Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/706dffb0-7b8e-4378-9a39-1aa47bf5cd9d.roa
File:                     706dffb0-7b8e-4378-9a39-1aa47bf5cd9d.roa (raw, json)
Hash identifier:          qNIjOyMMlBPFDeHOUE0vWSCAb0wltsLUGxcUftYLCi8=
Subject key identifier:   9D:ED:BD:E6:6A:3D:88:DE:CE:88:C5:9B:00:20:6F:2A:94:9F:F9:84
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       45D69D281978F66D365F4F0B0CE708D74D92F8F4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/706dffb0-7b8e-4378-9a39-1aa47bf5cd9d.roa
Signing time:             Mon 19 Oct 2026 01:41:25 +0000
ROA not before:           Mon 19 Oct 2026 01:41:25 +0000
ROA not after:            Sun 17 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        83.160.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d6:9d:28:19:78:f6:6d:36:5f:4f:0b:0c:e7:08:d7:4d:92:f8:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 01:41:25 2026 GMT
            Not After : Jan 17 23:59:59 2027 GMT
        Subject: serialNumber=055f527acd05e0edef94874faf2edb5c286aeeeb7b7cc96a4a8c18089e2d46a7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e4:f0:3a:7e:10:e9:76:ab:13:84:c3:40:1d:
                    bf:a6:d7:df:e3:60:9c:6a:31:36:f1:f1:80:63:f8:
                    73:c6:e2:23:ff:b3:b5:5a:7f:47:9c:7e:44:f2:7a:
                    a7:73:54:c9:44:0e:24:fd:80:73:4f:8c:23:7c:a4:
                    96:5f:d0:37:60:f6:2d:12:19:2b:6b:ed:c8:18:8f:
                    bc:1e:73:cc:c6:fa:77:ea:12:b4:b8:40:eb:98:1d:
                    a3:0a:e9:67:91:0b:0e:b2:a5:1e:44:65:50:ec:1d:
                    9c:50:6e:68:90:76:00:92:31:d0:47:a8:7b:2b:fe:
                    8a:05:73:29:dd:35:bb:c3:42:0d:02:a4:1e:3f:1b:
                    81:cd:bf:e0:9e:6b:f1:c0:ab:59:17:98:69:6d:c6:
                    43:a0:6c:b7:a8:88:22:9d:00:6e:ed:eb:c1:60:cb:
                    49:ea:74:c3:9e:6e:73:90:11:ad:be:a9:e0:fc:1d:
                    90:b8:a0:a4:8b:a1:04:53:f2:71:f4:72:a4:2f:95:
                    19:88:66:9d:28:44:78:e3:7b:e1:a7:3d:19:0a:f4:
                    44:09:18:6e:08:03:8a:fe:cd:9f:56:5a:eb:f5:a8:
                    3b:ef:c7:7b:91:e5:ec:a0:a7:37:84:f4:24:87:89:
                    5f:db:ab:92:ef:f7:e1:b1:2f:a5:0c:02:f1:cd:af:
                    b6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:ED:BD:E6:6A:3D:88:DE:CE:88:C5:9B:00:20:6F:2A:94:9F:F9:84
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/706dffb0-7b8e-4378-9a39-1aa47bf5cd9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.160.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         cb:09:83:e6:76:68:35:54:5b:dc:5b:f7:f1:95:a4:62:94:85:
         8d:25:98:d0:64:29:0f:90:74:9d:c3:78:1d:e7:9e:ef:91:d4:
         13:b5:4d:cd:16:30:9f:b5:09:68:66:d1:44:11:79:56:55:1c:
         01:9e:2b:b6:7b:0f:3b:c1:98:8b:80:fa:13:78:da:5a:90:3d:
         96:00:e2:77:87:80:04:c8:f9:9e:dc:19:96:00:0d:d3:b5:c3:
         44:f0:95:c0:f2:ae:a3:e5:6c:87:37:ed:43:ac:6a:07:6c:64:
         e8:5a:33:d0:03:33:b6:31:86:52:e8:af:64:a8:f2:bc:a0:e2:
         07:a8:b5:95:e2:0d:e7:7b:0a:f8:6b:76:ad:15:d6:5b:79:48:
         75:4b:77:31:26:e9:7b:5a:f4:2e:94:c2:71:aa:a1:15:c1:bb:
         ae:a3:e1:7d:55:ae:8c:3e:3b:1d:f7:46:75:d3:bf:9d:f2:b9:
         bd:d8:6c:83:5b:d0:2f:89:b4:47:72:22:e6:2a:5c:c8:8f:75:
         84:58:86:e9:99:f3:9d:35:1e:9b:2e:ad:42:7c:a6:ec:64:06:
         0e:b0:c0:bf:2e:a4:d5:10:99:eb:0a:c7:e6:a6:d8:ca:b4:90:
         96:b7:2b:6c:bc:f9:26:a5:1b:cc:24:ed:d8:5a:f9:36:aa:ee:
         69:c7:3b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 21:08:08 2026 by rpki-client