Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/630b64f9-b9e9-46e7-b8e4-8ea7c44a1a15.roa
File:                     630b64f9-b9e9-46e7-b8e4-8ea7c44a1a15.roa (raw, json)
Hash identifier:          cjcbAcuT4CUpYx11b/ZY4QxHhjsSwyZH4aBTlgqJWTo=
Subject key identifier:   80:F8:E2:67:71:46:FC:F0:98:DB:3D:F3:7E:0E:54:F6:A6:AC:A9:D1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       59F00ADD95C75C3C04B4466CAD42ED3820603AC6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/630b64f9-b9e9-46e7-b8e4-8ea7c44a1a15.roa
Signing time:             Mon 05 Oct 2026 00:30:40 +0000
ROA not before:           Mon 05 Oct 2026 00:30:40 +0000
ROA not after:            Sun 03 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        16.87.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f0:0a:dd:95:c7:5c:3c:04:b4:46:6c:ad:42:ed:38:20:60:3a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  5 00:30:40 2026 GMT
            Not After : Jan  3 23:59:59 2027 GMT
        Subject: serialNumber=5b67f5619e46fd13e103a516e06cbc7109d1e7c5d09e223476e385b47a953381, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:66:73:35:0d:ee:81:34:07:12:26:91:2e:40:
                    ce:8e:70:d1:ae:a0:6f:c8:2f:f4:84:bf:e6:5e:21:
                    9f:08:4a:7f:89:20:38:fe:6a:96:14:74:0c:84:49:
                    2c:22:b4:86:d6:c9:7a:bb:13:d2:26:35:cb:96:76:
                    fc:7b:08:98:7a:4b:0f:f7:77:8e:f6:01:22:2d:e0:
                    ed:8d:39:6b:f0:37:1f:57:9f:53:93:be:96:f2:1e:
                    6a:a1:de:87:97:80:8c:75:2c:e6:ab:e4:f6:30:5c:
                    05:32:85:11:a2:74:ca:99:be:ba:09:dc:10:74:68:
                    64:91:d6:3e:99:16:56:40:52:39:3f:8d:f3:a1:5e:
                    63:32:0b:eb:90:7d:e3:26:75:d4:0b:d9:c8:a8:02:
                    3b:8e:de:d1:b6:dd:c0:9c:e2:5b:99:3b:c1:33:91:
                    0a:c0:7b:4c:61:9d:03:fe:4f:11:16:a9:8a:c3:0b:
                    da:f3:ad:08:09:7d:eb:b0:58:de:c6:da:46:53:bf:
                    6b:28:12:3b:92:59:99:10:76:c5:1d:6a:02:8b:e5:
                    a4:b2:a2:1e:bb:f2:b7:b0:c9:c0:69:ce:9e:9c:df:
                    f0:dc:b2:5f:ca:5e:9a:86:da:9a:eb:3b:83:ca:7b:
                    86:d9:53:a7:b6:b4:93:61:b3:df:62:6b:da:74:a4:
                    39:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F8:E2:67:71:46:FC:F0:98:DB:3D:F3:7E:0E:54:F6:A6:AC:A9:D1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/630b64f9-b9e9-46e7-b8e4-8ea7c44a1a15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.87.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         55:d9:47:53:13:88:1d:c4:42:a2:2b:f6:bf:b1:d4:39:a2:62:
         8d:1f:35:0b:dd:0f:9c:ff:00:21:cb:5a:89:54:c1:24:a7:28:
         a2:b9:97:16:38:f1:c1:99:6b:83:cf:ee:c4:d0:6b:b9:26:3e:
         c6:a6:19:86:6a:09:dc:9a:88:58:79:2a:b5:ba:2d:8c:05:50:
         7a:4a:1b:ea:2a:f9:93:2c:b7:ac:78:59:c9:92:7b:9b:03:c0:
         3e:62:91:1b:eb:b7:f0:1d:29:07:91:e1:58:91:74:27:c8:64:
         c5:8c:80:9a:5f:ba:b4:4e:7c:aa:fc:64:c7:02:1e:23:f3:71:
         03:32:67:5a:40:20:3d:47:ed:47:85:de:0e:ce:73:ad:a6:36:
         b5:d5:c7:46:32:36:e3:86:a5:73:5a:4c:dd:09:95:12:ae:39:
         1b:62:c5:d6:55:a7:97:9b:d4:c0:22:3c:b8:0a:92:46:cd:a5:
         e5:69:99:0f:0c:49:0f:71:29:5a:ad:49:5e:39:6d:bb:14:a6:
         e3:05:6b:2c:5e:a8:7d:5c:b3:0b:e2:97:50:cc:8d:82:8e:47:
         71:98:8c:de:bc:90:41:a2:98:12:e6:f3:d5:4d:12:d9:fe:55:
         0d:ba:59:55:05:03:bf:f4:9b:4b:ae:cb:3a:f4:88:55:6f:d1:
         c4:1d:92:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:03:54 2026 by rpki-client