Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f6a7b28-0aa8-467b-ab6a-29f98cfd52cc.roa
File:                     4f6a7b28-0aa8-467b-ab6a-29f98cfd52cc.roa (raw, json)
Hash identifier:          qm+8P8eQQJwHo8TL4dNJizZFXCH71MvQb8xipfhPj3U=
Subject key identifier:   89:B8:82:3F:4E:43:FB:6B:C8:4D:2C:59:BF:02:E4:EA:4C:15:A9:E8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       54904DF8AA88D08378E0AA6D6975ED3C6F6DED76
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f6a7b28-0aa8-467b-ab6a-29f98cfd52cc.roa
Signing time:             Sat 24 Oct 2026 00:51:07 +0000
ROA not before:           Sat 24 Oct 2026 00:51:07 +0000
ROA not after:            Fri 22 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        151.150.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:90:4d:f8:aa:88:d0:83:78:e0:aa:6d:69:75:ed:3c:6f:6d:ed:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 24 00:51:07 2026 GMT
            Not After : Jan 22 23:59:59 2027 GMT
        Subject: serialNumber=d56751990150d3b52e472fbf05c7af63133a9954a935308d82c39a532d0e7380, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ab:00:22:dc:d2:b8:72:c4:81:e7:d3:08:65:
                    15:bf:c2:8f:5b:65:b9:81:fa:b4:4e:65:7e:e0:ba:
                    c8:05:b2:9c:65:0d:3e:11:83:dd:63:c6:af:fe:5a:
                    cb:0a:bd:38:5d:35:e7:41:ec:63:03:67:d6:ce:1d:
                    2d:ae:c9:c3:f1:a0:19:c3:f0:a7:50:c1:94:ad:5c:
                    8c:0d:53:13:7b:fa:b3:c9:31:af:e1:a9:c8:4d:cc:
                    b5:b3:d3:ee:5f:6e:68:fa:12:8b:88:5b:b7:20:36:
                    3e:03:6a:10:14:7b:4f:b4:0f:a1:29:20:cf:f7:37:
                    e0:4c:9e:78:48:f6:3e:33:07:15:a2:5a:f0:d7:e9:
                    32:78:91:9c:77:a6:9e:d5:46:33:d9:24:50:f8:cf:
                    80:eb:7d:a4:f3:1b:e8:b9:2f:0f:fa:02:5a:e6:14:
                    87:e1:19:be:f3:2e:9d:e7:99:82:3e:57:76:2a:5b:
                    78:4b:b2:da:2c:f1:b4:e8:66:83:a6:e9:43:04:89:
                    45:40:dd:2d:bf:d9:22:43:95:5b:09:b8:2d:7c:4b:
                    03:f1:11:24:ae:20:70:04:c8:1f:ac:cc:6d:ee:6b:
                    f2:89:63:66:19:82:ed:a9:21:07:c8:04:86:c8:1e:
                    d7:1c:5c:8b:86:83:76:dd:c6:94:59:3a:16:a5:7e:
                    98:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B8:82:3F:4E:43:FB:6B:C8:4D:2C:59:BF:02:E4:EA:4C:15:A9:E8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f6a7b28-0aa8-467b-ab6a-29f98cfd52cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.150.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4a:f7:98:e3:0e:9d:0b:1b:e9:80:88:a3:ce:dc:5e:c6:9e:3c:
         b5:90:2f:4a:6a:89:a6:a2:26:8d:35:eb:4b:5a:27:39:9c:de:
         d4:6b:8b:30:12:99:ee:f0:1b:02:6f:44:9d:04:09:d7:cd:2e:
         d3:16:71:22:7c:d7:74:a2:da:21:a4:06:f8:a0:68:79:4e:e0:
         5b:59:55:e5:44:4d:df:0e:4e:16:69:1d:cb:ca:ac:f3:4f:6f:
         d2:4c:76:9e:02:ae:4e:6c:37:b8:89:09:65:53:e6:f2:82:16:
         30:65:0a:8f:85:c7:79:64:c7:8b:8d:b5:ee:67:bf:93:ba:32:
         91:90:18:a5:64:13:cd:c3:b2:fd:46:cb:be:a0:9a:7f:5b:d4:
         28:8a:8a:29:fd:a9:0a:d2:23:65:96:30:5c:6c:a7:4b:3b:51:
         8e:4c:11:af:fc:81:25:91:55:33:74:89:16:0e:27:3c:bf:95:
         03:1e:3f:2e:cc:3b:ec:fc:ee:79:04:de:f7:55:87:a7:bd:09:
         bb:73:2d:49:c1:ca:d8:c6:2f:10:ad:1b:ca:c8:87:ed:12:3a:
         db:96:25:0a:6f:75:a5:84:6d:b2:5a:a0:89:b5:96:14:4b:09:
         6b:4d:e0:d7:2c:7e:15:12:fe:59:6d:e8:e3:14:2b:c0:cd:06:
         bf:1d:00:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:09:10 2026 by rpki-client