Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2dbfb4a0-e580-4c0e-906b-2dd1d5fe9811.roa
File:                     2dbfb4a0-e580-4c0e-906b-2dd1d5fe9811.roa (raw, json)
Hash identifier:          DAG7kx+2IVFmmIRaxlZ/ss9cpJjLdsKPemOnaiyy0aM=
Subject key identifier:   79:85:29:C8:52:93:97:1A:EC:AC:CF:02:7B:B1:F6:4B:A2:6F:C3:9C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       63B44367AF3E1891F23D51C3E5DD32D763D4C096
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2dbfb4a0-e580-4c0e-906b-2dd1d5fe9811.roa
Signing time:             Thu 22 Oct 2026 02:21:00 +0000
ROA not before:           Thu 22 Oct 2026 02:21:00 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        56.11.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b4:43:67:af:3e:18:91:f2:3d:51:c3:e5:dd:32:d7:63:d4:c0:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 02:21:00 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=5e70ee7bec612cd307d02daae408c2019a5a23258a3b6b72e7a26feb974092cc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:eb:83:6c:d3:56:06:53:85:38:30:09:fe:9e:
                    68:29:c2:ed:70:4a:71:60:41:59:90:0b:51:31:0f:
                    6b:6e:1c:d7:4d:ec:04:4d:ba:d6:b1:95:cc:7b:98:
                    72:5a:0f:70:76:9c:e7:d2:b4:22:f4:82:e4:28:cd:
                    57:1e:f7:44:e7:5f:14:0c:f9:d0:16:9f:5a:1d:07:
                    7c:a0:c0:b3:22:8e:81:b4:e3:68:41:41:ea:42:b3:
                    ef:2a:08:d3:50:b5:e7:99:1e:7e:8f:f6:71:14:5f:
                    86:af:a3:36:de:c7:0a:af:48:b4:94:d0:fe:7e:d2:
                    b5:df:d8:24:4d:06:a9:08:2e:61:57:11:ae:fa:14:
                    ff:ca:ea:99:8c:91:0b:4d:3d:da:19:eb:c8:bd:66:
                    3c:41:d3:89:e9:d3:a4:9d:3a:b2:28:e5:b6:d7:b8:
                    c8:d4:26:62:0a:ce:26:75:0f:e9:81:ea:0b:94:82:
                    7e:46:08:92:b2:88:8b:00:2d:b9:26:46:6e:9e:93:
                    8d:19:88:fc:c5:87:8a:4e:bf:69:5b:33:3b:e7:2f:
                    d7:4a:b9:83:fc:a6:20:1b:7e:33:57:c0:47:27:bf:
                    06:07:01:cd:ed:48:8d:3f:13:83:61:5c:bb:a6:f5:
                    a5:c8:4e:e6:b5:97:d4:e3:62:f5:0b:d1:47:67:04:
                    2e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:85:29:C8:52:93:97:1A:EC:AC:CF:02:7B:B1:F6:4B:A2:6F:C3:9C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2dbfb4a0-e580-4c0e-906b-2dd1d5fe9811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.11.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8b:bd:8e:96:64:4f:e1:43:7a:f5:fc:1e:6f:0e:2e:51:03:ec:
         f9:2b:f9:57:85:ab:78:04:85:7b:dc:33:26:52:73:e7:54:16:
         41:53:17:f6:ee:d6:84:12:e3:f8:30:a5:1b:53:a1:42:59:3a:
         78:c0:f4:ff:74:23:ac:f3:ac:36:75:d2:0b:bc:27:b6:57:2c:
         d6:9b:95:53:b8:c8:52:f5:3e:3a:fc:66:6c:b2:8f:55:b3:dc:
         8d:6a:19:02:aa:a3:b5:f2:11:ea:61:09:96:46:90:79:cb:dc:
         04:cb:62:96:f4:12:e8:15:2d:4a:76:b4:f0:f5:6f:22:a8:36:
         ae:1f:fb:f5:ab:cf:04:93:48:f0:35:f0:92:18:a8:13:d5:52:
         79:42:52:ae:7b:50:ed:a7:ed:ce:1a:98:d4:92:cc:fe:00:0a:
         84:c1:bc:b0:42:49:7d:12:8c:2c:44:a1:7c:b0:cf:ac:21:2d:
         ce:1e:4a:11:34:1a:5d:df:36:ee:0c:5f:9c:90:29:36:56:17:
         b1:f2:bf:4b:f0:b2:50:92:42:29:f2:d2:63:1e:6c:a2:5a:6f:
         d2:14:be:9d:c8:f8:bc:56:6c:06:64:c7:ff:9b:b6:7b:0c:0e:
         fd:d2:12:06:4b:47:1b:30:03:a1:b4:e4:12:b8:64:3b:b7:1d:
         96:1b:ca:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:39:18 2026 by rpki-client