Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36d79548-8ba4-4d88-8edf-6092cba143a6.roa
File:                     36d79548-8ba4-4d88-8edf-6092cba143a6.roa (raw, json)
Hash identifier:          0h+ctwNFYAgsLVQGNcl4qgwJ6XP8sNHCilv2cpMh7tM=
Subject key identifier:   D9:DF:20:E2:C6:6F:39:A7:01:57:ED:63:62:2D:45:55:3D:B7:C6:25
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       26AF6A5244CCD48336193A7FB26142C969BC07DC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36d79548-8ba4-4d88-8edf-6092cba143a6.roa
Signing time:             Tue 06 Oct 2026 00:10:09 +0000
ROA not before:           Tue 06 Oct 2026 00:10:09 +0000
ROA not after:            Mon 04 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        56.113.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:af:6a:52:44:cc:d4:83:36:19:3a:7f:b2:61:42:c9:69:bc:07:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 00:10:09 2026 GMT
            Not After : Jan  4 23:59:59 2027 GMT
        Subject: serialNumber=dbb0df0ab8bd8c4cf02097eb6f2bad7e126f6d1781752881a1d9fa54c0a189fa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8f:8e:22:f9:d6:e5:30:6f:fe:1f:01:de:b1:
                    86:fb:01:83:1a:d0:3b:29:e4:30:94:29:bf:49:0f:
                    63:14:88:3f:c7:af:c1:58:5d:9f:8c:bc:48:d3:95:
                    1e:a2:23:32:bd:44:4e:6f:33:22:99:04:95:c5:d0:
                    12:fe:37:73:7e:4a:a5:b7:64:d8:8e:14:2b:45:9f:
                    a7:a9:18:87:20:0d:a7:e8:8d:9e:27:48:51:2c:7c:
                    7b:04:78:aa:f0:9a:be:a3:5c:f1:bd:bb:9f:a8:57:
                    2b:b5:b9:2b:57:4b:17:3b:68:c9:aa:91:81:13:dc:
                    cd:35:cb:26:86:eb:da:ee:1d:70:ba:a2:33:0e:ea:
                    99:f5:41:29:6c:04:1f:24:57:82:67:d7:93:cc:1e:
                    ed:95:a7:0f:61:97:7c:7a:77:bd:03:02:b6:24:70:
                    c0:d3:57:e7:3c:0e:f3:a2:62:bb:8d:31:c3:71:7a:
                    87:e9:49:1b:80:64:31:6a:59:b6:c2:8f:8e:1a:6f:
                    96:8f:83:4c:94:26:67:ef:e1:c4:5f:e2:16:3c:78:
                    0a:c1:82:95:2f:cd:e8:17:52:c6:f6:15:94:4d:fa:
                    70:bf:f7:86:50:5e:f3:dd:36:53:e2:26:dc:51:62:
                    44:49:98:d4:7d:a4:77:70:81:86:3e:e4:23:21:d1:
                    21:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DF:20:E2:C6:6F:39:A7:01:57:ED:63:62:2D:45:55:3D:B7:C6:25
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36d79548-8ba4-4d88-8edf-6092cba143a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.113.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         63:7e:97:88:19:78:8a:dc:fc:25:4b:49:06:81:7e:3b:86:03:
         4d:42:63:5c:99:60:08:81:55:97:a6:24:78:8a:6d:3c:cc:64:
         69:06:86:4f:c1:74:7a:19:02:79:15:98:1e:a6:d5:2b:6e:61:
         53:f2:6d:a7:06:e0:9b:6b:cd:da:0d:9f:75:c7:f0:01:6a:cc:
         d7:a6:3b:b3:29:b7:04:38:0a:47:89:ee:6b:b7:ac:d9:b6:54:
         b0:a6:33:4a:ec:6d:c1:f1:a9:b8:73:f7:57:9e:68:75:7f:9d:
         98:eb:fb:e0:6c:c7:9d:f1:ec:7e:a6:09:0e:7a:2d:b4:3b:83:
         0a:c8:e6:3d:23:06:a7:b7:2d:9e:95:42:07:e9:93:bc:99:5e:
         57:fe:f9:54:39:5f:3b:8e:d0:df:59:ec:e0:18:7c:e4:e6:6e:
         a7:53:b1:79:f0:d9:47:36:ef:b1:3f:d5:66:aa:64:c8:44:64:
         40:4c:78:ef:4a:f8:0f:ec:be:62:33:1a:6c:d0:57:ed:38:a1:
         3e:fe:1a:fd:ce:1c:00:65:21:8b:8f:66:52:57:d0:88:f6:dc:
         3a:23:ab:54:fb:d0:35:04:53:be:f8:40:fa:ee:c1:20:fc:2f:
         72:7b:36:3b:18:1c:ab:4d:c2:f6:19:24:42:53:e0:89:99:6c:
         af:f7:63:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 15:13:53 2026 by rpki-client