Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7d31df8-fa41-4352-9095-eab810aaea9c.roa
File:                     e7d31df8-fa41-4352-9095-eab810aaea9c.roa (raw, json)
Hash identifier:          t7RneOIU4oVaNCjwHJIYJ2LOCMO3mXfRQJMy9RSlOmg=
Subject key identifier:   B0:7D:96:54:A3:73:40:13:40:62:83:28:7D:2A:9D:2B:F2:E6:57:68
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       77DD06059E4A5E5415D54AFEF64411F977C9AAB2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7d31df8-fa41-4352-9095-eab810aaea9c.roa
Signing time:             Wed 22 Jul 2026 00:00:14 +0000
ROA not before:           Wed 22 Jul 2026 00:00:14 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        23.238.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:dd:06:05:9e:4a:5e:54:15:d5:4a:fe:f6:44:11:f9:77:c9:aa:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 22 00:00:14 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=7cffe1d0e7ee87fb62b620071f91c0a9114c547b2fd916764fe3f8d504243e57, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:94:b8:d7:86:38:a9:71:83:15:ff:8a:6f:c7:
                    61:a5:78:f1:a4:3d:15:4a:5d:16:e7:be:fc:7d:8c:
                    d4:58:6e:f1:25:16:d6:61:ee:2b:86:38:df:63:bd:
                    f7:e0:72:e9:0d:1e:d4:25:9d:28:75:b2:92:10:0a:
                    a8:58:91:fa:39:ef:a7:c2:71:63:d9:43:5f:49:22:
                    63:66:e7:b8:4d:0f:88:e3:5a:fd:29:35:cc:71:33:
                    7f:c1:d7:fe:a1:27:09:56:69:c7:56:91:ef:c5:c5:
                    df:98:38:f1:1f:93:83:ba:ef:bb:e1:9d:82:ba:08:
                    45:6f:e8:03:85:8e:a1:88:4f:2a:a8:20:29:3b:84:
                    82:51:00:c1:e8:b1:bf:b5:c0:09:fe:b7:66:0a:74:
                    20:a8:4b:73:9b:96:02:07:b7:65:e4:71:23:ce:bd:
                    04:fd:4a:58:c3:43:95:c7:a7:42:15:10:a9:76:11:
                    72:fb:ab:f1:b3:56:20:ce:34:80:79:65:bc:c2:b9:
                    85:44:1a:67:91:cf:9d:6c:31:a6:50:69:39:a1:df:
                    ee:5d:bc:57:aa:e1:7a:e4:04:3d:45:1e:86:7a:3c:
                    65:ab:f6:07:db:a3:38:d7:d3:ea:00:87:60:33:52:
                    f7:3c:44:84:7b:ad:f3:15:4b:d5:51:01:05:09:f7:
                    3b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7D:96:54:A3:73:40:13:40:62:83:28:7D:2A:9D:2B:F2:E6:57:68
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7d31df8-fa41-4352-9095-eab810aaea9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.238.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:a2:bc:ee:a9:7d:f1:ff:56:ed:9b:5d:6c:1b:b9:b6:06:e2:
         1c:a4:e3:55:c4:c8:79:28:f4:a8:dd:85:f4:79:d2:be:ea:61:
         36:36:37:76:4e:bd:03:98:6f:e5:54:68:08:db:db:f8:5a:2e:
         4a:a1:26:79:f3:f0:8a:36:30:64:0a:58:d5:79:c4:fb:51:1e:
         71:7b:3f:e9:56:40:16:04:f3:e5:70:1c:fc:7b:54:74:c5:7f:
         3d:c9:53:c3:b8:e9:b2:03:7d:3c:41:18:d8:66:ad:31:40:0f:
         05:1f:fa:9b:56:6c:e0:8d:01:07:07:65:15:43:bd:b9:87:0e:
         7a:cb:c6:57:f0:b0:0a:5d:75:f5:ea:05:41:47:7e:37:80:52:
         9a:25:c9:87:78:1e:1f:44:f1:20:c8:b9:21:d9:02:03:cf:76:
         1e:14:5e:10:53:bb:66:38:48:18:80:0b:23:ff:ac:55:b3:9d:
         15:19:fd:fa:89:32:e8:e0:29:f6:bc:44:10:2a:78:11:8d:81:
         2b:47:c2:b4:d1:4a:79:26:a1:bd:cc:e3:e0:fd:5a:70:e3:85:
         19:c0:00:fb:f8:d3:1f:a7:b1:ef:e8:3a:c9:bc:78:fa:85:51:
         a3:95:8e:18:b3:d6:1c:98:18:40:29:e9:b4:b2:e2:29:20:de:
         2a:50:b0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:30:52 2026 by rpki-client