Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05ae7013-1fbb-4d48-8f95-be150236ce6c.roa
File:                     05ae7013-1fbb-4d48-8f95-be150236ce6c.roa (raw, json)
Hash identifier:          wDu4e0eU+h71yDVyP+fW8fsdFFx3ul4eynXzEAyooG8=
Subject key identifier:   EC:47:08:B6:83:C7:98:60:8B:70:BB:14:E3:3D:3E:EF:6C:1F:E6:B5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       366DAA880B866BECA56066AFC30D2D9CA33691D5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05ae7013-1fbb-4d48-8f95-be150236ce6c.roa
Signing time:             Sun 04 Oct 2026 00:10:08 +0000
ROA not before:           Sun 04 Oct 2026 00:10:08 +0000
ROA not after:            Sat 02 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        151.148.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6d:aa:88:0b:86:6b:ec:a5:60:66:af:c3:0d:2d:9c:a3:36:91:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  4 00:10:08 2026 GMT
            Not After : Jan  2 23:59:59 2027 GMT
        Subject: serialNumber=e110a4ea8c91b335d822879f752e1af8b2d0c938481f7031b5112bbceb9bf3a0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ec:60:86:ea:59:2a:45:46:7b:9d:9e:f0:aa:
                    2d:ac:ef:cb:ac:eb:e4:8c:b6:13:55:c7:a0:5b:47:
                    77:af:5f:d3:84:f8:58:71:3e:d6:de:41:b6:c1:dd:
                    6d:20:77:a5:a2:90:36:25:57:ce:b6:e2:bc:e4:62:
                    3e:0c:6a:21:a3:36:9a:f3:63:62:b2:a4:91:38:55:
                    90:bd:a6:b0:50:62:c7:b7:f3:c8:4f:91:8b:59:b8:
                    f0:78:12:40:30:ef:26:bb:ff:81:5c:bb:5d:72:42:
                    3e:03:ec:86:58:e9:1a:0d:a9:15:24:22:e4:7f:b7:
                    60:db:e5:ec:81:7e:e3:a8:2a:7f:18:0e:eb:a5:ea:
                    e9:bd:e7:92:4b:d8:b7:ad:d7:56:58:53:cd:b8:90:
                    29:da:85:31:48:80:97:71:2d:a8:ed:9d:ca:a2:92:
                    e2:dc:4f:e7:9c:78:2e:ce:f1:a9:42:10:17:41:58:
                    31:74:4f:08:85:57:6d:78:5d:a0:a5:3f:95:e7:d2:
                    80:d6:3e:e8:cd:e1:f5:c7:11:d5:b4:42:34:d7:a2:
                    14:d4:cf:36:9a:85:f0:a2:92:ae:1c:b8:7f:79:f8:
                    19:37:09:c7:bf:2d:9e:e4:77:91:d6:43:89:3c:75:
                    66:88:65:1f:be:8d:d9:26:f4:ac:e0:3e:cc:2a:d3:
                    52:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:47:08:B6:83:C7:98:60:8B:70:BB:14:E3:3D:3E:EF:6C:1F:E6:B5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05ae7013-1fbb-4d48-8f95-be150236ce6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.148.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:5d:ba:af:c2:99:85:71:db:0f:2b:30:61:92:88:33:ff:40:
         06:1f:07:14:66:bd:2b:d8:e2:e0:86:16:4e:eb:b2:b1:59:53:
         41:b8:95:e5:66:d3:3c:6c:99:a5:17:5d:1d:55:bc:f7:df:54:
         16:92:55:c9:9d:5c:67:b7:db:62:c4:04:5a:55:a2:74:19:f7:
         9a:76:26:db:67:d9:42:a4:32:1f:6a:ee:90:a8:f9:4c:97:3c:
         77:5f:90:50:0e:79:76:4e:d3:31:91:72:1a:c1:70:6d:4f:75:
         13:37:94:16:4c:d3:8a:2f:e5:f6:80:44:47:01:13:bd:fc:25:
         e4:f4:e5:d1:be:1f:3c:50:0b:2c:03:4d:56:24:41:3e:47:e5:
         b6:da:03:fa:04:60:5e:6e:37:be:c1:4c:38:d1:84:8b:43:89:
         c2:7d:7e:75:3a:90:27:4a:ad:2a:f7:01:32:a4:dc:e3:f9:f7:
         a0:81:fd:69:28:42:0c:3e:3e:4f:77:4a:8e:6d:6a:2f:f5:b5:
         73:00:79:7a:e0:73:0e:22:af:d2:b5:03:ae:c3:5a:a4:0c:d1:
         67:4c:cc:6d:85:d0:a6:0d:b5:89:e2:83:46:75:8f:ef:69:2d:
         d0:c9:f2:41:15:9f:69:bb:c2:8b:28:43:ec:3a:55:1a:84:be:
         38:85:52:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:27:43 2026 by rpki-client