Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fbcb60b-a5ea-46f5-9918-7ad443253fcf.roa
File:                     0fbcb60b-a5ea-46f5-9918-7ad443253fcf.roa (raw, json)
Hash identifier:          5+8Y56Cv7nPlYMZI0v+OLNPXa3aghvySzIz/g1Chfw0=
Subject key identifier:   C3:92:A7:11:27:C7:9F:C8:7C:4A:6C:8E:C7:C3:16:9D:CA:02:15:14
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       053486C659EC8C1554470E9D898FA42B1FFE358F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fbcb60b-a5ea-46f5-9918-7ad443253fcf.roa
Signing time:             Thu 22 Oct 2026 00:50:42 +0000
ROA not before:           Thu 22 Oct 2026 00:50:42 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        107.160.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:34:86:c6:59:ec:8c:15:54:47:0e:9d:89:8f:a4:2b:1f:fe:35:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 00:50:42 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=c67e1c2b1ea0adc8372d3bfb015082b7ad31b4755d4bdd68ed895d5a2a2a7b0f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4a:85:f8:0e:83:86:68:19:49:5e:a8:47:58:
                    58:4a:a4:8b:07:76:07:62:43:73:3f:87:eb:9b:1d:
                    4d:ba:23:8c:87:1c:92:be:b5:78:64:6f:b0:5b:02:
                    79:19:22:1d:2c:41:04:18:d7:53:2c:80:cd:5d:7e:
                    66:24:45:ff:eb:a6:f4:61:64:3c:6f:de:aa:84:a0:
                    9f:ba:a6:af:1f:07:53:17:0a:21:34:27:c0:e9:57:
                    d9:01:55:49:c8:3b:7d:fc:c2:ca:b3:35:a2:60:a0:
                    6b:19:19:ac:67:d7:7f:0d:4a:14:24:c0:cc:93:d5:
                    4b:44:d5:fa:83:c6:67:75:f6:4c:58:82:e2:88:96:
                    56:e5:21:f6:1b:17:93:3d:48:65:e1:8b:38:2d:7c:
                    64:fa:2f:e6:ba:74:b8:fe:e2:c9:49:95:21:a4:6c:
                    83:6e:b6:ab:16:ef:de:78:7f:f1:16:d5:63:05:6b:
                    9b:60:e9:ed:35:e7:e0:60:f4:17:d5:62:54:58:d8:
                    a7:2a:6e:da:4e:a8:4f:6d:9a:ae:c1:4c:eb:24:6e:
                    14:81:b9:cd:20:80:4a:de:6f:67:d8:3a:4d:5a:67:
                    5a:90:f3:c0:9a:01:bd:1d:c9:6f:de:43:f5:9b:1f:
                    de:34:66:1e:79:bf:3b:32:70:1b:53:ad:a6:44:b3:
                    be:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:92:A7:11:27:C7:9F:C8:7C:4A:6C:8E:C7:C3:16:9D:CA:02:15:14
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fbcb60b-a5ea-46f5-9918-7ad443253fcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.160.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8b:1b:c2:40:8f:49:ec:9b:8b:b8:83:6f:b9:08:9f:a0:63:e0:
         45:ad:01:19:f4:c4:d0:51:61:2b:4f:8e:55:e7:33:a8:4f:d6:
         23:2b:aa:e9:9c:5b:02:f7:c5:a7:39:c7:d5:69:fa:2a:1c:91:
         dc:4c:96:e3:23:fa:c3:37:f4:b2:0a:78:93:58:ad:8a:37:4a:
         96:cd:e2:9e:5d:62:bb:0a:9b:35:24:30:ef:c7:9e:16:d5:b6:
         c7:b9:9e:32:f4:db:63:21:f8:bb:ed:b9:78:1b:7c:0b:d7:09:
         31:f6:21:e0:aa:bd:7d:46:bc:83:f9:71:e7:f4:cf:dc:60:6c:
         80:6c:bf:be:9a:27:da:cb:d6:4e:39:4d:a7:77:cf:dc:c9:7f:
         ce:fa:9c:50:c3:04:e0:1d:9f:ce:0b:fe:42:08:da:f0:a6:f5:
         73:49:a0:11:9c:d6:50:0c:97:cd:2c:80:c9:51:37:2a:60:de:
         7d:90:ce:29:fa:94:d9:b0:ee:ff:03:83:ec:96:0a:46:23:ea:
         49:ff:fe:93:4c:e6:c4:e6:25:34:8a:c8:bc:f5:dd:f3:ad:31:
         9e:5d:16:ee:71:83:51:2f:ea:7d:1e:0d:08:4c:79:9f:39:52:
         29:f7:30:04:56:7f:32:ee:9b:16:57:52:45:c6:91:6d:75:a9:
         3a:5c:25:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:03:30 2026 by rpki-client