Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/110221ea-3727-4ae8-a95a-c96075931bf2.roa
File:                     110221ea-3727-4ae8-a95a-c96075931bf2.roa (raw, json)
Hash identifier:          Gu4f7oqbe3Wv3xDu5TmuWnOCD0qcUL5UFz9+qV8AB0E=
Subject key identifier:   28:2A:76:58:0F:36:0A:91:CA:DE:0F:FB:C1:59:EF:33:B3:AF:34:26
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6C29E024B4ECCD913EB307AA87BEA833CCE4AE62
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/110221ea-3727-4ae8-a95a-c96075931bf2.roa
Signing time:             Mon 12 Oct 2026 00:11:31 +0000
ROA not before:           Mon 12 Oct 2026 00:11:31 +0000
ROA not after:            Sun 10 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        56.231.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:29:e0:24:b4:ec:cd:91:3e:b3:07:aa:87:be:a8:33:cc:e4:ae:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 12 00:11:31 2026 GMT
            Not After : Jan 10 23:59:59 2027 GMT
        Subject: serialNumber=3a75f9b457df57b495055c48ea277fe577bbbb0e718f224e805eefda8b996d3c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:00:d5:0b:8e:d2:e8:74:7f:b7:e4:2b:f9:4c:
                    57:1c:91:6e:bc:38:2e:76:d4:4a:7e:c7:c7:3f:c7:
                    e6:41:95:bd:43:01:0a:b0:a7:f3:08:e8:ae:cd:b1:
                    a2:08:af:04:66:ad:08:3a:a6:cf:c3:30:af:c0:da:
                    d6:1a:8e:d5:b6:de:3d:ea:b3:51:f8:e8:7b:2d:59:
                    3b:80:2e:5e:79:2b:33:ff:42:07:8d:11:54:76:64:
                    21:cf:9f:74:58:5d:15:52:1b:cc:f9:d2:ab:5a:21:
                    d6:79:ee:22:45:26:db:7e:c2:8d:22:be:f0:60:2c:
                    e4:ef:2a:25:5f:4e:ec:ae:2b:82:fd:37:a7:1c:3e:
                    e1:11:91:c7:4a:d6:e3:94:7d:6b:0f:e3:cd:0f:40:
                    b7:9d:9f:99:00:8d:8a:b1:b1:1f:11:e3:c6:35:df:
                    f2:25:1d:cb:00:3c:5f:d1:3d:ce:34:82:e3:1a:82:
                    34:d5:24:3f:18:60:2b:c2:fc:eb:17:42:7e:00:51:
                    6b:75:6b:28:7c:dd:b0:e5:b7:30:07:1a:cc:fc:dd:
                    1d:a4:c2:3d:d4:2d:2f:df:36:a2:8f:b0:a6:d8:e6:
                    9f:44:7a:48:3e:97:e7:3d:36:89:cc:0f:dc:fb:95:
                    50:20:7c:0e:85:5b:85:78:b0:7e:d7:ea:5c:43:e1:
                    15:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2A:76:58:0F:36:0A:91:CA:DE:0F:FB:C1:59:EF:33:B3:AF:34:26
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/110221ea-3727-4ae8-a95a-c96075931bf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.231.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         be:01:a0:0c:db:ec:90:e8:7a:e4:01:7b:9a:cd:5c:6e:3d:62:
         e6:89:83:73:bf:f7:34:ba:89:e9:11:e4:0d:7c:c6:08:88:b7:
         46:06:11:2e:3f:0c:23:13:fb:32:93:f2:47:a4:8f:a1:f9:f6:
         0f:9e:a3:09:d7:d0:c4:c2:85:9e:48:05:29:df:90:c5:32:5a:
         01:d5:84:87:f5:2d:1d:c2:81:27:b9:d3:9a:06:20:c3:86:9c:
         1c:21:b6:da:c0:7a:80:c3:4c:e9:16:8d:b1:e9:74:22:47:55:
         38:7c:40:e4:4f:e2:6f:86:51:cb:1f:f8:86:98:f6:13:08:b7:
         9b:3c:f9:1d:c9:3f:44:fc:ea:e8:13:97:b2:1c:5d:93:57:d5:
         64:1f:e8:4f:d1:25:50:4b:fa:b5:55:dd:58:e6:02:19:99:20:
         92:4f:43:7a:48:cf:71:31:4f:96:7d:69:35:81:39:7c:21:48:
         1b:b5:39:45:86:e8:f1:4c:61:ba:92:c2:0d:ae:e3:87:0d:89:
         57:d6:7c:71:27:01:77:06:03:f5:25:82:93:90:17:76:33:d1:
         97:d1:6e:d0:9f:0c:81:a0:1c:cb:46:63:06:64:72:d7:dd:16:
         60:16:74:d5:51:93:d1:8c:1c:47:c6:81:5b:a6:37:27:97:2a:
         64:9a:37:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 19:22:00 2026 by rpki-client