Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/065ce18a-b778-4c3d-b667-f9a997960b12.roa
File:                     065ce18a-b778-4c3d-b667-f9a997960b12.roa (raw, json)
Hash identifier:          yXkjQNLWAamkxHLr+dhH2fSCtmWurMq4NXXDb+rWb7I=
Subject key identifier:   DC:91:00:91:11:EA:FD:CA:6A:7B:16:38:C2:B4:5B:F9:65:FD:46:A5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5A1E536C2B171A6E8F08650DC337CD91DF2AFBDB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/065ce18a-b778-4c3d-b667-f9a997960b12.roa
Signing time:             Tue 27 Oct 2026 00:02:23 +0000
ROA not before:           Tue 27 Oct 2026 00:02:23 +0000
ROA not after:            Mon 25 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        15.143.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1e:53:6c:2b:17:1a:6e:8f:08:65:0d:c3:37:cd:91:df:2a:fb:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 27 00:02:23 2026 GMT
            Not After : Jan 25 23:59:59 2027 GMT
        Subject: serialNumber=1c8470bb07da2464eb45e13fccdeb5fed80dbe6500620d7521025be95d90a067, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:52:9b:7e:b7:2f:8d:63:63:fc:62:1e:a5:04:
                    94:e4:b2:d3:11:40:11:79:b2:16:9d:d6:b2:49:41:
                    b0:bf:63:2a:90:f2:12:0c:76:a6:56:86:9a:d2:d1:
                    fa:f8:60:b5:c5:ce:4d:4f:27:38:c3:48:a8:99:be:
                    b7:d0:41:f0:2d:3b:ee:e4:5a:81:f7:c4:8e:18:60:
                    c0:d5:28:b0:db:d9:ff:34:1a:42:b3:ba:01:38:8f:
                    56:c6:a0:72:44:43:bb:93:61:36:3f:64:bd:eb:f1:
                    3d:8b:55:ac:23:61:1f:bf:98:62:92:f3:9d:46:af:
                    52:0f:5d:b9:df:35:33:17:2c:68:3d:a3:0d:63:7b:
                    54:da:2f:10:f7:25:ff:bd:de:c2:7c:4b:81:70:d2:
                    64:2a:ba:5b:13:af:2d:b8:06:84:9d:5a:25:46:1c:
                    29:fd:36:33:53:5d:74:85:9c:ee:f5:32:6e:67:e5:
                    a4:bd:d0:a2:85:d3:e5:60:55:99:83:46:f3:53:23:
                    b1:44:ec:69:05:8f:d2:f8:09:67:39:60:86:35:14:
                    ec:f0:eb:a4:e9:bf:ed:14:3c:e8:06:70:ef:fc:b2:
                    32:aa:70:f3:a3:18:b6:db:61:c5:78:ce:81:49:d1:
                    a7:c3:4b:4a:e9:2f:84:75:d3:ed:0f:80:0b:c9:fb:
                    84:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:91:00:91:11:EA:FD:CA:6A:7B:16:38:C2:B4:5B:F9:65:FD:46:A5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/065ce18a-b778-4c3d-b667-f9a997960b12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.143.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         95:65:f8:7c:10:5d:ea:06:b0:d3:5a:a8:c6:da:52:62:d9:b1:
         32:bd:59:8b:59:31:8f:73:be:19:77:db:74:21:47:d6:d6:5e:
         eb:5c:f0:3b:61:d2:75:0b:fb:d8:09:ff:99:45:e6:16:f6:99:
         b8:d9:fb:7e:c8:29:a1:33:cd:18:6a:ec:4d:cf:e3:3c:88:45:
         4b:b5:91:53:e5:6d:7f:1a:e4:75:2b:de:6d:db:e0:90:22:dc:
         ca:b3:7a:77:5c:ec:35:fa:ea:06:3d:33:ca:c5:4a:e4:83:3a:
         e2:ee:35:c0:05:e9:7e:63:70:f7:84:ba:55:e7:14:cb:ad:46:
         c1:71:3b:c1:84:ef:eb:55:4c:2c:1f:0a:a9:bc:94:0b:ed:ee:
         08:40:40:f2:fc:d5:6a:c7:dc:39:45:21:d0:fd:31:37:0d:cd:
         20:ea:15:4f:52:b0:c3:11:73:13:2f:cb:85:2d:5a:3a:71:5d:
         04:7b:d8:22:9d:1f:9e:14:73:df:7c:b1:d1:3a:0a:57:82:d3:
         83:3c:0a:b6:2c:e2:7e:04:47:b6:23:11:37:7b:dc:d2:b6:20:
         9c:00:f8:5c:84:bb:77:dd:da:b8:9b:3a:79:9e:a4:b2:d7:95:
         6a:c4:36:ca:00:43:03:6d:f7:07:f4:f3:bc:55:22:c6:b9:26:
         8e:45:44:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:18:57 2026 by rpki-client