Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b15d28d-9a18-49c9-9715-c65333504032.roa
File:                     4b15d28d-9a18-49c9-9715-c65333504032.roa (raw, json)
Hash identifier:          +ibtTTMkB5kjP0j82IVhbxaJLhMuGz3gdb6QZ0Yqc6Y=
Subject key identifier:   A7:75:ED:8B:7E:4C:7F:21:A8:EE:02:3E:BC:0B:80:05:D3:EB:9A:A6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4A3261D266E92A97FB9000CCD27AE8FB9340F84A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b15d28d-9a18-49c9-9715-c65333504032.roa
Signing time:             Sun 11 Oct 2026 00:50:08 +0000
ROA not before:           Sun 11 Oct 2026 00:50:08 +0000
ROA not after:            Sat 09 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        93.77.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:32:61:d2:66:e9:2a:97:fb:90:00:cc:d2:7a:e8:fb:93:40:f8:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 00:50:08 2026 GMT
            Not After : Jan  9 23:59:59 2027 GMT
        Subject: serialNumber=70061a49d2229415136b85e6c797b953cffa64e624fce6a33d384331e8a82cb9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:97:21:bc:e5:c8:a0:39:3b:40:a4:d6:f6:b0:
                    88:6e:67:06:f7:36:ab:8a:ad:80:01:68:33:bd:1b:
                    5b:90:f5:d8:9e:d5:5d:4f:59:86:a7:f2:a0:21:47:
                    94:95:3f:c5:03:8c:9e:2f:ff:c4:de:0f:11:e4:b9:
                    0a:c7:84:c2:1f:3b:b9:cf:d9:5d:fb:9d:c6:17:29:
                    ad:e6:e0:b5:4a:93:5e:0d:9b:f4:45:f1:0d:8d:2e:
                    dd:2f:d1:a7:0c:c2:fe:30:31:15:60:54:dd:ad:e2:
                    c2:72:93:83:6b:cb:f4:59:99:32:73:f3:3e:ae:d5:
                    f0:e7:b0:c1:79:84:ab:5f:01:84:cc:8c:6b:fe:b0:
                    34:0d:b9:35:01:f3:cc:f8:65:25:0a:f6:83:ef:47:
                    5e:3f:12:03:af:1e:cd:46:7d:c6:d4:0c:e5:41:44:
                    bb:1d:82:51:e3:06:94:59:d2:3b:49:f0:4d:21:87:
                    a4:91:00:15:98:87:81:60:f6:76:32:40:9b:37:ca:
                    77:ac:01:8c:e1:aa:6d:68:33:e8:71:2b:07:24:dd:
                    dd:0f:a3:53:e3:d5:c5:62:27:84:56:a7:ce:48:de:
                    e3:e7:51:f9:a5:14:46:24:60:64:d2:f1:62:4c:4e:
                    05:b3:2d:a2:df:d9:25:88:16:14:31:7e:2f:24:7a:
                    d8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:75:ED:8B:7E:4C:7F:21:A8:EE:02:3E:BC:0B:80:05:D3:EB:9A:A6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b15d28d-9a18-49c9-9715-c65333504032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.77.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:40:cb:9a:8c:04:86:8a:63:d1:13:c1:e5:78:55:cb:1a:88:
         0e:64:d2:1d:61:98:00:9b:e9:aa:94:1e:c7:87:81:a9:7a:c8:
         07:8a:a4:b1:a6:54:89:88:44:33:4d:98:c5:8f:38:02:92:c8:
         5e:04:b9:d6:38:f6:63:1d:94:02:53:cc:e7:02:af:86:09:bb:
         01:de:5d:29:1b:71:2a:e6:34:d3:cc:5a:01:83:4f:af:d9:cd:
         d1:a8:5c:54:18:c7:3a:67:52:8a:da:41:fe:9a:9c:9b:4e:c7:
         d6:c0:74:00:81:b7:77:c1:55:4c:56:b3:05:8f:97:71:ad:6f:
         bf:df:f4:c8:6e:10:a7:5e:20:ee:64:6a:ec:8a:8f:41:ec:eb:
         51:ad:4b:39:3f:bb:07:fc:b0:ef:7f:db:05:69:a7:d3:d7:a1:
         16:60:8e:9f:62:b1:d8:63:2c:47:37:05:ce:68:2b:ac:da:73:
         09:b4:e3:e0:00:99:fa:47:05:72:ba:e4:bc:8f:55:01:4e:6b:
         28:b3:7e:8b:6b:28:d2:1c:48:d8:88:14:17:5e:e9:81:f5:92:
         8d:fd:35:34:3c:f6:c7:f9:6f:e4:87:bb:d6:f6:9e:a5:e4:18:
         6f:2e:fe:f7:ad:7c:ff:f5:6e:41:ee:3e:77:be:b8:7b:3a:ac:
         7b:95:d1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:37:26 2026 by rpki-client