Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c8983ed-f974-40d9-a655-88644fc75ec2.roa
File:                     6c8983ed-f974-40d9-a655-88644fc75ec2.roa (raw, json)
Hash identifier:          7iOE11IoW1/BqQ3jU5hk6Lg4+Jctmd5S+M0/iujRhI0=
Subject key identifier:   44:81:8F:39:CA:54:0C:01:39:27:68:82:CF:B7:DD:2D:52:AB:74:35
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7AE6AA014FC45414931F6395B8B614921287B382
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c8983ed-f974-40d9-a655-88644fc75ec2.roa
Signing time:             Thu 08 Oct 2026 00:11:07 +0000
ROA not before:           Thu 08 Oct 2026 00:11:07 +0000
ROA not after:            Wed 06 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        198.151.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e6:aa:01:4f:c4:54:14:93:1f:63:95:b8:b6:14:92:12:87:b3:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:11:07 2026 GMT
            Not After : Jan  6 23:59:59 2027 GMT
        Subject: serialNumber=25830fdc7e5d0d15d228067300c4827cdd51960dafd70a8da74dc42e21bf28e4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:db:5a:95:72:5f:bb:a0:26:b4:59:60:22:bd:
                    c7:f5:09:55:65:66:8d:d1:c8:f2:72:56:5d:59:42:
                    d1:aa:1d:4d:b9:57:9a:fb:60:8e:30:30:b2:9c:2a:
                    76:ce:ff:bd:eb:80:8c:62:4e:2e:dd:ea:34:4a:2b:
                    94:02:33:c1:a9:c7:d6:d9:79:82:e6:b2:8a:15:5e:
                    31:59:a0:6a:0b:7a:00:ca:e4:17:1d:8e:26:8a:c2:
                    0f:4b:41:90:d9:71:b8:0f:ef:6f:e4:15:22:b9:4b:
                    39:0d:02:e5:b2:2f:49:7f:05:cb:a6:40:df:f2:07:
                    cf:03:0f:78:bc:db:de:8e:5c:4c:41:af:74:f9:12:
                    06:f6:da:fa:b4:6b:83:80:20:5c:40:88:ef:68:4f:
                    b3:ac:0a:c2:2d:70:76:11:47:42:fd:32:91:1e:d6:
                    93:1e:7f:5b:b7:fc:42:93:30:e2:f3:9d:10:b8:84:
                    26:f7:0f:3b:79:f6:87:d1:de:94:b6:62:4f:ff:26:
                    5d:b5:b2:ba:4c:05:9d:2e:c7:b6:a5:69:97:df:a9:
                    2e:f0:b5:f2:f7:e1:e3:af:d6:01:f9:90:cb:8f:8d:
                    29:89:91:e9:cc:39:76:ad:6a:88:c4:0f:d6:33:de:
                    24:36:de:7b:f5:15:f8:f0:e4:01:ea:07:2f:d7:5b:
                    bd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:81:8F:39:CA:54:0C:01:39:27:68:82:CF:B7:DD:2D:52:AB:74:35
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c8983ed-f974-40d9-a655-88644fc75ec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.151.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         47:53:c1:f5:06:e1:0b:67:1f:5e:51:34:60:c1:df:e9:1e:90:
         09:1c:14:2a:fe:f9:0a:cc:f6:0d:1c:e9:66:b9:84:73:a0:00:
         ca:11:a8:bb:8a:2b:94:ea:bd:22:fb:ed:2a:ef:92:8a:25:cb:
         26:e4:60:fb:15:e5:49:17:15:af:d9:3d:67:47:2d:4d:c2:2a:
         02:10:8c:f6:aa:02:02:25:c2:b4:e9:6d:66:d2:5b:94:d9:d6:
         f2:ce:6e:14:0a:95:c4:39:16:74:5a:b2:c4:b8:ba:8d:08:cd:
         29:4c:eb:36:08:fc:77:92:cf:12:b9:24:06:69:7c:17:29:4b:
         ff:ef:91:49:8b:fa:83:72:17:a2:a4:26:21:53:46:86:0b:0e:
         74:ba:f6:2e:8e:1f:3a:96:20:c4:29:c5:e7:0a:70:e0:14:fc:
         92:aa:b4:c4:16:10:ad:10:4d:57:44:2b:c9:d4:e7:e6:dc:67:
         16:98:0d:f2:ea:09:60:c8:92:d0:dd:d9:dd:13:33:05:48:bb:
         32:73:38:dd:d1:20:60:25:4c:d4:99:35:78:f5:88:fb:1c:63:
         5e:de:39:5e:6c:3e:85:b8:a9:ec:2f:4e:07:1e:ba:c5:e4:f1:
         82:24:9b:29:e8:62:25:f5:5c:f2:e8:31:8a:0d:d1:ea:0c:10:
         43:ad:f5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 12:02:50 2026 by rpki-client