Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fb4995f-b5c0-47e5-8ac3-6d0232222f7c.roa
File:                     0fb4995f-b5c0-47e5-8ac3-6d0232222f7c.roa (raw, json)
Hash identifier:          NNZw6Ckv6RSyUyyK4ngTvX9wJxnadM1xezjWg74ubao=
Subject key identifier:   AB:61:51:B5:20:71:96:62:BA:1F:BE:71:23:E9:9D:24:C3:41:DA:77
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3A6F5DC010A25EFE18C1139B5CC751E83888C324
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fb4995f-b5c0-47e5-8ac3-6d0232222f7c.roa
Signing time:             Fri 23 Oct 2026 01:31:16 +0000
ROA not before:           Fri 23 Oct 2026 01:31:16 +0000
ROA not after:            Thu 21 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        56.106.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6f:5d:c0:10:a2:5e:fe:18:c1:13:9b:5c:c7:51:e8:38:88:c3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 23 01:31:16 2026 GMT
            Not After : Jan 21 23:59:59 2027 GMT
        Subject: serialNumber=7d8fb56abd42cfdf7849842c277ee7d40a286ad653421dcd4e16525eee3845b1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:80:8d:82:e0:d4:95:a0:8f:8d:b2:5d:9a:d5:
                    aa:5b:37:ca:a8:9b:af:a5:e5:fb:00:4c:8b:e9:83:
                    4b:05:08:4c:b0:46:82:67:76:84:97:6d:9f:a7:d9:
                    09:0e:a6:e2:e8:77:7c:13:25:b1:82:8c:04:2b:fc:
                    57:0a:f8:7c:ee:ac:57:77:57:0e:e3:02:1a:40:60:
                    25:fb:35:e4:8f:82:b5:e6:c7:1e:ba:af:6a:a9:80:
                    81:fd:a6:aa:e2:d6:1d:e0:01:e4:36:06:6c:25:a9:
                    e5:2c:63:06:90:c0:ad:d3:65:f4:3c:b7:a2:74:48:
                    fe:18:51:58:f1:4b:60:4a:f8:0b:d5:d4:2d:b9:cd:
                    8f:e9:8f:11:c9:d8:3e:dc:b7:36:8c:c2:bf:90:38:
                    ba:f7:fc:37:b9:95:ce:a1:1c:27:2c:d1:7f:04:9a:
                    79:ad:8f:d8:24:8d:ca:63:53:cb:2e:dc:dd:4a:7b:
                    26:45:35:67:d7:b2:7c:10:57:4b:d2:00:05:80:77:
                    eb:29:ff:4a:8e:49:97:6a:14:1c:1d:fc:0b:53:5f:
                    46:aa:fd:78:f6:61:be:8c:e2:c6:d2:ed:3e:bc:2c:
                    fe:5d:9a:4d:ba:08:ff:3f:9a:86:41:6a:38:fd:64:
                    8d:09:5f:20:7e:8f:a9:fa:5b:02:a1:ed:41:53:b4:
                    f3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:61:51:B5:20:71:96:62:BA:1F:BE:71:23:E9:9D:24:C3:41:DA:77
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fb4995f-b5c0-47e5-8ac3-6d0232222f7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.106.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0a:b5:f6:ba:6b:61:9f:5a:73:4b:18:8d:b3:4c:67:a0:96:c2:
         eb:43:26:8e:1c:4f:41:f5:9e:b6:b0:99:ec:64:62:0b:57:f7:
         ea:53:25:ab:28:48:1b:e5:73:e0:db:e1:a9:d6:cd:f8:28:3c:
         3c:6d:f0:68:c4:a6:76:a9:7c:f3:57:d4:1d:05:a6:f9:93:f2:
         64:82:51:a1:4a:ae:1f:77:cb:45:18:68:e0:52:09:8a:f8:cb:
         12:cf:0c:99:24:49:df:eb:3f:f1:a5:a4:3f:ab:e2:41:d0:78:
         ed:f0:ce:16:5a:5e:60:52:fb:b6:7a:be:3e:f2:22:0b:c2:7e:
         d3:c3:9c:41:12:83:0e:43:e8:ba:3f:2d:cb:fe:d6:6d:c4:ea:
         64:b7:af:8f:ef:11:70:c3:a5:4d:8a:6e:5a:09:1a:5f:00:67:
         80:c3:a6:79:a8:71:4f:9a:b1:ca:8a:31:3a:2b:99:e1:32:ab:
         ff:92:a7:11:06:b5:fa:41:bd:2f:4c:44:d7:c7:ff:63:75:d6:
         71:8f:ee:42:0b:73:6f:fd:7a:d2:1e:33:9d:c3:d6:51:3d:59:
         06:11:1a:48:50:a8:4e:9d:34:4a:a2:2d:0f:db:00:b2:85:8b:
         85:84:58:fe:5d:b0:de:ec:59:a4:1b:44:fc:58:8a:d8:f8:9c:
         1f:25:81:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:31:05 2026 by rpki-client