Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52b2edf4-d1ad-4ef7-8a47-774336a91a0a.roa
File:                     52b2edf4-d1ad-4ef7-8a47-774336a91a0a.roa (raw, json)
Hash identifier:          YehZyh7xu/GY2UriomxpnrieM6oNtU7SDFaPHcFiLcc=
Subject key identifier:   60:D2:A8:56:F3:18:F3:A0:07:51:D6:26:ED:F8:25:2B:D4:9C:33:F1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1CE5DABD126839CC03F7CCB5ADA5F7DAD3702981
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52b2edf4-d1ad-4ef7-8a47-774336a91a0a.roa
Signing time:             Thu 08 Oct 2026 00:51:34 +0000
ROA not before:           Thu 08 Oct 2026 00:51:34 +0000
ROA not after:            Wed 06 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e5:da:bd:12:68:39:cc:03:f7:cc:b5:ad:a5:f7:da:d3:70:29:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:51:34 2026 GMT
            Not After : Jan  6 23:59:59 2027 GMT
        Subject: serialNumber=ecb728e784ede3577e6ff77445f75be7feba7f3655d8d9f136f73982d110b168, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:87:81:d2:9f:d7:ef:b0:94:42:5a:b1:f6:e8:
                    52:d9:0e:d7:49:bc:76:da:9b:aa:cc:26:9f:6f:54:
                    b1:e6:38:6c:82:bb:51:89:e8:c1:1d:be:99:ea:67:
                    6f:7a:dd:72:a6:4e:6f:16:83:00:9c:44:f6:76:d3:
                    2f:00:1d:6b:0a:e5:90:7a:11:56:10:93:5f:5c:b2:
                    1d:7a:5b:71:49:ad:2c:d8:86:2a:b0:dd:03:b0:19:
                    66:0a:8c:5d:77:76:bd:2a:f7:ab:c6:d3:c3:0f:3d:
                    c2:63:32:89:10:d6:a4:8a:33:f7:dd:69:c9:fd:dc:
                    8b:d2:6a:9b:e0:9f:5f:66:c7:ee:fd:4e:03:ab:41:
                    d7:eb:3a:4f:e0:db:77:28:48:53:7c:3d:8b:2a:f1:
                    02:5a:72:07:ce:80:db:13:bf:e9:16:0a:d8:75:1f:
                    b4:89:e4:86:b5:db:39:a7:29:e4:f1:e6:f7:29:1b:
                    77:73:99:3e:23:7c:a6:d2:37:dc:92:50:7f:10:08:
                    8f:fc:69:36:c2:77:06:62:a6:54:55:05:1e:13:be:
                    b8:eb:9f:cb:35:21:a3:6a:bc:22:44:38:7f:e1:9c:
                    3b:c4:96:5f:00:67:f4:98:1f:7a:36:c7:f9:fe:66:
                    cd:fe:4c:bc:95:01:84:f1:fd:c3:d1:07:ce:37:9c:
                    64:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D2:A8:56:F3:18:F3:A0:07:51:D6:26:ED:F8:25:2B:D4:9C:33:F1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52b2edf4-d1ad-4ef7-8a47-774336a91a0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:d1:a6:64:4e:f1:e6:97:da:49:92:dd:80:81:dc:fb:4e:1a:
         1f:f3:d6:63:9d:ca:d3:e0:ff:72:4c:27:b3:79:47:6f:cb:44:
         1f:fc:b5:df:5a:3c:0c:f7:8b:aa:52:88:0d:af:72:cb:61:69:
         1e:f3:a6:91:7f:a4:c1:eb:9f:7e:67:31:b7:da:04:f3:01:f2:
         40:a0:a4:9f:f9:6d:39:e2:00:62:55:7e:39:02:58:d8:b1:08:
         99:75:5a:ae:17:72:fa:70:89:c9:53:44:c6:ad:9e:70:ea:29:
         5e:d5:f8:a7:a5:dd:e2:4a:0a:39:07:e5:80:3c:d7:d4:75:51:
         1c:9f:9b:4f:f9:b7:26:88:a5:97:e4:97:96:f7:72:09:4d:57:
         f4:da:51:97:ff:37:7c:d4:88:9e:e7:01:37:46:21:52:d9:36:
         2e:58:95:5f:12:6c:51:bd:fc:f0:ae:f4:31:ae:63:4d:4d:60:
         a8:b0:42:e8:9d:ee:a1:e2:bf:cb:1e:f5:40:24:6d:33:44:c3:
         4a:32:43:4a:d9:f2:4a:20:37:19:59:da:d3:60:f0:82:7c:70:
         4a:37:bf:d5:55:2d:d3:ff:f5:0b:0e:db:1d:2e:5c:bb:b5:4b:
         62:59:7b:b1:16:e1:01:57:d9:72:fb:fa:a7:f8:62:6d:05:20:
         09:fe:10:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 16:46:31 2026 by rpki-client