Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18c5e828-21e1-417e-ac11-13a92ad7d891.roa
File:                     18c5e828-21e1-417e-ac11-13a92ad7d891.roa (raw, json)
Hash identifier:          MxGYxJqv22cj504VOhg1LiOeGy2s5Dfy31gbpHNT9J0=
Subject key identifier:   3C:9E:36:53:41:EF:16:36:29:E8:EF:C8:97:56:C0:C7:DB:52:A9:74
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       26487AD7372B2DD216F76752E8273B3B9ABBE82E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18c5e828-21e1-417e-ac11-13a92ad7d891.roa
Signing time:             Sun 18 Oct 2026 00:30:43 +0000
ROA not before:           Sun 18 Oct 2026 00:30:43 +0000
ROA not after:            Sat 16 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        24.110.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:48:7a:d7:37:2b:2d:d2:16:f7:67:52:e8:27:3b:3b:9a:bb:e8:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 00:30:43 2026 GMT
            Not After : Jan 16 23:59:59 2027 GMT
        Subject: serialNumber=24e91aca228a52b2fee9d4542ffc450ffa149e38d12f36b7037f118cb219582a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1f:ed:64:0c:66:ab:2f:61:95:2c:ec:fa:f0:
                    9f:82:a4:68:4d:28:50:b1:33:94:26:54:b5:7a:c3:
                    78:8c:95:a6:74:aa:0f:2f:e0:03:a4:1c:ad:78:c5:
                    e2:7f:dd:11:c8:41:b0:2c:72:84:fd:37:67:ba:50:
                    bf:62:e7:26:79:6f:2d:eb:8b:4e:e5:31:db:0b:ae:
                    20:40:4b:b6:10:98:ca:77:11:ac:42:a8:3e:fc:99:
                    23:ae:fa:02:56:bd:a8:e5:6f:1f:8a:12:d5:f8:10:
                    5d:97:ff:33:59:47:78:52:90:77:ae:ac:27:b9:38:
                    18:6e:17:dd:f3:ad:a5:96:60:54:cb:5d:f4:c7:10:
                    b7:86:2e:c3:47:1e:0c:1b:23:b1:05:28:4a:44:c9:
                    cc:39:88:47:9f:d8:a6:34:23:cd:bf:b4:85:12:e9:
                    8b:8c:51:19:f8:37:47:75:e7:43:ac:3e:dd:1d:e9:
                    9a:b4:d9:f3:f6:ed:ac:63:75:86:c9:34:3f:3a:8a:
                    23:31:c2:18:66:5d:03:3f:df:22:87:8e:75:41:ec:
                    55:3a:c6:34:28:5b:4a:9d:4e:e7:eb:da:1c:6e:46:
                    99:bb:0d:21:f2:eb:10:85:a2:7c:7b:20:ea:31:3a:
                    ac:e7:ae:55:9c:5b:9c:df:47:22:98:40:9c:b7:69:
                    54:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9E:36:53:41:EF:16:36:29:E8:EF:C8:97:56:C0:C7:DB:52:A9:74
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18c5e828-21e1-417e-ac11-13a92ad7d891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.110.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:1b:76:52:55:86:b0:d1:06:b9:ef:ee:14:c2:d6:c1:bf:8b:
         c4:94:80:7d:56:ea:80:7d:4a:fd:6e:8d:1c:f6:60:b9:12:4b:
         00:55:3a:97:be:17:e7:c5:e9:a6:b7:20:57:6d:7e:58:04:50:
         1e:5f:b5:f3:8f:b1:fa:62:08:02:ba:e8:64:2b:07:00:c8:1c:
         1c:ad:73:29:4b:12:f8:6b:3f:96:67:09:cf:d2:81:f0:f2:bb:
         28:df:55:1e:85:c2:e0:1b:e0:35:f4:40:79:c2:a6:82:e5:55:
         3a:31:3b:d8:81:82:f4:49:e3:f5:b6:1f:61:ed:05:d3:6e:dd:
         2b:53:58:94:93:1c:17:d0:32:75:41:22:8a:aa:a2:af:dc:89:
         ac:0f:d0:97:71:f3:c4:19:60:32:33:1d:28:9d:7e:35:af:38:
         c6:85:29:b4:da:88:db:d2:f7:f3:2a:5a:af:5d:a1:91:06:3d:
         cd:cf:ba:47:a7:47:32:32:de:8f:aa:6c:98:b8:3d:b7:88:ba:
         15:d5:49:1c:aa:56:f5:10:92:67:ab:cd:b5:b9:0f:b1:6d:d8:
         ab:0e:c8:76:bb:61:76:e5:14:2d:e3:74:ee:aa:78:0d:62:ef:
         17:a1:28:f9:9c:12:7a:31:81:3a:93:29:19:60:af:0a:79:89:
         36:a0:82:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:30:53 2026 by rpki-client