Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b18b0a3-182e-4e59-80f8-a548d4632181.roa
File:                     5b18b0a3-182e-4e59-80f8-a548d4632181.roa (raw, json)
Hash identifier:          PLiMcGmPOxH+HIuULNPo/km1eSZfvEKdBeZGZfvB1sM=
Subject key identifier:   A4:4B:62:AF:96:54:71:25:EE:27:D3:C2:FE:82:3D:05:00:19:99:EC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       529C1D513DBB5D60491958C88CA48A4131EEC109
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b18b0a3-182e-4e59-80f8-a548d4632181.roa
Signing time:             Tue 06 Oct 2026 00:31:19 +0000
ROA not before:           Tue 06 Oct 2026 00:31:19 +0000
ROA not after:            Mon 04 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        63.184.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9c:1d:51:3d:bb:5d:60:49:19:58:c8:8c:a4:8a:41:31:ee:c1:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 00:31:19 2026 GMT
            Not After : Jan  4 23:59:59 2027 GMT
        Subject: serialNumber=5b667a2f0b37fd0f17653919bd2fcf4052185c7a625f51dd4ae03c4559b1a390, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:71:0f:be:3c:6a:07:2e:45:10:14:db:45:bd:
                    52:9e:50:81:a7:be:a9:7e:c1:22:58:70:2d:77:2b:
                    8a:90:86:38:32:a3:b5:12:6b:63:aa:44:dd:72:3a:
                    d0:ef:fb:4a:1e:9b:05:47:a5:30:2f:d6:b7:09:ef:
                    be:20:a3:03:61:f6:52:5e:a7:e9:10:7d:87:33:cd:
                    68:a9:bd:7d:58:a5:e6:2b:4f:61:5a:35:92:41:ea:
                    a4:30:ad:b8:ea:e5:6b:aa:f3:88:d5:64:28:c0:b7:
                    b0:19:d0:9e:6f:e1:ae:31:ca:be:9f:71:83:27:06:
                    bc:86:ee:12:35:e0:a5:f0:4f:e0:29:76:72:85:89:
                    0a:16:9f:58:2c:4e:a5:ca:40:49:62:d0:ac:3f:3e:
                    92:05:c4:0e:27:86:3e:60:ff:d8:d4:45:1c:53:27:
                    fc:bb:1b:9e:8d:db:3f:5e:e0:38:d7:12:6d:0c:99:
                    3d:12:35:6f:a6:fd:07:71:04:7f:32:66:d1:7d:50:
                    3d:54:11:13:b3:1f:4a:78:10:73:80:db:3e:4c:ad:
                    e4:c2:bc:df:6d:10:3e:11:f2:ea:0d:68:04:d0:89:
                    de:b0:53:8c:6a:74:ba:cd:70:59:39:8b:9a:a2:5e:
                    f4:f1:ad:97:43:39:fd:d6:99:6c:4d:fe:60:85:47:
                    86:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4B:62:AF:96:54:71:25:EE:27:D3:C2:FE:82:3D:05:00:19:99:EC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b18b0a3-182e-4e59-80f8-a548d4632181.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.184.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         d7:38:37:84:84:81:80:35:65:36:10:40:7f:79:b0:31:af:33:
         e5:85:d0:38:3e:47:4e:65:58:43:09:b6:1b:ac:9c:b4:47:d4:
         47:3e:08:9d:6e:cb:ec:11:54:dc:8b:ab:6d:02:74:53:df:0a:
         a0:cf:5a:39:4b:ab:98:53:14:90:75:31:21:c3:2b:1d:b6:7c:
         ae:33:b5:d0:1f:3a:ce:c7:a9:74:fd:80:40:9d:c4:04:4e:6c:
         84:c0:b4:3b:a4:33:d1:75:24:1a:a4:c5:06:0f:a6:7f:2f:60:
         bf:c0:b9:f1:b2:61:80:b1:09:4a:2e:7e:f9:6a:49:b6:3d:9f:
         0f:30:84:44:07:11:94:38:af:f8:b7:27:aa:96:73:7d:80:a2:
         91:f8:23:7e:5d:5a:0a:d5:0a:50:b8:eb:84:b3:b5:8b:0f:cb:
         67:61:5b:58:c2:0c:8f:81:47:9d:dd:16:fe:1b:21:1e:f0:88:
         34:db:3a:b3:a8:d0:39:e3:6a:40:05:19:e3:80:e5:14:bc:dd:
         28:b0:83:18:2c:b0:83:52:53:31:ba:42:db:98:20:04:1d:23:
         16:e6:0d:34:c9:f5:8e:4a:d0:0d:c0:8d:51:d1:9b:39:d6:c7:
         3a:d3:27:e2:4f:10:dd:26:32:c0:b9:c8:13:05:63:fb:40:0f:
         e8:9a:66:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 21:08:15 2026 by rpki-client