Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27c3395d-0d4e-4291-9ede-37f0981c2dfb.roa
File:                     27c3395d-0d4e-4291-9ede-37f0981c2dfb.roa (raw, json)
Hash identifier:          hVHg8S74UVBs5Vd2+MqqPwsCtgAzPuwNEbEN1eG4hvg=
Subject key identifier:   32:73:1A:AA:3B:EB:0B:93:39:AE:5F:8D:2B:94:F5:C1:67:E7:1D:F0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       05FA1B98D9D6C96DC0BF3F80A90470AFFE5EB47F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27c3395d-0d4e-4291-9ede-37f0981c2dfb.roa
Signing time:             Mon 12 Oct 2026 00:20:03 +0000
ROA not before:           Mon 12 Oct 2026 00:20:03 +0000
ROA not after:            Sun 10 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        136.18.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:fa:1b:98:d9:d6:c9:6d:c0:bf:3f:80:a9:04:70:af:fe:5e:b4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 12 00:20:03 2026 GMT
            Not After : Jan 10 23:59:59 2027 GMT
        Subject: serialNumber=e6b321f493bfa4cfe0a633e86965d2f960d16080e1a1a975d7c56a4e0748c9c4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:33:fd:2a:4d:19:ec:95:82:dd:38:09:d8:e1:
                    cb:51:9e:22:35:ed:2d:10:f3:f6:9b:72:f5:39:5a:
                    bf:45:86:61:90:f5:75:26:9d:30:57:60:9f:37:92:
                    55:52:e8:a7:fc:49:f8:7f:d3:42:c6:60:dc:ef:63:
                    d7:88:dd:a3:c7:8b:8d:b0:74:ff:ef:10:7e:a9:93:
                    0a:ee:81:80:69:c4:02:6c:b7:06:e4:ff:bb:f2:cb:
                    9f:5c:0f:bc:dc:0c:61:e4:45:78:af:91:6d:ce:70:
                    2a:aa:ad:39:67:4c:84:68:ad:db:53:46:6e:c4:c7:
                    1e:a0:81:82:e8:80:db:9b:4c:07:81:0b:ca:1c:c0:
                    c2:33:3d:24:b5:45:d1:db:9d:fd:78:40:69:8d:9d:
                    27:e8:ce:72:ea:5b:22:3c:e1:a7:c4:bc:31:71:54:
                    ad:ca:6e:ff:f8:0c:b4:6e:11:e3:d1:ee:30:f8:92:
                    b2:99:e3:0f:5e:51:1b:ae:49:e1:6a:54:a5:06:26:
                    26:45:75:41:e4:d6:7d:51:6f:9b:34:24:c7:3b:c6:
                    ab:10:a1:10:09:73:1c:e3:58:a7:d0:97:6b:d4:ad:
                    ce:60:38:71:4b:75:e2:6a:56:a8:ec:5c:82:d8:e0:
                    c2:ab:12:e1:9d:ab:3f:70:a6:11:1d:d3:16:bf:e2:
                    1f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:73:1A:AA:3B:EB:0B:93:39:AE:5F:8D:2B:94:F5:C1:67:E7:1D:F0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27c3395d-0d4e-4291-9ede-37f0981c2dfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:52:7f:fb:73:d7:ab:13:49:2b:70:8d:62:ce:b0:d4:39:ab:
         d9:4c:ea:89:8f:fb:ad:44:4b:e1:15:eb:f9:a4:59:04:91:b3:
         1f:d4:bc:38:77:53:c8:99:ea:88:06:ea:26:2f:5c:ca:a3:3e:
         d1:17:48:1b:22:e6:31:01:a4:65:c8:93:ac:17:7a:38:13:96:
         07:d8:8a:c7:c2:bb:ad:c1:9d:d7:c2:99:7a:30:67:61:16:79:
         28:c9:23:2a:c0:ef:d8:38:72:e3:a9:f0:fb:36:25:5d:1f:0b:
         80:70:3b:7b:7d:0e:30:18:71:ca:e9:06:b5:55:e2:90:e4:a2:
         96:12:52:d3:8b:7a:c8:13:ec:e0:11:5f:dd:8a:38:0f:95:04:
         0b:06:38:8f:7e:81:76:0f:90:d6:5d:c5:17:3b:13:c6:d3:59:
         19:5d:5d:cd:e0:e3:ed:6c:9b:22:10:28:76:61:0c:ae:1e:d8:
         48:60:51:fe:c9:a9:a6:58:2e:46:ba:64:f1:f7:f6:94:63:d7:
         2f:d8:a2:44:63:3c:3e:5b:f4:3c:02:a7:02:0d:85:42:37:5a:
         f1:47:79:36:e0:ac:2b:06:ac:89:94:0e:26:ea:0f:fb:94:94:
         ca:86:07:01:46:0e:04:79:ef:59:8f:9a:5f:b8:15:41:c8:f3:
         b0:30:31:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 01:26:00 2026 by rpki-client