Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/268e47e6-0e83-4333-8c14-c7c8d95614d8.roa
File:                     268e47e6-0e83-4333-8c14-c7c8d95614d8.roa (raw, json)
Hash identifier:          OqgoJznjuOyoxg4X9gQEoOQmVZHAeUrbtTxuMkQRK7Q=
Subject key identifier:   88:0E:54:53:21:94:EB:D3:3B:7C:A1:DD:F5:6C:74:FF:65:A9:35:CE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B0C9F65753EC4F352FDC53FC129ED848F9BD46A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/268e47e6-0e83-4333-8c14-c7c8d95614d8.roa
Signing time:             Mon 03 Aug 2026 01:40:48 +0000
ROA not before:           Mon 03 Aug 2026 01:40:48 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        114.56.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:0c:9f:65:75:3e:c4:f3:52:fd:c5:3f:c1:29:ed:84:8f:9b:d4:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 01:40:48 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=87a5d44be3b37b7a2456f1bab89f577e074950692bd5a06f9089db499c3d7c84, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3d:d1:b9:42:36:e6:0e:5a:70:58:aa:26:0b:
                    90:dc:c9:23:9f:e5:ea:d6:35:9a:c6:67:11:d9:f4:
                    1e:ad:1d:50:8d:6e:53:e1:40:52:b3:e1:60:57:9f:
                    7a:d2:97:3d:61:d1:36:71:ab:99:5f:1c:95:00:5e:
                    4e:32:5e:01:c8:53:23:47:ab:84:c3:fc:69:67:df:
                    1d:4b:d4:d1:f2:0c:8b:08:50:51:aa:08:a5:17:36:
                    92:11:81:91:e9:fe:36:9b:13:79:0b:69:53:c9:ac:
                    95:a2:35:9a:63:bc:6c:ff:98:c8:f2:79:46:b1:b9:
                    9e:c7:52:a9:13:41:48:69:59:bb:2a:f3:46:af:f3:
                    4e:55:d7:78:5f:01:79:b1:72:07:52:9d:72:b5:6e:
                    54:c6:3a:9e:57:f1:63:33:a0:60:fb:a6:a9:4a:9a:
                    98:40:49:fe:ff:be:e4:c9:38:e1:7b:d0:96:f0:66:
                    3c:73:a1:8a:e6:b7:33:0b:ed:2b:a7:2e:e8:83:93:
                    8b:2b:a7:55:7a:71:f4:66:16:11:04:f9:0e:be:89:
                    cb:08:6e:ee:1e:e2:f0:85:eb:e4:61:ef:da:c6:31:
                    a1:5c:c4:bb:3e:03:bd:2b:c6:d7:61:55:38:49:c9:
                    8e:cd:06:8c:f2:28:d0:44:ea:f0:2c:ae:00:e2:b8:
                    26:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0E:54:53:21:94:EB:D3:3B:7C:A1:DD:F5:6C:74:FF:65:A9:35:CE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/268e47e6-0e83-4333-8c14-c7c8d95614d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.56.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:b1:29:74:b0:a2:6a:69:40:74:27:5a:98:29:9f:d1:b2:78:
         9b:b9:8e:0a:bd:c0:7c:35:3d:e3:50:d6:df:d0:69:13:c9:d0:
         9d:48:af:da:f8:ed:dd:ea:08:75:d3:71:84:74:99:a2:51:d4:
         5d:cc:9f:c9:50:bb:f2:a4:24:e9:a2:b6:64:a7:95:85:c2:a6:
         86:de:e8:68:f7:fd:8e:2b:fa:16:b2:9a:7e:30:d9:b7:9b:12:
         c8:b1:bc:ed:de:5e:e2:db:6b:ee:5c:f5:c8:19:d0:e6:9c:f8:
         e5:a0:20:53:2a:de:77:36:18:ca:45:99:e0:d3:16:17:d6:1b:
         f8:5b:4d:8a:d1:7d:d8:f6:10:51:ef:d5:2a:4a:46:9a:d3:f2:
         7b:7d:69:2f:96:95:c1:9e:20:53:d5:ab:09:ad:b4:06:90:9e:
         1f:1b:2a:f0:18:81:eb:59:f8:87:c6:47:b9:78:92:df:8d:ad:
         a4:73:ae:a2:af:7f:87:2f:05:82:c5:df:45:8e:da:82:d4:1f:
         0c:0a:4f:98:52:8b:ec:20:8a:e0:9c:49:a5:59:f9:33:38:b1:
         d5:d5:ea:45:6c:fc:f9:2d:1c:9b:3c:ba:32:f1:2b:22:a4:6c:
         8e:2e:5f:ce:8b:6d:34:92:f3:fc:88:2e:42:f8:d4:26:93:21:
         ba:72:f3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:41:32 2026 by rpki-client