Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4e2a13f-7777-41ad-9df2-db48ea0d6fab.roa
File:                     f4e2a13f-7777-41ad-9df2-db48ea0d6fab.roa (raw, json)
Hash identifier:          7pwRCTSBzuvIZ2dCRO6KUSN7mkxnrYHCE9rcPt4qa+s=
Subject key identifier:   E4:76:65:4A:F1:0F:BB:6C:18:39:A3:07:5E:65:F0:C2:C4:FA:0C:53
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3E4D7427A3DA6A2215AF94EB0A6AD6CB2D6A8E6E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4e2a13f-7777-41ad-9df2-db48ea0d6fab.roa
Signing time:             Sat 18 Jul 2026 00:20:33 +0000
ROA not before:           Sat 18 Jul 2026 00:20:33 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4d:74:27:a3:da:6a:22:15:af:94:eb:0a:6a:d6:cb:2d:6a:8e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:20:33 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=f2a6560297cd539ac1c7f89be54eeef0ee989332289650732f294311d8f8f022, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4c:e3:f8:5e:39:57:c4:45:ff:93:47:33:1a:
                    60:9e:01:cc:a9:ad:9c:6a:5b:ef:49:5e:86:d2:26:
                    81:98:95:85:fd:62:af:8e:24:5e:1d:d9:f0:55:49:
                    d9:5b:fd:0f:00:2f:29:1b:22:12:62:b4:6d:ee:d8:
                    99:50:3c:5a:87:04:97:e1:9a:9a:4c:df:18:c4:52:
                    c4:02:28:49:9c:2a:88:34:b3:e7:43:2f:9e:b2:b1:
                    4e:3d:a6:74:f9:21:b2:1d:79:4f:75:3f:0b:11:a3:
                    3e:fe:fa:40:e4:de:a7:9c:64:df:e4:e7:6b:15:46:
                    d2:1a:d2:52:95:09:cb:d8:ce:8b:dc:80:5d:6b:2b:
                    11:5e:46:da:18:55:06:a1:18:ea:68:0f:ac:ca:42:
                    58:3d:23:17:3b:27:72:89:6d:96:a8:72:3f:b0:31:
                    9f:bd:87:04:94:af:41:7a:ff:81:c5:e9:2b:34:a5:
                    5c:01:d3:3d:28:a2:fc:5f:d3:b9:cc:24:0c:1a:7a:
                    20:a6:76:88:eb:b3:9d:fe:b4:9a:b4:a5:fa:22:e6:
                    20:6d:e1:3c:f6:e5:6c:49:74:7f:24:72:e2:7e:42:
                    5f:9b:5b:0a:f0:28:39:bc:79:69:ed:9e:7e:47:c5:
                    9d:4e:92:54:6c:4b:b1:1d:d9:36:42:e1:55:c1:cc:
                    69:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:76:65:4A:F1:0F:BB:6C:18:39:A3:07:5E:65:F0:C2:C4:FA:0C:53
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4e2a13f-7777-41ad-9df2-db48ea0d6fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:66:ca:34:e1:f5:b2:bf:7f:0e:2d:47:31:17:4a:3d:3f:c0:
         ee:d5:95:41:37:48:d5:03:2c:2d:16:33:58:e8:af:58:8b:ad:
         d9:4d:79:0d:1c:5b:30:15:33:51:34:62:dd:73:a3:9a:d0:38:
         89:04:17:69:1e:1d:43:d3:19:db:d4:1f:57:ff:9d:f3:36:1a:
         ef:93:84:77:78:84:97:e4:97:4d:62:3b:74:38:9f:61:5d:23:
         fc:76:98:49:2e:c6:91:a8:53:42:e6:90:9c:21:88:43:3e:5b:
         de:fc:86:23:9e:1b:0e:14:ce:2c:fa:65:b8:68:e6:e8:a8:28:
         b3:c7:d2:4c:9d:9f:3b:01:5e:65:53:d5:a9:82:21:6a:01:86:
         c0:5e:f5:c6:99:fa:ec:26:6d:c7:2f:f0:1a:cc:44:f3:67:1b:
         e8:da:5d:d2:bd:f4:8b:e9:c6:b5:7e:d6:93:b4:3b:ce:3f:47:
         21:03:fb:2c:ed:56:d0:7d:a8:a3:31:c2:fc:8d:d5:2f:6e:0c:
         a7:43:c2:35:85:71:37:dc:22:69:47:f5:14:07:4f:7e:78:7f:
         df:ae:3a:a1:c8:6c:3d:b3:30:0f:4c:e3:67:dc:de:03:b3:82:
         4f:52:3a:a2:1f:77:b0:ac:b0:f9:a5:51:0b:ce:67:78:d3:f7:
         65:f5:c5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:43:09 2026 by rpki-client