Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0931a193-aeaa-490e-93ef-6edbd38669fd.roa
File:                     0931a193-aeaa-490e-93ef-6edbd38669fd.roa (raw, json)
Hash identifier:          lyJCe9rPHUwczXL/Jhuzn2t2D7thqQBUy+/WNxOJMuA=
Subject key identifier:   C9:40:A1:79:B8:A1:37:E8:A1:25:B4:CD:F3:B7:6D:AE:33:6D:5E:A5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E9607468E7EA13AEC98F83E18C565A8BA598E56
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0931a193-aeaa-490e-93ef-6edbd38669fd.roa
Signing time:             Fri 30 Oct 2026 00:03:58 +0000
ROA not before:           Fri 30 Oct 2026 00:03:58 +0000
ROA not after:            Thu 28 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        16.106.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:96:07:46:8e:7e:a1:3a:ec:98:f8:3e:18:c5:65:a8:ba:59:8e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 30 00:03:58 2026 GMT
            Not After : Jan 28 23:59:59 2027 GMT
        Subject: serialNumber=bc5696ac670945f4cd38472800f96d683611316fdbd27da2c1c7e24102185f7c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:df:60:16:17:5e:7b:e1:e5:78:aa:70:de:6e:
                    08:be:e4:f2:5e:4a:a2:1b:c9:54:c4:9a:57:52:77:
                    bb:ff:e5:d5:48:05:82:44:dd:a2:32:ed:f1:37:4d:
                    eb:1d:0b:56:4b:67:1a:ec:e3:79:f1:bc:b1:d1:b4:
                    1a:35:b8:aa:1d:7b:2c:47:22:a2:27:40:9c:7f:7f:
                    33:4e:9e:4a:3e:65:44:7c:36:1e:9a:01:d5:59:a7:
                    32:0d:e4:64:a6:51:0f:4e:21:d0:b8:b3:a2:d9:f3:
                    c1:7c:67:e5:eb:74:b7:64:52:f6:6c:80:a7:14:d1:
                    02:2a:85:f2:c8:1f:1f:ee:04:f1:c5:aa:21:40:0c:
                    11:b4:05:c8:7f:0a:d0:e2:21:af:30:d6:9c:2e:55:
                    bf:d4:0a:a4:6b:69:66:1e:16:a8:6d:db:10:ad:63:
                    7b:0a:ee:fb:81:4a:5e:f6:64:14:f7:f7:ef:d3:0c:
                    84:27:3c:b0:77:e8:1a:3b:e3:8d:f6:9d:bd:ed:68:
                    fc:06:92:04:5a:ec:80:8d:5b:2a:72:93:b7:3f:19:
                    78:2e:93:e5:ca:cb:db:d1:f1:1d:b2:49:8a:a6:c3:
                    b2:4f:30:7a:8e:5f:1d:47:8f:53:ad:7a:c4:b6:be:
                    1c:3e:7a:ca:7a:8b:60:23:b8:43:ef:e1:a8:bd:b0:
                    46:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:40:A1:79:B8:A1:37:E8:A1:25:B4:CD:F3:B7:6D:AE:33:6D:5E:A5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0931a193-aeaa-490e-93ef-6edbd38669fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.106.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         d8:87:3f:6f:c5:ef:22:a4:bc:95:e5:fa:ea:9a:c3:79:b4:46:
         ff:a2:bc:40:82:39:37:d4:32:bc:39:42:40:35:b3:b6:d8:5a:
         ad:13:15:76:8a:07:12:53:ca:e0:a7:ce:4d:22:16:ce:46:14:
         54:2c:19:7a:12:5e:d8:0a:31:07:ef:0d:f5:1b:93:2c:41:85:
         ad:a7:10:ea:84:74:fd:1b:c2:51:29:1e:a9:b9:39:02:d4:4e:
         0e:26:86:c6:73:fe:95:9f:3c:f6:13:72:11:72:f2:9c:0c:ba:
         33:4c:c4:86:27:31:4a:84:45:94:26:72:b8:08:0f:d4:74:8c:
         aa:54:09:04:1e:73:de:52:dc:28:e0:b0:a0:50:34:4d:64:1c:
         08:38:a9:01:5c:24:f7:5e:a6:2f:b8:e3:25:eb:f3:8a:e8:11:
         92:6b:52:45:c1:82:8f:05:98:a8:8b:78:fc:4f:36:de:91:ec:
         1f:f5:29:71:34:28:a7:39:3a:85:a3:d0:8b:09:96:d6:06:80:
         59:92:9a:3c:03:74:57:18:32:64:0b:24:e9:d6:f5:b8:a1:3e:
         ea:c3:45:0b:44:1e:09:74:ed:e9:09:f9:2b:d4:14:07:4a:2f:
         e4:66:72:45:af:43:7e:cd:a5:c2:37:e1:9e:00:a7:d2:31:b1:
         a9:e2:5d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 18:48:40 2026 by rpki-client