Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53e0cafd-0de6-48b8-bd43-f81bd44f6fc5.roa
File:                     53e0cafd-0de6-48b8-bd43-f81bd44f6fc5.roa (raw, json)
Hash identifier:          QUCXCAXYB2ImPM5y7VzZsetycUJ52mSwm9tDSFvMAtc=
Subject key identifier:   6B:A6:7F:6F:AA:CC:06:DF:10:D2:7D:A2:9A:01:C9:E4:4C:DA:A5:2E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3F8D6B59187F8D1D7F6D06147DCC08591EF6078E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53e0cafd-0de6-48b8-bd43-f81bd44f6fc5.roa
Signing time:             Fri 09 Oct 2026 01:07:30 +0000
ROA not before:           Fri 09 Oct 2026 01:07:30 +0000
ROA not after:            Thu 07 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        151.148.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:8d:6b:59:18:7f:8d:1d:7f:6d:06:14:7d:cc:08:59:1e:f6:07:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  9 01:07:30 2026 GMT
            Not After : Jan  7 23:59:59 2027 GMT
        Subject: serialNumber=ab72695c57c4904dc4a23fd66985b66e0d32166df313fd43b401cb14a1a5c7eb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a8:31:33:19:d5:22:f2:51:c9:9e:8d:60:e2:
                    6c:2a:b0:95:60:ba:f4:c3:e1:1c:94:2f:ea:c4:c0:
                    17:d8:de:69:8f:03:f0:43:e9:21:37:0e:55:a1:cd:
                    57:ce:95:25:83:b2:6c:46:20:16:4b:6e:1a:a8:d1:
                    63:de:8a:c2:c3:4a:b6:ae:7a:db:c7:63:8f:33:7c:
                    cd:85:7f:49:5e:c6:eb:b2:35:88:07:7b:7e:c9:51:
                    45:ef:97:36:c3:bd:8d:b0:e0:8b:47:68:52:69:f8:
                    5b:51:0a:8c:eb:db:3e:60:f4:33:26:ef:e3:fb:0e:
                    bb:d5:8b:8d:c3:3f:fb:00:95:ae:e2:34:69:4a:21:
                    eb:1e:e7:8a:8c:ae:b7:18:62:cb:0d:ab:7c:75:13:
                    b1:66:67:f6:fd:5b:41:38:e9:35:9e:25:e2:e4:87:
                    c0:6e:c3:11:60:a8:50:6d:c5:4b:cf:9e:18:03:51:
                    d9:eb:8e:5c:83:3b:2e:3a:45:62:b1:d6:c8:af:fd:
                    fb:77:f7:20:b0:c3:49:bd:e3:f0:07:9f:98:af:93:
                    e6:b0:9d:9e:6a:46:f7:c6:b0:63:83:c3:c1:3b:49:
                    7b:e5:35:0e:8e:7e:36:af:5e:19:63:e1:99:5b:1b:
                    16:f8:12:e5:31:2d:77:18:c8:84:e0:b6:88:68:87:
                    89:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A6:7F:6F:AA:CC:06:DF:10:D2:7D:A2:9A:01:C9:E4:4C:DA:A5:2E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53e0cafd-0de6-48b8-bd43-f81bd44f6fc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.148.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:c5:07:7e:e2:3d:c9:43:58:05:20:3e:e5:7f:4c:02:9c:99:
         77:71:f5:75:57:c6:eb:22:9b:fe:f4:e4:5e:cd:36:c0:f1:1c:
         71:18:e9:4d:43:8c:b6:3b:28:44:90:fe:71:f9:bd:c8:87:5c:
         a9:d9:54:cc:3c:6c:9d:39:16:c3:6c:ec:e7:43:25:32:65:70:
         c1:aa:61:eb:50:1f:67:aa:d0:24:6a:bc:57:0e:1b:e7:3b:7e:
         83:ba:b6:8c:f7:f3:5f:6b:6b:85:17:e9:a3:7d:30:42:9c:cb:
         33:1a:43:27:20:a2:a6:42:44:eb:93:9c:7c:f5:ec:13:20:02:
         16:09:48:5b:41:2a:30:05:5e:27:84:ca:72:8b:8f:5c:86:ef:
         d0:43:f0:8c:3d:da:37:1d:8c:25:18:e8:74:e5:05:d5:fc:c1:
         c2:d3:ba:09:b2:51:54:48:02:39:71:3c:c2:7e:9e:66:f4:4d:
         67:35:d5:df:e0:ef:e0:01:1e:e4:28:ab:96:34:72:f6:e0:b2:
         b3:bc:ae:43:10:87:9e:b5:16:2e:3b:41:62:83:67:e1:a2:bf:
         33:72:30:bb:dd:04:22:b4:26:66:02:4d:44:6c:5f:3d:86:a9:
         52:63:d5:d2:e1:60:5b:4f:b8:00:0c:ea:29:f4:97:e5:6b:44:
         53:0e:27:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 19:21:21 2026 by rpki-client