Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0114a896-9728-46a0-a9f2-a6fdf1c6fb94.roa
File:                     0114a896-9728-46a0-a9f2-a6fdf1c6fb94.roa (raw, json)
Hash identifier:          ez6vP6o9qvzXLGj1rvZj3AFBda0GiCfhcPojAUptnK8=
Subject key identifier:   46:70:70:1B:7C:3A:38:C7:38:94:D1:7E:E1:3B:DF:1F:C2:B8:B7:66
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1B83CDD5DA3BDA84C2FDBF188163AD014C1CE38D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0114a896-9728-46a0-a9f2-a6fdf1c6fb94.roa
Signing time:             Tue 04 Aug 2026 01:50:03 +0000
ROA not before:           Tue 04 Aug 2026 01:50:03 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        92.201.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:83:cd:d5:da:3b:da:84:c2:fd:bf:18:81:63:ad:01:4c:1c:e3:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 01:50:03 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=bf99869aadbf0c84d7969336b692b2c4914224baef3c9ff091a41d7f684ae98a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7f:ae:83:15:b7:26:b7:44:d4:cd:4b:47:b8:
                    fb:6f:79:16:6a:7a:c3:d8:84:ef:d3:d0:dc:cd:b8:
                    d0:cf:a5:7d:a6:b4:e6:ac:1e:6a:1e:82:4f:87:27:
                    3f:0a:c3:65:b9:73:5a:73:f9:60:c2:18:f2:63:a7:
                    3c:63:37:17:bd:68:cb:3d:f6:bb:e8:f9:11:73:7d:
                    92:bb:cf:86:eb:b6:ae:7e:07:21:5c:15:ad:43:e6:
                    cc:4d:2e:e7:07:b0:ac:51:f7:52:58:58:d0:e8:97:
                    dd:7a:62:f7:57:5e:a6:88:6a:c6:72:28:89:52:41:
                    6d:b6:5a:25:2d:85:7e:3f:cc:55:4a:c3:0c:49:db:
                    0e:60:34:c6:09:26:a7:22:70:6d:96:ab:23:c6:b1:
                    4a:16:78:88:df:0d:dd:8e:a0:90:3b:74:ee:50:b8:
                    e3:00:16:5e:3d:1a:e0:74:03:89:80:74:89:03:18:
                    0c:58:af:3e:fd:c1:b2:a1:22:c9:21:10:32:7c:ba:
                    57:fe:39:b1:06:85:af:2d:34:43:e5:78:51:c5:3d:
                    23:09:93:c8:56:30:99:74:48:b6:22:72:ed:d3:6d:
                    72:c5:af:30:bd:4b:ea:f6:94:d9:06:5e:db:65:76:
                    12:60:ae:dc:52:38:02:07:97:bf:00:03:d7:0f:3e:
                    b0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:70:70:1B:7C:3A:38:C7:38:94:D1:7E:E1:3B:DF:1F:C2:B8:B7:66
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0114a896-9728-46a0-a9f2-a6fdf1c6fb94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.201.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         c7:80:ed:5f:64:a5:25:00:be:28:76:24:60:44:c8:a2:c6:a4:
         cd:57:d9:30:8a:e5:ef:3d:70:5a:c3:5a:79:15:f6:cb:c4:6e:
         72:74:fd:3d:6c:6a:ab:ed:ca:bb:2e:00:a3:b1:6e:19:e7:ef:
         31:9f:0c:8e:f7:db:b5:e2:a9:3d:c0:ff:15:d0:46:06:fd:f6:
         de:1c:91:c9:61:5a:e6:57:69:f5:ab:39:f8:07:15:4f:28:7c:
         48:d5:94:7f:b0:68:06:5a:9a:5a:f1:f1:84:7c:40:cd:75:58:
         60:63:15:e6:b9:ed:32:b8:8e:f1:64:6a:71:bd:3f:98:0f:86:
         de:21:7d:58:da:43:2e:fc:c7:d1:3c:f6:b6:d4:5a:e1:c0:f8:
         98:46:af:08:4b:c4:fa:53:2f:9d:85:4b:39:4d:a8:30:4b:6a:
         41:41:e0:fd:42:fb:a5:ce:41:62:f7:af:cd:a2:76:d9:6b:c5:
         d7:0e:1b:66:c3:57:48:11:38:cc:e9:1d:ff:ad:bc:0d:26:21:
         64:69:27:0e:f4:dc:76:bf:30:9b:21:f4:59:8f:42:a0:24:8a:
         32:da:e3:51:9f:64:c8:28:55:92:25:d0:75:7b:e5:18:ee:eb:
         5e:66:53:7e:c4:ba:ea:f5:87:86:ee:3d:49:3e:68:ed:d9:6c:
         db:73:0a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 17:09:39 2026 by rpki-client