Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59664a97-7a86-420c-a977-c7e06b2c9750.roa
File:                     59664a97-7a86-420c-a977-c7e06b2c9750.roa (raw, json)
Hash identifier:          fDtLQRJUuy9e2+SVjvCuczyj5FpfE2uIZb4gAHEn+CA=
Subject key identifier:   F7:E3:07:60:6B:EB:47:7A:41:95:2B:8E:55:38:22:6F:E6:6B:7E:9D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7ACE8AE83E424D75D1D0B1E1D3240887D8B9FBCE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59664a97-7a86-420c-a977-c7e06b2c9750.roa
Signing time:             Fri 23 Oct 2026 02:20:08 +0000
ROA not before:           Fri 23 Oct 2026 02:20:08 +0000
ROA not after:            Thu 21 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        119.13.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ce:8a:e8:3e:42:4d:75:d1:d0:b1:e1:d3:24:08:87:d8:b9:fb:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 23 02:20:08 2026 GMT
            Not After : Jan 21 23:59:59 2027 GMT
        Subject: serialNumber=04e3a14d23c93d5587423a147ed084982175f71e96343338cb8a82d9ec06e68a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ba:6c:d6:2f:ee:6b:55:83:8d:65:6f:ac:7c:
                    f8:fe:0b:6a:4a:9b:7e:db:88:15:58:0f:d6:d8:59:
                    9f:0c:47:22:b3:ff:db:17:bf:33:05:a9:05:33:2a:
                    c7:0b:33:ab:e0:45:af:b8:3d:f3:d6:97:10:c0:a3:
                    8f:1d:df:f4:61:02:26:70:84:05:b4:fb:38:b9:d8:
                    52:70:7c:b2:98:f8:e4:69:74:86:1d:96:3c:e0:7f:
                    32:08:a2:10:ee:81:01:54:81:4e:3a:40:15:ce:3d:
                    ef:44:7e:0d:b3:f5:7c:25:b8:79:c8:af:92:73:60:
                    c8:01:57:94:95:c7:2c:7e:db:06:5f:3f:c0:e9:0a:
                    62:73:d9:96:5b:5d:e8:b2:c7:fc:0f:b9:10:d9:23:
                    19:79:3a:0c:20:bd:60:3c:73:4a:ec:ad:1f:56:6d:
                    ad:36:b6:6a:ac:5f:ee:fc:1e:75:39:03:c5:7d:72:
                    74:ef:e4:5b:35:4f:32:e7:43:12:3f:27:ac:4a:03:
                    8a:c2:f1:72:92:62:ce:2a:bb:0f:8e:ac:52:a9:31:
                    ad:73:53:f3:29:76:1d:c8:7f:cc:ef:8e:37:7b:70:
                    35:76:b5:ba:83:ef:47:b1:d8:04:9c:93:17:db:ef:
                    65:8f:69:c2:7a:bb:37:31:66:dc:52:f2:5d:91:34:
                    ba:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E3:07:60:6B:EB:47:7A:41:95:2B:8E:55:38:22:6F:E6:6B:7E:9D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59664a97-7a86-420c-a977-c7e06b2c9750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.13.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:67:4d:da:08:9a:20:bf:41:b8:91:7b:84:bf:69:65:75:d5:
         4b:7d:b9:9d:72:c4:a4:f2:a6:fc:0a:cd:07:d9:6f:f8:f7:13:
         6c:84:11:2c:7a:a2:a3:79:d3:50:9e:fe:24:22:15:bc:58:b0:
         91:42:38:b4:62:d3:0d:0e:e2:69:62:9d:8a:0d:c3:77:fe:cd:
         ac:44:7f:4c:3b:45:37:21:59:4b:36:c8:fb:e8:16:08:0b:d6:
         75:5f:65:e4:11:a8:52:36:cb:c9:7a:c3:31:99:bc:35:76:77:
         af:ea:ac:b2:86:8e:19:d7:a6:f3:85:5a:77:ff:11:2a:a3:d3:
         58:a1:00:e1:49:aa:4d:84:25:29:f4:b7:80:e6:fa:ec:db:01:
         64:1a:34:cb:72:f8:e7:79:27:11:4b:18:62:78:e9:a2:37:45:
         0d:ad:ff:8b:a7:b3:ef:68:68:97:16:78:35:7c:b9:9e:df:24:
         d1:3a:36:39:02:13:0f:bd:f2:70:d4:8f:81:c4:eb:0d:a8:71:
         4b:4a:4b:5c:d4:9e:17:45:5b:25:f8:41:ad:4e:fd:02:6e:6c:
         39:aa:23:6a:88:3f:d5:62:29:8e:9f:59:f0:ec:56:a4:43:ee:
         a6:94:5f:67:75:2c:4a:73:7f:d9:81:40:be:8d:ff:52:98:ec:
         0e:67:44:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:37:17 2026 by rpki-client