Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/430b4444-6000-49f6-bf2d-bd7ff0f2905c.roa
File:                     430b4444-6000-49f6-bf2d-bd7ff0f2905c.roa (raw, json)
Hash identifier:          ilXMhPD+eiZZA+vgsm0mgyp46xbu/z3VX5kTofEwIcE=
Subject key identifier:   B1:1D:DA:87:B5:B7:05:06:10:6F:E2:E7:BC:9F:11:1E:46:E6:AA:95
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       176D063DB8F052FF07747E0E5780EECEAF766EF1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/430b4444-6000-49f6-bf2d-bd7ff0f2905c.roa
Signing time:             Sun 04 Oct 2026 00:10:39 +0000
ROA not before:           Sun 04 Oct 2026 00:10:39 +0000
ROA not after:            Sat 02 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:6d:06:3d:b8:f0:52:ff:07:74:7e:0e:57:80:ee:ce:af:76:6e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  4 00:10:39 2026 GMT
            Not After : Jan  2 23:59:59 2027 GMT
        Subject: serialNumber=681f6967f7805cb337dadbff13b7e5bf7e5e3ef75c9291c5c3f1d7abbf27a8db, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:14:06:99:21:8e:6d:8d:60:0e:3f:53:dc:73:
                    2f:14:94:a2:ed:1c:a0:f0:7a:1c:50:5e:d1:ed:94:
                    9f:4c:e3:82:a0:89:2e:29:48:ad:36:fd:f2:fc:dc:
                    6a:6e:a2:f2:03:6c:da:22:d7:3f:42:32:0c:a4:c3:
                    ba:3f:ad:66:16:54:d0:60:57:97:c9:1e:3c:24:2d:
                    64:0c:8c:09:f0:8d:6a:7d:c1:5e:9e:9e:32:8c:d5:
                    4d:8a:41:a8:15:d8:44:82:70:27:e7:8a:87:d6:1b:
                    ea:84:48:89:11:17:bf:ab:eb:ed:47:cb:cd:96:3c:
                    5c:e9:cf:a1:a1:0f:a2:fe:bf:a9:e8:5a:5a:e1:21:
                    43:db:5b:bb:cc:71:d3:5e:04:e9:85:88:44:c6:80:
                    5d:65:f6:3f:72:cb:7a:47:b8:cc:ba:7b:d0:9f:cb:
                    bb:91:6f:1a:8f:7c:f8:5c:bc:30:70:1c:d6:d0:d1:
                    6f:ed:3e:16:2f:17:4a:d3:15:9e:bf:9f:89:bc:a7:
                    7d:c4:9d:82:de:f0:02:72:f1:93:eb:79:9d:7d:aa:
                    c7:6a:f4:e0:ed:91:e6:35:7c:70:96:ad:35:2d:63:
                    26:1b:83:14:d5:14:55:71:e2:e3:e9:44:7f:0b:af:
                    4f:d2:29:ae:ea:d7:8e:a9:c6:f3:fc:91:d7:60:60:
                    4b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1D:DA:87:B5:B7:05:06:10:6F:E2:E7:BC:9F:11:1E:46:E6:AA:95
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/430b4444-6000-49f6-bf2d-bd7ff0f2905c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         05:11:6c:8c:b0:17:1a:18:8c:aa:2d:d4:ad:18:5e:83:fd:d2:
         e7:2a:dd:62:47:c4:f9:55:bd:45:69:91:fb:a3:46:ca:26:c7:
         1d:85:f3:c0:66:e3:a8:96:71:86:f0:e8:3c:18:66:61:37:00:
         f4:de:b9:c4:17:5a:15:9f:fe:ca:ba:01:ce:bd:7e:0d:b8:7d:
         f9:30:6e:26:4c:4f:51:aa:04:07:f0:a1:26:54:56:68:6e:b5:
         da:fc:ba:38:40:b0:60:6d:c6:6f:85:4e:3b:60:9b:ae:2e:29:
         cb:66:74:fb:ec:8b:62:59:52:1b:0d:8a:48:f1:9b:6b:05:1b:
         15:74:a0:6d:78:b4:b2:79:6d:5c:63:58:65:ff:e5:e2:6a:04:
         3e:e7:cb:26:13:60:17:9f:bc:f2:d1:96:67:a3:02:29:20:9d:
         b3:67:49:a8:48:82:b4:47:a7:84:71:d7:22:f8:94:1d:5c:64:
         81:c0:a3:d5:20:48:68:a2:14:15:cf:0e:cf:c5:f2:6e:0f:16:
         e1:ad:3d:70:0b:66:cc:83:a0:33:f5:6a:4c:43:c8:9a:87:ad:
         a9:63:78:9a:ed:26:0c:37:be:20:58:91:ef:5f:6e:22:4a:a7:
         5b:a0:fe:66:88:d0:1e:6a:eb:c9:b5:aa:17:3a:4c:63:e7:08:
         8c:44:33:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 21:09:58 2026 by rpki-client