Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22e92542-93d6-4907-993a-3fe0fd53c8b7.roa
File:                     22e92542-93d6-4907-993a-3fe0fd53c8b7.roa (raw, json)
Hash identifier:          mIe0GeABHk0HLyeKRsBweQHhaZqOR8wU5H3ZadsTPt4=
Subject key identifier:   E7:F9:DD:A3:49:BC:8F:26:BF:B8:CF:C0:30:61:F7:04:D0:D7:DA:0B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       01CBF0A7F2259540C3858D98E42D900A3741261C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22e92542-93d6-4907-993a-3fe0fd53c8b7.roa
Signing time:             Sat 22 Aug 2026 00:00:02 +0000
ROA not before:           Sat 22 Aug 2026 00:00:02 +0000
ROA not after:            Fri 20 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        63.185.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:cb:f0:a7:f2:25:95:40:c3:85:8d:98:e4:2d:90:0a:37:41:26:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 22 00:00:02 2026 GMT
            Not After : Nov 20 23:59:59 2026 GMT
        Subject: serialNumber=e9fa37496a0445a0e6feb0035d828e67761d197a61270426ff4ef2f9bb60c175, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:29:56:7c:21:0e:3d:31:b0:a7:78:8e:5b:80:
                    5c:41:aa:99:c1:6a:b5:42:78:7f:3c:90:d1:f7:3e:
                    2f:ba:8f:ca:fe:41:ac:d1:34:68:37:96:ca:4a:4c:
                    85:f9:c1:d2:7e:b7:f6:cf:40:86:05:20:12:92:e0:
                    0a:c7:cf:5c:36:79:f2:0f:c6:6d:76:6a:8b:1a:ff:
                    b3:60:4d:57:9f:40:56:79:9a:f8:36:51:fd:52:cc:
                    50:87:93:fc:99:14:af:2a:3a:86:87:e2:87:31:a5:
                    2a:93:70:24:07:66:dc:1c:d4:ca:0a:61:12:75:c7:
                    57:4d:4f:92:16:2d:5b:9c:fd:63:f4:06:05:a5:35:
                    98:7a:a7:e8:9d:64:5c:1a:c1:43:e2:dc:97:a8:ab:
                    ed:51:1d:62:a5:99:57:ac:82:58:80:2f:29:f7:dc:
                    98:1c:83:41:f4:66:ff:86:31:92:76:ae:c1:d5:1b:
                    9a:83:ba:6c:96:e1:02:55:85:d2:70:95:ec:9e:db:
                    d0:da:4c:09:c5:1b:7a:06:6c:1d:20:c5:83:6b:42:
                    26:e8:5b:37:ad:14:c5:56:dc:99:4e:26:c1:ac:83:
                    11:49:9f:10:f7:2f:2a:15:8d:ae:ac:0e:60:b7:00:
                    dc:dd:b4:c9:cf:16:7c:26:9b:a4:31:69:fc:e3:a5:
                    5d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F9:DD:A3:49:BC:8F:26:BF:B8:CF:C0:30:61:F7:04:D0:D7:DA:0B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22e92542-93d6-4907-993a-3fe0fd53c8b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.185.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:dd:71:cd:be:c8:b9:90:5e:c2:ab:cd:ea:fb:db:ef:3a:9a:
         e9:b8:39:13:f9:46:f9:5a:0f:5c:7a:c6:a5:c5:9a:1d:4a:b4:
         a3:21:3f:f9:7d:15:6e:fd:59:b1:1e:94:dc:f7:81:c4:ea:6b:
         13:5d:c7:30:d8:e5:9f:a3:9c:14:1e:2a:87:59:20:f6:58:e2:
         10:61:40:15:39:56:c9:e5:f4:e1:6b:1a:94:38:fb:d9:e6:db:
         21:a5:48:16:06:af:13:24:0f:9f:87:a0:c3:d6:40:f9:3f:f6:
         0d:64:2f:9e:b6:4a:a3:7d:40:f4:c8:44:9b:cf:b2:f9:01:f7:
         72:ab:c3:26:e5:49:6f:b8:29:3b:07:20:76:02:2b:1e:e9:47:
         67:06:d0:f3:12:19:81:a9:3d:50:bd:6b:98:7a:7b:5c:7d:6c:
         f5:c9:e5:de:fa:e7:f9:5d:e3:67:aa:ff:8e:c1:14:aa:52:c0:
         51:2e:fe:04:fd:5f:41:ab:a4:fe:09:87:6d:6a:4a:0b:90:c1:
         fc:af:bc:eb:05:15:11:87:39:6c:87:4f:3d:da:3f:93:e3:78:
         ae:4a:85:ed:47:3b:a8:08:20:52:4f:66:44:99:7f:1d:66:84:
         36:77:49:71:f4:f5:0c:73:73:9d:29:22:d1:eb:6e:df:31:0e:
         d1:5f:d8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:23:15 2026 by rpki-client