Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fcb89e7-3cc6-4700-a44c-4dac06779d65.roa
File:                     5fcb89e7-3cc6-4700-a44c-4dac06779d65.roa (raw, json)
Hash identifier:          nQWRuFtNvwPvJJQnGAz1nK25KF24fizpz3BlWgMi7Ro=
Subject key identifier:   E9:43:EB:B9:71:DC:7F:41:62:F0:0B:FF:56:4D:2C:3F:82:CF:95:C0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2BCB6A466F729CB5C79BFB382B4F9EB778503CB6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fcb89e7-3cc6-4700-a44c-4dac06779d65.roa
Signing time:             Fri 09 Oct 2026 01:11:43 +0000
ROA not before:           Fri 09 Oct 2026 01:11:43 +0000
ROA not after:            Thu 07 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        16.56.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:cb:6a:46:6f:72:9c:b5:c7:9b:fb:38:2b:4f:9e:b7:78:50:3c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  9 01:11:43 2026 GMT
            Not After : Jan  7 23:59:59 2027 GMT
        Subject: serialNumber=8aceab714b7a8c3ee94d913acaee4044bf614a5d4c0cb3b5aa36352444d0b186, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:09:41:5d:00:1f:62:1e:7a:8e:22:00:66:88:
                    fb:13:ce:8c:5b:f9:58:dd:a1:d5:0b:83:c9:43:14:
                    e8:e8:dc:d5:85:5a:75:74:29:88:64:84:d8:a5:36:
                    b5:57:69:4b:b2:ec:1f:83:df:fc:86:f0:34:72:37:
                    f7:cd:d9:4f:7a:d3:15:ed:50:68:5f:1c:6a:7e:cc:
                    17:be:a9:ae:44:89:7a:c0:3a:dc:72:09:00:b0:47:
                    26:20:61:31:d1:05:0b:44:8b:6d:97:02:f4:4d:a7:
                    32:62:e9:90:9e:14:ba:1c:15:c8:38:69:69:a5:ab:
                    da:98:25:d9:ea:4e:1f:50:ac:08:47:7f:a6:8e:66:
                    8f:f0:6b:99:6d:56:5f:fa:91:0b:1f:5d:29:03:d7:
                    33:7b:e9:57:09:97:42:73:af:77:1c:dd:55:3c:c4:
                    67:46:60:d8:53:77:5e:e1:38:d0:2e:26:70:21:73:
                    17:58:a6:a2:71:6f:fc:49:f2:6a:25:7a:4d:4e:c9:
                    82:fd:9c:ed:71:9b:86:70:9e:f6:8d:ef:f4:44:7d:
                    9d:c9:62:fa:96:bd:16:4f:a2:cd:76:00:c7:56:d7:
                    67:ea:43:d2:9a:cf:8b:f0:0d:db:42:5c:ca:dd:02:
                    a9:24:79:32:04:b9:6b:5f:83:7e:17:aa:2e:68:12:
                    fd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:43:EB:B9:71:DC:7F:41:62:F0:0B:FF:56:4D:2C:3F:82:CF:95:C0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fcb89e7-3cc6-4700-a44c-4dac06779d65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.56.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d8:03:d2:76:ae:06:e9:74:bf:73:6d:7e:48:84:2d:54:fd:08:
         14:4e:0b:e9:7d:8b:87:11:86:f6:dc:e4:b9:63:89:d0:22:2a:
         7c:19:2a:43:86:03:3a:04:1c:48:6d:27:24:6e:f3:63:ab:ab:
         0a:76:ab:f1:94:f8:5b:e2:84:eb:cc:70:91:7b:8b:16:1b:00:
         bd:33:9e:fa:5c:47:5c:b9:26:35:d3:a2:85:7a:ea:1a:11:23:
         97:50:d4:08:b0:c6:2f:1c:e6:6a:bb:81:c8:c8:8f:1a:13:d0:
         c9:b9:b7:4c:fe:f9:c9:e4:e6:9e:54:6c:fb:3b:90:8a:2b:c7:
         6d:d1:bd:b1:ae:75:5f:0e:d1:d8:92:6f:51:28:a1:87:55:7f:
         09:cd:27:79:36:e4:bd:b7:a3:eb:af:3d:04:e8:31:94:66:d4:
         be:a2:54:50:f3:dd:67:d1:b4:14:37:a5:d1:7d:77:53:83:0a:
         f2:ab:37:9e:e8:18:e1:27:5d:ff:4f:be:bf:6c:a2:c8:5a:96:
         c5:f8:a9:7d:b2:fb:74:24:68:e0:e6:57:3a:a0:13:51:a4:8e:
         ed:49:60:4f:c6:c5:ba:e3:b0:b9:e2:d6:2c:34:12:0a:ad:45:
         77:dd:a5:c5:ab:ed:87:e8:b9:00:f1:22:65:74:42:31:44:6c:
         88:19:13:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:01:17 2026 by rpki-client