Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60d271b6-3ddb-49a6-b8e0-650dcdf5b49e.roa
File:                     60d271b6-3ddb-49a6-b8e0-650dcdf5b49e.roa (raw, json)
Hash identifier:          7gH/pR6OKeyNPCiT12TYqtxOndK/ZgIoAwy/WyRdpRI=
Subject key identifier:   37:04:E0:5A:11:6F:6F:31:65:26:63:BB:6E:B8:66:1F:CD:83:A5:9D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       647A193ACA8A9E3078022B87A7198D72CB3DD86F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60d271b6-3ddb-49a6-b8e0-650dcdf5b49e.roa
Signing time:             Tue 04 Aug 2026 00:40:45 +0000
ROA not before:           Tue 04 Aug 2026 00:40:45 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        110.238.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:7a:19:3a:ca:8a:9e:30:78:02:2b:87:a7:19:8d:72:cb:3d:d8:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 00:40:45 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=269a03ab78dea303e76a33ce4496cd488ff4137013c89ab390474a85c96f7bd0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:55:6d:75:d6:e1:bc:d4:aa:f2:c6:56:11:c4:
                    d6:68:36:8b:36:58:82:3f:6a:d1:46:d5:6e:5f:01:
                    b8:c1:69:79:91:a6:ad:61:03:ad:04:bc:17:82:6a:
                    87:69:51:93:4b:a6:7d:a5:04:af:cb:7b:d0:2e:66:
                    34:1b:aa:f3:bb:ca:1f:10:aa:f4:f0:29:d2:90:a9:
                    5d:cd:a4:3f:f3:6d:4c:15:d7:30:c3:c4:dd:5b:93:
                    ed:fe:51:4d:c7:11:2b:c1:d9:92:c9:04:fb:ba:bf:
                    62:96:86:46:b8:e7:1c:45:a0:a7:cc:7a:0a:e0:ec:
                    60:88:d3:ff:7b:ad:0e:e0:ce:13:eb:ba:1e:4e:e7:
                    39:b1:50:26:57:e2:64:c5:e3:52:91:af:f3:f2:be:
                    ab:0e:4d:a4:82:d2:30:db:f1:97:e6:5b:0e:8b:31:
                    e1:41:bc:4e:12:27:2b:af:4f:ce:f1:3a:c2:3c:eb:
                    42:98:a7:da:83:53:f2:29:f3:17:a7:24:1d:a5:bc:
                    4c:3f:d2:64:9e:45:e2:80:71:42:22:c0:29:a7:5a:
                    57:03:69:06:41:ba:a7:df:fb:fa:56:fc:e7:c0:97:
                    c4:ac:87:22:38:70:84:7d:7c:fa:ea:f5:d2:9b:19:
                    cd:9b:04:55:4e:14:02:11:1e:56:ee:04:92:8c:58:
                    4c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:04:E0:5A:11:6F:6F:31:65:26:63:BB:6E:B8:66:1F:CD:83:A5:9D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60d271b6-3ddb-49a6-b8e0-650dcdf5b49e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.238.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:99:a3:83:48:48:86:5a:14:9a:44:1d:b0:1b:db:80:df:80:
         70:bc:d6:b8:35:3e:cc:b0:41:60:13:f9:72:99:9a:b7:c4:d9:
         17:f2:38:6d:bd:a1:8a:65:9a:a4:a4:c2:66:35:c8:e2:9b:0e:
         71:c9:e3:f3:4e:b9:eb:6a:21:ac:04:32:2e:8b:d2:64:d7:d1:
         f2:29:f1:c4:20:1a:21:35:b5:eb:32:b5:cf:84:a7:07:85:a8:
         96:99:21:2b:24:2a:c8:67:2a:74:4d:94:e9:26:56:c1:ad:99:
         ba:25:16:ab:3a:84:75:b5:91:99:58:d3:2e:d0:0b:cb:ac:5b:
         ff:f4:56:ad:08:52:15:42:f3:2b:1e:62:98:a5:20:f3:d5:6b:
         6b:02:62:7b:cd:6f:86:a8:6d:00:eb:cf:d2:5b:ef:b2:7b:ed:
         21:83:ef:95:9a:80:a3:db:e4:84:2d:3e:ab:2c:2a:ca:a0:10:
         2a:33:30:ec:9d:93:3f:5e:94:9e:1d:ff:cc:ee:13:7f:a8:b3:
         30:03:4c:3c:f0:80:0a:30:45:7b:12:a7:ff:9c:05:01:1d:6e:
         65:de:7f:90:b4:af:73:54:19:d5:ad:3c:46:3c:55:24:8d:5a:
         ad:88:57:e9:d9:f8:9f:97:9f:a5:1f:d2:d1:c1:28:e3:c7:b2:
         0d:50:64:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 19:17:58 2026 by rpki-client