Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c6c419c-e8ef-461b-8110-169dc4c8bbba.roa
File:                     5c6c419c-e8ef-461b-8110-169dc4c8bbba.roa (raw, json)
Hash identifier:          MSlPiWdPqOuUqp6Mz9l/Cg5n1jw8o82Yb1/K2Ewka/c=
Subject key identifier:   58:24:06:B8:EC:EA:F3:3B:5B:29:96:25:B1:FA:9F:99:EA:E0:F2:66
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       30F329F4A4595D6EE14764B1D3B8E2B83B1E0DCE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c6c419c-e8ef-461b-8110-169dc4c8bbba.roa
Signing time:             Sun 11 Oct 2026 00:11:42 +0000
ROA not before:           Sun 11 Oct 2026 00:11:42 +0000
ROA not after:            Sat 09 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        13.154.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f3:29:f4:a4:59:5d:6e:e1:47:64:b1:d3:b8:e2:b8:3b:1e:0d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 00:11:42 2026 GMT
            Not After : Jan  9 23:59:59 2027 GMT
        Subject: serialNumber=3f88371d24824f15a5ebb836419f651f7d0b1b78e491462b254e8b9836a6a137, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c7:5e:92:92:28:70:f1:48:55:59:69:a4:d6:
                    c7:00:14:21:ad:51:8b:af:11:58:82:c1:f8:0d:d0:
                    2d:ee:21:32:e4:98:24:b4:48:42:a8:bd:47:8d:b2:
                    30:24:5c:18:8a:a2:f5:88:14:f5:bb:95:fc:90:85:
                    2b:ca:81:b0:b0:d2:47:a1:f3:48:fc:25:1d:2a:98:
                    86:3d:cf:3f:a1:a7:ca:d8:0f:49:df:24:59:49:84:
                    c2:d4:f0:06:72:2f:56:84:3b:09:a3:73:f0:05:fd:
                    55:46:e0:a7:30:9c:61:b1:b2:db:b1:95:a5:23:b2:
                    46:21:71:e9:b7:30:3b:dc:42:89:dc:02:26:78:08:
                    c8:3f:a0:48:7b:ba:e4:b5:0e:e8:84:5b:c8:dc:f3:
                    d8:11:7c:9e:a6:a3:47:c1:50:49:b9:a3:d9:36:d2:
                    26:2f:ca:41:37:39:d9:a4:91:a7:0a:ca:92:c9:d0:
                    86:b1:bc:4f:f9:7b:fd:de:7a:cb:e3:4c:7c:3e:ab:
                    63:83:da:b2:fc:9a:43:28:28:65:da:5c:fb:96:eb:
                    66:ac:9b:2b:9e:69:ee:80:14:eb:a9:23:6b:f3:2c:
                    db:62:cc:b8:f5:07:c3:73:c3:47:d8:d1:54:0b:3f:
                    f2:cc:bc:a6:a2:eb:6f:8d:6f:59:3a:fa:cb:5e:36:
                    45:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:24:06:B8:EC:EA:F3:3B:5B:29:96:25:B1:FA:9F:99:EA:E0:F2:66
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c6c419c-e8ef-461b-8110-169dc4c8bbba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.154.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         20:22:04:cd:8f:79:1f:c8:d8:70:62:8c:26:66:43:35:7d:20:
         4d:11:ca:45:1c:8f:2b:2d:62:ac:f0:e8:a4:55:d5:dc:cb:ec:
         4d:d6:1e:29:78:36:56:df:68:6c:c5:80:b7:f1:61:72:03:b3:
         9b:b4:cb:bd:fb:68:54:bb:8d:5b:fe:f8:5d:27:31:95:c2:0d:
         34:7d:f0:24:49:c1:bc:ea:13:04:90:25:d4:3b:e4:50:6e:18:
         42:16:f6:df:14:fc:7e:54:25:05:b4:0a:6f:47:48:2f:4a:f1:
         75:50:41:f0:1d:91:65:a6:a1:79:14:47:31:b8:d7:ed:4c:22:
         76:f7:ce:d8:d7:68:6f:f1:a7:bd:fa:72:fc:be:a1:7d:fd:58:
         b9:11:8e:5f:c9:0a:4f:94:a5:ba:0a:69:94:6b:b7:26:b1:73:
         75:9e:2f:7f:06:92:08:70:76:2d:db:f0:43:05:34:27:4f:cd:
         bd:4a:a3:15:0a:bd:85:7d:87:43:8d:ec:3f:8f:e5:1e:4d:90:
         6a:c3:4d:37:76:5e:2d:dd:25:14:f2:db:1a:fe:fc:c5:70:5f:
         78:0e:af:9c:f9:68:4e:71:c6:31:b2:ba:a6:64:ce:43:88:05:
         d5:09:c7:41:86:ce:ea:31:28:c4:be:ab:be:e7:77:d7:de:f4:
         4d:1a:67:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 02:07:45 2026 by rpki-client