Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2fd24a8-dcac-4508-902c-c108cd032f3d.roa
File:                     e2fd24a8-dcac-4508-902c-c108cd032f3d.roa (raw, json)
Hash identifier:          Gl48EJkh5Nukn5To7X2iWYEqVvwjk8abNb5USWVynk0=
Subject key identifier:   44:5D:75:2D:D8:D6:73:C6:4A:9E:A3:DB:00:B1:08:A0:BA:D0:10:BE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4E9F4B86C9EED673C43F9C8A59E5FF329FC3593B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2fd24a8-dcac-4508-902c-c108cd032f3d.roa
Signing time:             Mon 06 Jul 2026 00:00:46 +0000
ROA not before:           Mon 06 Jul 2026 00:00:46 +0000
ROA not after:            Sun 04 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        209.234.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9f:4b:86:c9:ee:d6:73:c4:3f:9c:8a:59:e5:ff:32:9f:c3:59:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  6 00:00:46 2026 GMT
            Not After : Oct  4 23:59:59 2026 GMT
        Subject: serialNumber=abf735c4def742da80133d3ad459570fe3ade1cc37637c1cf1de3e9da93c2ab2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8d:2b:bd:50:5b:58:97:d1:03:bb:9b:ea:31:
                    ef:d7:cf:74:80:d3:25:40:e2:bb:3a:73:ec:33:36:
                    23:4c:4b:be:e5:26:32:d8:99:44:0e:8b:99:f4:58:
                    9a:ff:d5:31:01:9c:0a:31:ef:e1:88:57:68:62:a2:
                    9f:42:7a:b3:6b:4f:51:56:b3:1f:96:26:b3:bd:cb:
                    08:92:cc:aa:ca:0d:87:3b:34:4e:65:73:07:75:a7:
                    cb:70:a0:fb:01:b9:ea:8c:27:9d:c2:ec:25:da:4e:
                    4b:28:a5:93:70:fe:b4:46:26:94:b4:4b:ee:7d:4f:
                    01:3f:51:c1:0e:0b:62:c4:55:be:3a:12:4f:1a:cf:
                    7d:8d:24:07:7d:22:10:6b:86:2d:8e:92:eb:b6:47:
                    8a:f1:a7:bf:42:96:1c:50:e0:17:23:1a:04:2d:b4:
                    a1:3a:ce:b3:42:80:5d:7f:e3:9c:27:14:e1:ba:e7:
                    f0:4e:ee:8e:83:d5:e1:51:0b:5b:97:09:48:22:62:
                    c6:97:29:93:79:d9:74:c4:6f:13:34:2b:0d:ae:58:
                    75:c3:65:ac:cb:fb:c5:bf:b8:43:34:1e:27:f5:d9:
                    bd:5f:66:a2:92:f8:c0:f1:9c:23:29:ef:09:d2:3b:
                    48:73:ed:2a:6b:40:24:fe:80:2a:aa:8c:59:9b:c6:
                    28:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5D:75:2D:D8:D6:73:C6:4A:9E:A3:DB:00:B1:08:A0:BA:D0:10:BE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2fd24a8-dcac-4508-902c-c108cd032f3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.234.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:01:29:8e:23:0e:3f:ff:33:2b:19:98:4a:13:f6:ae:57:4d:
         9f:32:93:54:c0:a8:5e:c4:58:4c:3b:51:30:82:8e:1d:12:20:
         70:c9:79:ba:f6:bc:70:a4:8e:14:50:3e:c0:66:ca:76:06:d0:
         e6:23:81:5d:f0:67:93:42:26:fa:2f:61:90:69:0b:4f:91:85:
         cc:6c:17:49:d4:fc:8a:f4:a4:b3:72:c5:f9:8f:cf:ce:32:ad:
         88:a9:4b:d5:0b:e0:e7:15:17:4a:83:49:4d:c2:84:7d:be:9b:
         23:7b:f9:e3:ac:aa:6b:15:50:4f:6b:21:a8:2f:12:7b:e1:d4:
         79:2d:9c:7a:51:fe:b4:58:06:06:1d:d4:59:b6:e8:35:90:e3:
         a4:df:5f:53:3c:87:cd:33:e6:00:7d:e6:09:ea:7f:3c:2e:9f:
         f6:17:93:9b:7c:f4:90:61:c4:cf:6e:b1:23:a0:d6:84:f6:27:
         4e:e4:cd:2a:a4:8b:fd:1c:9c:cf:a4:37:d8:a5:a7:da:85:5a:
         88:6e:ab:a5:4b:14:7e:75:6d:00:87:f8:af:f8:ef:81:85:1d:
         59:9f:2b:7f:86:ba:b1:84:bb:a4:ce:86:90:ce:fe:f2:e3:64:
         05:1f:bf:01:a6:3b:28:f6:1f:da:8e:3e:3a:33:5b:df:73:4d:
         6d:7f:e7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:41:32 2026 by rpki-client