Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a2061ac-ffc8-4795-bdd2-0406c6ef86b5.roa
File:                     3a2061ac-ffc8-4795-bdd2-0406c6ef86b5.roa (raw, json)
Hash identifier:          zFJnHxYtPb/bHrd2qrnvKJbgL9uNQqiPaY/yJTF1TT8=
Subject key identifier:   98:E4:7D:76:37:B9:69:FF:9F:D0:67:6B:EB:86:27:F7:FD:D5:CB:4A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1D8EEFC00E0694D20AFC5CA8A5B17B1C56DF82AC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a2061ac-ffc8-4795-bdd2-0406c6ef86b5.roa
Signing time:             Thu 15 Oct 2026 00:30:48 +0000
ROA not before:           Thu 15 Oct 2026 00:30:48 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        66.151.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:8e:ef:c0:0e:06:94:d2:0a:fc:5c:a8:a5:b1:7b:1c:56:df:82:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 00:30:48 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=b11b5a809a54e4f7e424ba79292503a7585494b95385c37d2379ce4d59da2eb7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:13:7a:aa:15:c5:51:84:dc:32:96:1a:c9:e3:
                    3e:69:a5:eb:37:14:47:58:44:f7:a0:08:08:14:f8:
                    1b:32:0a:2e:90:b4:4a:ec:a5:5a:14:f7:14:8d:b1:
                    a6:8f:21:80:cb:a2:01:e1:db:a4:2c:8c:24:ec:bc:
                    e2:72:cb:4c:ea:b2:aa:da:33:f2:12:03:a4:ee:04:
                    ef:ac:55:d4:06:e2:0e:78:d5:bb:55:02:45:1c:8b:
                    29:9d:8a:7b:b3:74:10:c7:21:9f:7a:c4:49:87:9f:
                    24:09:4c:0f:85:54:4a:e7:a6:66:fa:5c:35:cd:ce:
                    a6:9f:50:43:24:c1:0f:1d:2d:42:c0:07:49:de:a2:
                    c9:ab:38:59:69:05:6e:48:b5:2c:35:20:6e:6d:49:
                    26:95:fc:9a:e2:e3:33:49:46:50:2f:6d:99:c4:5a:
                    73:93:20:98:36:06:96:64:48:de:04:f8:76:f7:24:
                    9f:fa:be:55:78:4e:83:bf:df:dd:eb:c2:5a:16:ee:
                    c4:18:a8:ca:38:40:1d:66:ec:d4:09:80:b5:f4:bc:
                    a4:04:1f:d5:3c:9b:9b:bc:2c:ba:b3:e7:bb:db:2b:
                    b8:01:5e:b7:3c:b9:d7:cf:ea:d5:d2:ef:1b:b4:04:
                    e6:e1:0e:18:2c:79:19:40:5e:d3:d8:63:de:bf:59:
                    b6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E4:7D:76:37:B9:69:FF:9F:D0:67:6B:EB:86:27:F7:FD:D5:CB:4A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a2061ac-ffc8-4795-bdd2-0406c6ef86b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.151.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         98:c0:95:82:09:4d:1d:00:c1:fb:c9:02:73:35:cc:f4:1b:8a:
         a7:4b:02:26:c1:29:ed:5c:f8:89:31:c0:c1:19:67:50:3e:17:
         a1:a9:d7:8b:63:54:a8:16:aa:28:59:40:8a:05:7e:4e:f2:7b:
         92:1b:ed:7e:d4:d3:89:b6:00:14:33:52:dd:8a:3a:18:d5:57:
         f2:77:f7:bb:e7:b2:22:f2:04:b2:32:36:a4:0a:c9:58:1f:8c:
         3a:e5:65:1b:38:38:8e:25:6a:92:38:ff:af:fa:49:77:c7:6d:
         77:8f:9f:14:23:72:d9:96:ff:1c:f7:bd:cc:ba:67:d7:78:88:
         33:77:93:bf:38:fe:0e:1b:98:f7:cf:d0:14:5d:92:ba:33:08:
         4c:6f:da:46:f7:63:45:3b:17:3e:3f:b0:55:fb:56:59:15:c4:
         28:5a:06:a3:8e:ff:f2:af:ae:f2:7a:91:ff:34:84:f2:39:86:
         53:df:df:4c:a5:b5:e5:65:3b:75:eb:06:40:70:27:c1:92:84:
         f9:0b:ba:94:66:61:a0:f9:18:ca:72:79:c1:0b:00:c0:ad:78:
         03:7a:2e:5e:38:e0:04:75:60:d0:08:a8:3f:12:2c:ee:34:79:
         b9:32:50:7d:70:8e:f7:31:ad:2a:42:2b:4d:51:82:be:e8:d7:
         34:55:68:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:29:59 2026 by rpki-client