Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6321f05f-7ab7-4cd1-aaf8-202dd87be70f.roa
File:                     6321f05f-7ab7-4cd1-aaf8-202dd87be70f.roa (raw, json)
Hash identifier:          sIv7ANznhj4JLoAHDgLnkfS6NF6ZZ50C6X23o0V35p8=
Subject key identifier:   9D:AE:55:5C:95:EE:5C:8C:0F:C8:93:32:24:C2:F5:D3:F1:F0:09:D0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       260E076FDE316F9FA805037EBFA72D225D7C7A31
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6321f05f-7ab7-4cd1-aaf8-202dd87be70f.roa
Signing time:             Thu 17 Sep 2026 06:23:27 +0000
ROA not before:           Thu 17 Sep 2026 06:23:27 +0000
ROA not after:            Wed 16 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        70.132.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:0e:07:6f:de:31:6f:9f:a8:05:03:7e:bf:a7:2d:22:5d:7c:7a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 17 06:23:27 2026 GMT
            Not After : Dec 16 23:59:59 2026 GMT
        Subject: serialNumber=3cf3a75b37f72aa7ec97c9ddc2a0319696b78ec79df33fc26b54edf12d132d06, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a2:d7:a8:51:16:44:40:64:55:c8:3c:5a:e7:
                    e5:ab:0d:7f:5f:2f:29:5e:de:62:ad:7a:b7:06:c1:
                    49:07:ef:d7:11:be:b4:bb:7c:c5:31:d0:10:75:f6:
                    45:be:44:7b:2f:b9:e9:45:d3:a1:4e:54:9b:1d:fe:
                    c3:52:a3:f0:45:0f:06:fd:50:b4:cd:fe:53:57:ff:
                    38:93:78:01:60:c4:38:61:1b:6e:08:49:da:b5:8b:
                    ae:a4:dd:ec:ae:c6:d6:ee:6e:ef:cd:cd:d4:82:8e:
                    63:a4:75:b6:73:8b:a3:cf:7c:ec:57:97:47:47:0b:
                    33:5d:0f:6d:b6:fd:3e:39:a2:e3:5e:ad:0b:46:ef:
                    9d:ce:a4:12:fe:f5:03:19:37:58:d9:25:15:25:d5:
                    81:81:40:ef:ae:1d:3d:83:4f:eb:18:59:bc:66:13:
                    fe:dd:6c:ec:f5:1d:2d:b2:e6:52:7e:ff:14:7b:c5:
                    e2:bc:1a:4c:5a:f4:61:1b:62:8b:e3:5d:e4:8e:a6:
                    e5:05:f6:e9:0c:47:c1:27:1f:fd:20:dc:59:f3:de:
                    2f:b5:d0:a3:ff:89:23:28:a4:d8:e0:10:6f:34:e1:
                    f3:bd:64:a0:07:60:03:24:19:52:64:b2:54:dd:f3:
                    53:77:c4:2f:b5:03:e5:e9:d6:2d:c6:a5:1b:e6:8f:
                    29:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AE:55:5C:95:EE:5C:8C:0F:C8:93:32:24:C2:F5:D3:F1:F0:09:D0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6321f05f-7ab7-4cd1-aaf8-202dd87be70f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.132.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:14:d2:59:e6:88:df:bf:d6:bd:12:7c:57:10:95:c7:bf:74:
         27:b7:36:ef:18:47:e7:d2:be:5b:10:d8:ac:ff:cc:ac:b6:1f:
         24:34:49:ba:e4:0b:c3:30:05:8e:c3:f4:2d:8a:a5:4c:4d:9a:
         68:e9:80:a2:5e:01:cf:90:12:1c:ad:1c:75:35:c5:e1:da:36:
         47:5c:80:c3:7c:02:9f:72:32:44:ba:ba:23:b8:a2:76:43:19:
         d0:bf:55:6e:ee:e5:28:27:a6:9f:40:33:db:6b:f1:89:f0:44:
         3f:35:26:0a:5d:65:48:07:bc:29:70:29:62:df:b4:6e:76:57:
         22:1a:da:a0:44:be:c0:69:e7:a5:38:59:fc:bc:e5:39:bd:ae:
         10:0f:6e:a2:e5:92:fb:12:ba:9f:a5:93:de:12:d2:2a:7c:97:
         75:52:f1:2e:1b:0f:76:01:b1:5d:a1:39:cf:4d:2e:04:ed:f0:
         a6:89:1e:fd:47:50:88:7b:d6:5e:70:9e:2f:8a:a2:6a:4d:a1:
         eb:f0:69:09:42:14:c4:c3:5e:3d:78:e4:c0:1d:f8:e7:88:df:
         5a:4e:26:39:58:50:f5:aa:fd:28:61:0e:f3:cb:66:07:0c:ef:
         13:01:74:fd:da:9b:fb:01:e8:67:d7:3a:db:ee:8c:c1:ae:f2:
         4e:4a:81:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 17:01:55 2026 by rpki-client