Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08765d1b-0666-44f8-ba33-732d7e392300.roa
File:                     08765d1b-0666-44f8-ba33-732d7e392300.roa (raw, json)
Hash identifier:          JpoMwtQMM9UXDvbGLNvzWQa1BwJIO6PtzUCY4BKS9/E=
Subject key identifier:   38:B0:14:5B:E1:1D:47:45:58:19:63:E0:48:A2:E8:7F:26:21:8A:18
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4C2F1CC82CEC8E87FBF7A673FD77ED1FB1D97CEB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08765d1b-0666-44f8-ba33-732d7e392300.roa
Signing time:             Mon 12 Oct 2026 00:10:11 +0000
ROA not before:           Mon 12 Oct 2026 00:10:11 +0000
ROA not after:            Sun 10 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        184.73.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2f:1c:c8:2c:ec:8e:87:fb:f7:a6:73:fd:77:ed:1f:b1:d9:7c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 12 00:10:11 2026 GMT
            Not After : Jan 10 23:59:59 2027 GMT
        Subject: serialNumber=81e77619ef52d4422ba76f9efe49d6e90f141bc3e12414d962c84d975ba8c68b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bf:af:7c:2b:4e:35:2e:e9:ab:74:7e:01:da:
                    a2:2b:cb:06:d5:91:77:7e:6d:86:29:90:39:83:08:
                    b7:bd:ed:28:ca:77:51:ab:aa:ed:c6:e7:72:20:cd:
                    b0:54:98:7e:f9:32:e4:96:f4:1c:09:c0:31:5e:15:
                    a0:46:75:c9:c3:6b:c0:9d:c4:3b:cf:be:66:95:6a:
                    f8:05:de:6c:e3:38:bd:52:ed:ab:a9:30:1c:fd:53:
                    35:07:0a:18:af:47:c9:bb:d6:cf:63:87:ee:89:49:
                    11:08:39:f7:7f:0a:69:70:e7:98:1a:35:d9:ba:ad:
                    e9:74:b1:03:05:ef:a0:a4:d8:f9:52:b2:cc:02:65:
                    79:28:ec:4c:92:82:d6:9b:dd:37:52:0b:b3:a5:32:
                    33:67:6f:23:f2:f5:28:a2:ac:63:96:84:2d:2d:37:
                    4b:01:e4:07:59:0c:11:1d:84:94:35:fa:e3:f2:8c:
                    4c:ba:31:c5:9f:39:0d:0d:2e:7b:0d:d0:eb:b6:f5:
                    33:03:d8:a1:19:36:d6:a4:6f:2e:dc:90:05:6d:12:
                    d3:58:2f:80:ed:86:30:e5:51:8d:88:f0:87:69:ff:
                    da:7f:08:36:7e:3e:5a:72:fa:6f:76:11:d6:94:6e:
                    0e:cb:4e:b5:ab:a9:58:87:61:e3:cb:f1:ba:c2:57:
                    d0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B0:14:5B:E1:1D:47:45:58:19:63:E0:48:A2:E8:7F:26:21:8A:18
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08765d1b-0666-44f8-ba33-732d7e392300.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.73.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ad:23:4d:f8:57:c5:e5:d9:26:a0:69:bb:2c:7a:b5:c8:2c:35:
         43:d5:66:94:bb:a0:2e:3e:b6:a9:88:1b:0b:8c:4d:98:25:09:
         e3:31:96:51:99:c8:7c:1d:e5:c9:43:ca:d1:c5:fa:ba:64:87:
         9a:b7:2a:d6:37:16:b5:63:fa:96:8e:84:6c:b0:c8:c9:96:ca:
         83:3e:ff:58:82:64:0f:dc:56:41:d0:70:00:e4:1d:f3:ee:52:
         ed:ac:89:00:4d:c4:a8:87:12:2c:6e:83:68:47:64:cc:20:23:
         76:7a:df:31:57:6e:7f:0a:e8:56:2b:35:83:16:69:71:c4:ff:
         96:b2:ac:b0:41:61:15:0c:2a:59:65:a5:c1:0f:b4:d0:ad:64:
         2d:85:3a:1a:9a:2a:c5:01:32:e1:dc:10:af:d7:7b:35:be:bc:
         05:9d:63:3c:52:61:fb:75:91:bb:18:9a:8a:6a:d3:a3:3d:97:
         1e:43:2a:12:68:b2:2d:89:95:d1:75:4e:7c:b8:93:04:87:41:
         11:32:da:84:64:43:3d:a2:52:a5:4a:2f:b3:8a:b1:52:ff:b3:
         9c:3a:27:70:d1:fd:c1:f9:15:bc:b7:41:12:03:a8:96:73:12:
         6e:73:64:30:7d:67:c3:c8:e4:09:87:2f:34:20:9c:e0:98:dd:
         ec:e8:ef:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 16:18:20 2026 by rpki-client