Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/038fb50f-8536-4073-94bd-2e51a0aa712b.roa
File:                     038fb50f-8536-4073-94bd-2e51a0aa712b.roa (raw, json)
Hash identifier:          oG/Pyl0afazdDft+0AlKGcH2/iZvbApSWM1oPYnopDU=
Subject key identifier:   C6:B4:70:1C:55:23:A7:9D:C5:B0:6E:B5:8D:BE:42:2B:0B:7F:5E:DF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       423BABDBC4B9B4D27F5E6ADE365FC0D75A02D6FF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/038fb50f-8536-4073-94bd-2e51a0aa712b.roa
Signing time:             Thu 15 Oct 2026 00:10:05 +0000
ROA not before:           Thu 15 Oct 2026 00:10:05 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        24.110.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:3b:ab:db:c4:b9:b4:d2:7f:5e:6a:de:36:5f:c0:d7:5a:02:d6:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 00:10:05 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=a08e6cc368feef4704f0a28e4145cab9da591e4f710b2c846d0f0ab358eabe65, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:77:71:e5:9e:fb:c9:12:af:3c:4f:20:00:00:
                    fa:27:01:c3:00:91:a4:af:a2:ae:9a:7c:94:2b:6e:
                    94:13:73:98:79:a7:ad:03:43:90:43:45:9a:09:db:
                    ce:ce:16:37:2d:3b:9b:de:d4:9c:69:ef:be:b1:f3:
                    69:8b:95:43:f5:bc:d6:5c:70:74:7b:1c:81:23:d1:
                    96:2a:16:53:e9:44:60:55:3e:3f:dd:e2:c1:27:bb:
                    b2:1b:13:cb:ca:e5:3f:04:fe:3f:9e:ed:37:2e:0c:
                    a0:1f:7c:56:c3:a6:d4:b8:93:9f:ef:fc:71:0a:57:
                    b3:a1:2c:d5:82:10:ff:f9:50:95:9c:85:9f:84:70:
                    48:9b:3e:25:43:10:67:0a:3a:ba:b3:88:63:14:80:
                    51:f4:0a:61:90:e1:d5:38:01:86:04:3c:fd:19:aa:
                    8b:f9:43:ec:4c:b7:4b:dd:69:61:f2:3d:22:b6:b9:
                    03:3b:5f:4f:b5:3e:64:c4:5c:e3:fc:60:fe:ca:d1:
                    1a:3a:4a:2d:8c:74:de:63:d3:c4:74:41:4d:27:4d:
                    ea:a8:07:1a:44:32:9f:34:33:c8:66:e4:99:d3:83:
                    4c:b1:a4:67:c8:bb:ef:f5:1a:18:03:bf:41:0f:d4:
                    82:72:11:4b:b6:16:0f:b7:e8:f5:12:fa:7e:62:7f:
                    8f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B4:70:1C:55:23:A7:9D:C5:B0:6E:B5:8D:BE:42:2B:0B:7F:5E:DF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/038fb50f-8536-4073-94bd-2e51a0aa712b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.110.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:85:7b:cb:38:eb:4c:08:29:52:0a:bf:87:e1:66:3c:68:a3:
         33:95:a4:29:b8:c5:75:89:77:aa:5b:a7:d2:0e:54:1e:5b:88:
         70:9a:74:23:f1:13:fd:0d:50:a7:44:6b:b6:72:cb:6f:9c:0f:
         43:15:fe:e8:31:c9:73:ee:50:11:34:b1:5e:83:39:3d:28:83:
         64:76:7d:f3:e7:63:83:77:b0:65:f9:03:82:b0:1f:4c:28:17:
         ae:22:29:28:40:79:76:9d:91:fb:91:1a:f9:33:8a:64:cf:ac:
         b7:f1:21:7e:19:87:af:e8:a7:e8:98:3f:98:2f:95:62:d3:d0:
         ff:9d:b3:74:42:b6:d9:82:e5:79:fe:4d:c9:30:70:b9:90:3c:
         b5:7e:9b:b9:03:e9:36:f0:68:6e:76:4d:1d:2e:a6:06:05:00:
         8a:61:4e:c0:94:43:37:ff:64:ef:52:d0:9f:bb:e1:53:99:45:
         fe:5a:5f:c3:8e:93:07:e1:84:d7:54:91:3d:81:32:15:c0:de:
         73:e0:70:d8:5e:8c:dd:42:4d:99:c6:f1:e4:74:c0:13:8e:a9:
         bb:11:b7:23:51:e9:b6:ef:c1:7a:55:d5:25:05:48:32:d9:c0:
         91:8d:63:08:d4:5f:59:fb:51:02:80:87:23:51:03:09:6d:00:
         ef:56:6e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 18:49:06 2026 by rpki-client