Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74841582-8bed-4d9b-98bf-557048954c2d.roa
File:                     74841582-8bed-4d9b-98bf-557048954c2d.roa (raw, json)
Hash identifier:          vkvyEy0734h/hju0auijjDUoc1ybJRcgYt7yvwo/mFk=
Subject key identifier:   DF:79:4C:F2:3E:55:64:35:74:4C:61:CF:97:DE:2B:D5:51:C2:41:3B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       26B5CEBB3CE559B44418D43CDBBB117A4EB733BA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74841582-8bed-4d9b-98bf-557048954c2d.roa
Signing time:             Sat 24 Oct 2026 01:04:39 +0000
ROA not before:           Sat 24 Oct 2026 01:04:39 +0000
ROA not after:            Fri 22 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        77.121.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b5:ce:bb:3c:e5:59:b4:44:18:d4:3c:db:bb:11:7a:4e:b7:33:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 24 01:04:39 2026 GMT
            Not After : Jan 22 23:59:59 2027 GMT
        Subject: serialNumber=c421f53ceb4319f278b57e18fba4ede483b279a286b55b4d2cb6ca1978bc2b36, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8d:c9:83:65:a0:5b:49:b5:27:31:13:11:45:
                    0f:26:20:36:13:14:62:7c:17:c4:9d:77:a2:76:f7:
                    b4:10:6a:00:3e:b9:d8:1d:fc:1f:c9:88:76:c7:a9:
                    4f:c5:39:88:45:d6:fa:fd:8e:a5:e5:18:27:be:23:
                    ae:03:ca:0b:0c:53:61:e7:ff:59:ef:7b:2b:65:91:
                    27:20:a8:d5:37:d1:0b:10:e7:a1:38:2f:fe:92:c4:
                    b2:de:99:af:50:c8:34:0c:42:f4:38:39:04:70:c8:
                    27:d2:a1:7b:4c:3d:ed:b2:b6:13:61:dc:fb:f0:cb:
                    fa:b1:8b:80:aa:fe:fd:10:74:2f:50:83:da:c7:06:
                    7a:ce:7d:c9:ca:c7:9b:6c:8f:14:b0:32:4f:46:cb:
                    80:25:15:73:fe:a5:58:5f:31:27:67:48:c8:c5:26:
                    6a:01:87:46:e5:b2:99:97:16:61:f1:8c:55:c1:3b:
                    83:a7:0e:cb:22:d3:1a:83:72:ba:53:f1:90:38:9d:
                    87:65:1d:7a:44:0d:d1:7b:ee:88:99:a1:c8:81:e4:
                    a7:22:3b:45:8c:3a:ae:12:b5:c5:ce:2e:2d:21:39:
                    35:ea:93:e8:43:bc:24:a4:c3:54:5d:51:ca:49:39:
                    ff:51:09:ad:fd:b3:d7:fb:67:08:e5:7d:77:fa:25:
                    03:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:79:4C:F2:3E:55:64:35:74:4C:61:CF:97:DE:2B:D5:51:C2:41:3B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74841582-8bed-4d9b-98bf-557048954c2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.121.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1b:18:1f:91:4c:bb:98:63:a3:e0:3e:de:4a:7d:c6:43:a2:47:
         5f:c3:97:22:ca:c1:ea:51:e5:2f:bc:5e:cd:18:3b:a1:ad:2f:
         bc:ff:df:73:89:64:fb:60:65:97:69:4b:1f:fc:10:10:bb:4a:
         25:18:5b:5c:63:ad:5e:92:9d:1f:60:5c:b0:40:bb:5c:ca:53:
         f9:0a:86:73:49:10:f6:05:13:b9:ae:79:5c:90:82:64:e4:70:
         86:84:95:b8:c8:4b:e5:e4:65:b7:a1:4e:28:24:53:d5:00:be:
         b0:52:df:62:5a:eb:9d:fb:9a:43:69:7c:2d:65:e6:cc:24:b6:
         9c:fb:35:4e:c4:d1:02:39:b7:8c:4a:85:48:ac:84:27:53:45:
         fd:37:96:a4:27:2b:9b:45:3a:75:0c:d1:5b:46:5d:aa:b5:47:
         ce:b6:7a:af:ec:42:d5:85:75:b0:aa:1a:15:7c:b7:76:8c:17:
         6b:72:da:af:b5:3c:9f:dc:63:43:62:a2:32:13:5d:ad:e2:4f:
         de:ab:24:a1:70:3a:3c:99:10:64:1d:ac:d4:32:95:3b:17:5f:
         0e:38:eb:be:61:cf:5c:c3:0f:f6:30:5e:49:79:83:2f:04:7a:
         fd:31:82:d5:ef:a1:1b:d8:7d:15:37:2e:67:1f:29:9e:7f:62:
         de:41:20:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:30:19 2026 by rpki-client