Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f243fe6-341e-47d0-b6c0-16d041ff88be.roa
File:                     2f243fe6-341e-47d0-b6c0-16d041ff88be.roa (raw, json)
Hash identifier:          3zt15V93nOE08EMuF8H43oBXi9qg6ek9SgItNrm3Ms0=
Subject key identifier:   B1:3D:DE:DF:C4:13:90:D4:4B:A8:AE:89:00:63:AD:3D:EC:AB:52:08
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0421C007191A674B1671733EC42D1BB3AE745160
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f243fe6-341e-47d0-b6c0-16d041ff88be.roa
Signing time:             Sat 24 Oct 2026 01:03:04 +0000
ROA not before:           Sat 24 Oct 2026 01:03:04 +0000
ROA not after:            Fri 22 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        69.0.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:21:c0:07:19:1a:67:4b:16:71:73:3e:c4:2d:1b:b3:ae:74:51:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 24 01:03:04 2026 GMT
            Not After : Jan 22 23:59:59 2027 GMT
        Subject: serialNumber=7c2f0fab90b5f7e0a7dbefab62402c9476bdb0ef48b8064c76a6f8ba4e772c12, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:cc:0e:2c:96:ac:da:3b:17:a9:1f:ae:8e:
                    d3:93:59:5c:2b:c8:a8:5f:be:43:99:80:a8:bd:85:
                    b2:43:32:c3:62:74:cd:a1:1a:5e:ad:cf:9d:74:86:
                    1a:f5:ec:d4:50:0e:d8:04:6e:77:8c:86:72:fb:77:
                    ef:73:e1:bf:b8:64:ab:71:e4:98:a9:6a:9c:a1:af:
                    ac:e3:a6:00:da:8c:ca:85:9f:2a:df:6d:3a:64:1d:
                    a5:77:ab:bd:08:1c:eb:e7:6f:5b:ce:51:0f:66:3e:
                    89:df:c2:6a:f0:44:52:77:f3:d3:aa:a5:19:96:4a:
                    78:0f:e0:ff:89:e1:93:5e:9e:4a:37:89:88:ad:a7:
                    c4:c4:a4:35:8c:cb:8b:60:84:0f:76:5e:6c:71:05:
                    7b:55:8f:4c:fc:90:e7:c1:f1:cd:12:3c:2a:9c:11:
                    e8:65:ba:07:3d:7d:8b:76:0e:7f:55:ec:95:f3:3b:
                    1b:11:08:05:2b:24:56:96:84:65:e0:0a:b5:fb:58:
                    c5:fd:63:0a:0b:34:59:08:69:58:2c:ed:e2:6a:df:
                    3c:83:f8:5c:ca:ce:7f:87:e3:02:26:b0:fb:4e:59:
                    e1:85:a8:d5:56:fa:8d:e5:08:13:ce:53:60:eb:b0:
                    66:24:a5:cb:8a:08:6f:67:5c:b3:4f:2f:54:8a:3a:
                    cb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3D:DE:DF:C4:13:90:D4:4B:A8:AE:89:00:63:AD:3D:EC:AB:52:08
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f243fe6-341e-47d0-b6c0-16d041ff88be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.0.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:4b:ee:d7:ec:3f:0d:40:b3:fc:de:d6:65:7f:aa:42:7a:b3:
         09:5a:da:73:7a:45:d9:d2:d8:1a:04:8a:d5:46:31:0e:3e:13:
         50:58:73:17:fd:9e:d5:23:95:51:0c:b4:a0:2a:cd:51:7f:fb:
         f7:c1:9e:ad:48:57:ff:12:fb:2c:b3:88:03:f6:bf:99:9a:78:
         88:6a:e2:62:61:e3:4d:5d:60:1a:8f:9a:14:43:fb:bc:60:25:
         cb:0e:f0:c9:64:e6:f0:f5:c5:80:f0:14:5e:3d:95:d2:bc:b3:
         00:86:bd:96:86:13:26:80:cd:58:68:a5:f7:03:31:b9:0d:6d:
         ba:a3:97:14:84:22:0a:42:cf:34:b9:ac:75:b9:45:f0:04:58:
         ca:80:6b:25:c7:06:4f:3f:0c:46:96:d2:c8:b7:36:35:03:20:
         3b:67:79:29:16:7a:86:77:84:fe:fb:fe:a8:1a:be:c6:f6:ca:
         00:6e:2c:ec:cc:ea:d9:d4:8e:c3:74:3b:87:6e:a1:51:99:15:
         2d:9d:c6:78:97:6b:e5:d5:13:55:62:4f:fc:c2:f9:8e:e7:89:
         44:24:c5:57:ee:22:b5:27:28:2f:4e:82:8d:50:6e:9d:54:4f:
         f1:9c:28:a2:dd:2f:b3:20:3d:e2:3b:82:da:49:6c:47:ba:bf:
         55:8b:19:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:57:42 2026 by rpki-client