Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bfcc97c-d479-4b72-a9f4-ed3273267fc8.roa
File:                     2bfcc97c-d479-4b72-a9f4-ed3273267fc8.roa (raw, json)
Hash identifier:          dGtWA3n6gHlHhYSbVrPVRwpjdf4GbN9e14skDQxT9iM=
Subject key identifier:   68:F8:2B:5B:A3:C4:3B:B5:52:E6:C5:65:8D:7B:CF:A4:E7:59:69:97
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       746C1032B0E49BE6AD86932F3CC52F0AEA8AA091
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bfcc97c-d479-4b72-a9f4-ed3273267fc8.roa
Signing time:             Fri 16 Oct 2026 00:21:17 +0000
ROA not before:           Fri 16 Oct 2026 00:21:17 +0000
ROA not after:            Thu 14 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        32.192.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:6c:10:32:b0:e4:9b:e6:ad:86:93:2f:3c:c5:2f:0a:ea:8a:a0:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 16 00:21:17 2026 GMT
            Not After : Jan 14 23:59:59 2027 GMT
        Subject: serialNumber=7e0b9254ff17a95361247f34f622fef81acf3e81c8da87134e4628e614110f60, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e9:5a:69:4e:e9:c6:da:6f:02:14:ef:d5:f8:
                    33:2b:e5:3c:50:58:ab:c4:ba:48:40:78:ae:b8:61:
                    eb:a0:09:25:00:c4:2c:0b:f8:64:32:bb:62:31:db:
                    b1:3a:41:3a:82:87:53:52:3f:84:71:eb:6d:4e:03:
                    44:8c:71:8e:19:ec:f8:bb:20:27:d7:0b:da:a5:71:
                    c9:90:72:6a:c0:62:8f:3f:07:98:84:57:85:e1:0d:
                    9a:91:e7:cd:e9:dd:70:13:cd:2a:41:8f:83:3e:e9:
                    91:7a:c5:d6:6a:db:8c:cf:98:87:48:b0:8c:ea:57:
                    ba:c5:13:b3:70:eb:8a:84:bb:0d:de:19:33:a9:76:
                    1e:71:af:53:b7:87:09:c8:91:a0:57:7c:8b:92:f4:
                    44:88:87:4b:1d:a2:2c:6c:37:4e:7b:42:46:7f:31:
                    56:a7:e3:10:53:57:1c:61:06:04:b5:82:1a:ad:bb:
                    6d:c7:79:e2:19:63:4e:a6:ce:ca:20:92:78:ba:34:
                    a2:7c:c5:9c:72:d4:e8:2e:f1:2a:a5:38:a1:65:fe:
                    d2:95:e8:0d:a5:53:8c:29:af:da:46:6e:23:3b:b9:
                    aa:a0:fa:2d:77:3f:10:4e:6e:c1:86:25:b6:54:6d:
                    31:b9:c3:1f:5d:f4:cb:5f:13:06:f5:c9:2d:83:e8:
                    ad:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F8:2B:5B:A3:C4:3B:B5:52:E6:C5:65:8D:7B:CF:A4:E7:59:69:97
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bfcc97c-d479-4b72-a9f4-ed3273267fc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  32.192.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         85:ba:41:f0:8c:37:a0:6e:bc:c7:52:f8:5b:74:58:cc:d1:f3:
         51:2b:4d:b1:85:91:02:bf:3e:30:23:36:98:42:9c:66:c3:1d:
         8a:75:9e:4f:89:af:58:d6:58:59:ee:f7:2b:5e:56:87:e0:76:
         54:e2:ca:1e:93:df:8f:57:5b:26:04:b8:03:5c:28:f5:96:d5:
         aa:ce:fd:54:cb:a6:e8:55:0f:49:fa:72:bd:9e:f6:49:31:80:
         ca:6a:b2:2f:7d:bf:5e:8d:32:6f:64:02:15:93:10:3e:43:57:
         cb:59:f7:17:99:f3:8f:06:41:29:46:39:22:b0:bd:7f:81:39:
         4a:b9:3e:03:4e:d9:23:c3:3f:f5:6f:ba:4c:0f:fe:a5:8e:d6:
         8a:05:1d:d9:91:88:85:1f:ad:9d:f9:9c:19:1f:e5:01:11:ae:
         ef:60:a6:23:38:cb:28:48:bc:d5:77:27:87:06:7d:76:9c:40:
         68:6e:e7:44:43:2e:bf:77:c0:5d:41:d5:30:c8:e2:c7:91:0c:
         a0:10:64:39:d9:66:1c:36:f1:42:5a:4c:ea:1d:20:97:f6:ed:
         39:aa:7c:14:dd:5b:cc:3f:1c:b5:2a:67:cc:57:09:b0:c6:fa:
         f8:29:6c:69:9e:b8:ba:7d:1d:a2:19:63:8d:4d:9e:75:5d:2b:
         ba:51:db:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 01:58:55 2026 by rpki-client