af:84:1e:ee:5e:7d:b2:4c:85:16:0c:5f:
         31:4c:85:95:2c:aa:6e:a6:a4:c1:07:e6:75:5d:9a:60:59:73:
         a9:ea:5d:eb:3d:49:b0:31:73:81:c8:39:48:90:a7:dd:fc:88:
         2d:50:7f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:34:18 2026 by rpki-client