Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a9bd759-4a90-4dba-9353-eb5399d4235e.roa
File:                     4a9bd759-4a90-4dba-9353-eb5399d4235e.roa (raw, json)
Hash identifier:          hq/e45Gpkhy9KUWVc17hX1P5y0Tkd872TeZljAbsEbs=
Subject key identifier:   42:7C:B1:E2:5E:26:F9:31:D8:60:0B:44:B1:5D:92:28:6C:61:03:85
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2A482D1FF921A10B53657DE5B4D7D5048FAB6B9D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a9bd759-4a90-4dba-9353-eb5399d4235e.roa
Signing time:             Tue 27 Oct 2026 00:03:36 +0000
ROA not before:           Tue 27 Oct 2026 00:03:36 +0000
ROA not after:            Mon 25 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        54.6.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:48:2d:1f:f9:21:a1:0b:53:65:7d:e5:b4:d7:d5:04:8f:ab:6b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 27 00:03:36 2026 GMT
            Not After : Jan 25 23:59:59 2027 GMT
        Subject: serialNumber=92d6c6f80326de11835b61868e3deb9d9e1b03c1d5b5dfd47de86b97e57b3639, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1f:c4:f3:67:dc:00:f2:f0:b2:22:e8:a6:59:
                    f3:a2:ff:21:85:91:71:b4:f3:df:e6:47:e8:95:27:
                    2e:94:09:10:4b:9e:6c:b2:7b:f7:ec:2a:e9:22:88:
                    93:26:e8:59:de:3a:2f:5b:d4:e9:71:7d:db:9a:f8:
                    40:6d:c3:bd:77:0e:6b:23:c8:7b:6d:bd:82:5b:91:
                    30:63:9a:6e:92:41:d2:c8:71:ac:95:1a:7e:4f:9a:
                    c4:75:13:04:2b:3f:ba:e0:d4:33:f0:9e:66:f5:12:
                    ae:75:82:fb:58:e3:e3:72:86:b3:c0:24:fd:87:42:
                    d5:73:fb:04:af:3d:f7:db:b7:09:cb:7f:48:5a:8c:
                    14:3a:92:9e:b3:ae:41:ea:7d:93:1b:44:5a:3f:e2:
                    87:40:cd:fa:0d:89:1f:3b:3a:bf:a3:86:45:a3:1e:
                    fb:0d:f7:52:de:3b:97:f1:8a:82:8d:1a:e7:bc:19:
                    7d:da:da:45:bb:e9:c6:fa:e8:9e:5c:c6:9f:73:90:
                    5b:e4:c1:3b:8a:97:97:d6:60:53:50:fe:e1:5f:35:
                    40:03:8c:01:df:fc:a2:86:b6:f2:4d:65:0d:04:0a:
                    a2:a5:76:21:dd:30:f8:eb:55:9a:42:04:c0:30:f7:
                    bc:04:34:6d:63:df:8b:a4:00:43:ef:26:01:03:b9:
                    df:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7C:B1:E2:5E:26:F9:31:D8:60:0B:44:B1:5D:92:28:6C:61:03:85
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a9bd759-4a90-4dba-9353-eb5399d4235e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.6.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         26:11:22:56:80:b0:e0:87:64:14:37:17:74:0d:46:75:f5:c2:
         b2:c2:f3:7a:ba:a6:98:0d:b5:5c:ab:b1:f5:da:cb:2f:7b:34:
         1f:a0:03:4f:b2:fb:52:2b:37:01:99:de:a0:57:95:5a:6f:cb:
         e2:33:b6:a2:b7:f2:08:f5:a4:4d:30:59:e3:ab:d0:ba:38:26:
         9b:ff:a7:78:e5:87:15:fc:71:45:a5:b6:fe:6a:df:f3:a6:0e:
         f7:52:fa:55:80:64:89:fa:be:dc:c6:8b:47:8c:31:ec:68:c8:
         5a:03:03:2b:33:9d:30:81:66:ac:cb:50:77:8e:10:35:80:85:
         22:f1:74:53:9d:b2:92:3b:56:fc:d6:1c:34:be:30:f1:01:94:
         14:8f:ca:85:2f:0f:71:eb:d2:91:5d:be:61:86:2c:d1:d5:53:
         e5:f9:c9:fa:01:07:19:8b:cb:59:95:b0:2e:77:bc:90:1b:22:
         e0:07:4c:1c:89:f4:12:49:52:8a:bc:43:a9:e5:14:2f:3d:b9:
         98:21:7d:41:ee:be:55:4d:11:fe:5f:46:d3:03:a9:fd:8b:e7:
         94:7f:45:66:4e:31:d5:ff:5e:23:41:01:8a:55:b2:60:29:0d:
         80:0d:2a:d7:24:cf:d3:a6:a8:6c:e0:16:31:80:92:43:c4:7a:
         56:b7:46:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:10:58 2026 by rpki-client