Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2c885d6-4061-421b-99ff-f05202cdada5.roa
File:                     f2c885d6-4061-421b-99ff-f05202cdada5.roa (raw, json)
Hash identifier:          GA5WXAi2uqtWR0KMvCAQo8ii5PapW/jBqCV+KBkAT4o=
Subject key identifier:   DC:F2:4B:03:11:00:40:0F:DD:15:D8:AF:35:93:FE:45:AA:08:C2:A9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E726F0D217811ABC80F353CB76193578BC0DF7E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2c885d6-4061-421b-99ff-f05202cdada5.roa
Signing time:             Thu 23 Jul 2026 00:20:09 +0000
ROA not before:           Thu 23 Jul 2026 00:20:09 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        44.223.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:72:6f:0d:21:78:11:ab:c8:0f:35:3c:b7:61:93:57:8b:c0:df:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 23 00:20:09 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=53847866ef927f30d535218dd0dc16323b43bfc2f097a280a1402ac5af54d98b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:3c:6a:31:4c:22:2d:86:b8:96:52:87:db:
                    a8:35:64:0e:68:dd:65:90:9f:e4:af:d8:2a:2c:d7:
                    2c:72:f8:17:30:ea:4a:72:ee:1d:f4:ba:6d:6f:cc:
                    d6:4f:45:a0:ba:f6:d8:dc:28:51:bc:6e:7e:7b:58:
                    3e:9e:af:4c:e6:77:fe:4c:f1:76:58:51:4f:a9:9b:
                    5c:3b:31:de:77:ce:b4:ad:d7:58:f8:ec:c9:90:1b:
                    9a:13:e3:39:17:ce:18:d4:8e:bc:29:24:7b:ce:c2:
                    b0:b3:eb:81:dc:7b:01:70:09:20:20:e6:53:5f:6b:
                    80:a2:1f:ac:af:09:ed:b2:34:bb:39:0f:0f:e3:30:
                    14:8c:8a:2d:e1:72:91:78:d7:ec:1d:45:a5:88:3e:
                    d5:28:d7:09:c8:ff:59:25:9e:19:e7:b2:9f:5c:5d:
                    7a:48:27:f4:2e:ee:2f:be:46:28:29:27:e1:88:dc:
                    41:0c:ee:67:9a:dc:ae:53:0a:95:45:fc:07:13:aa:
                    c6:94:b1:d7:93:04:12:3d:11:16:d4:34:1e:a1:7b:
                    7c:77:a3:5d:fa:f3:a2:37:04:7e:47:fe:58:40:6a:
                    25:19:76:85:70:42:d0:15:b6:90:b0:44:f5:4d:9d:
                    db:ca:3d:0e:a4:dd:1e:de:5d:e4:05:11:04:29:a0:
                    c0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F2:4B:03:11:00:40:0F:DD:15:D8:AF:35:93:FE:45:AA:08:C2:A9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2c885d6-4061-421b-99ff-f05202cdada5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  44.223.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:a1:cd:7f:2c:fd:46:4b:ee:e3:f0:2e:d9:37:a5:7f:dc:10:
         69:17:40:41:42:86:7b:7e:d5:0b:8f:ca:7c:e4:e0:c6:c8:5e:
         5b:9b:ae:a3:dc:15:33:78:9f:a5:14:53:4a:3c:d1:6b:0b:46:
         5d:2f:97:44:24:69:29:f6:f7:9d:e1:a0:e1:a7:55:98:76:22:
         6c:6c:a3:ad:cc:83:5c:4e:95:f2:12:10:1d:a0:68:e0:7f:eb:
         56:2c:a2:6c:d0:ec:f5:fe:1a:fa:4a:28:d6:b7:ab:3e:f5:c1:
         f0:0a:cc:0e:53:f0:51:fb:fe:70:09:e4:d4:ca:be:86:8e:84:
         cc:01:cd:04:7d:ff:44:b1:27:c3:df:12:f6:8d:f3:ef:b9:2b:
         8d:01:7e:4a:9d:8d:34:3a:b3:d8:aa:94:76:26:03:48:8e:7f:
         e7:b6:10:11:50:9b:1e:38:a0:82:fb:ee:72:d7:02:ad:9e:d9:
         a4:02:a6:b8:8c:47:65:9e:38:a9:99:d9:97:65:ed:1a:83:91:
         76:34:90:42:97:ab:d0:a6:d3:a6:8c:86:6c:d8:2e:38:68:17:
         e4:de:8d:50:11:54:34:8d:c3:3b:e7:b1:7a:43:9d:61:1d:c9:
         97:72:82:6e:01:02:62:9f:c3:f2:41:42:97:63:e3:7a:f2:28:
         1e:5b:85:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:56 2026 by rpki-client