Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/781b948d-83f7-4660-9e59-5ddf6e52bb0b.roa
File:                     781b948d-83f7-4660-9e59-5ddf6e52bb0b.roa (raw, json)
Hash identifier:          9hyVQzvdAul/8D/ysfzsBcHB7zwSo9EyxeQrJw62sng=
Subject key identifier:   84:6E:9D:C7:D5:96:49:1C:84:D3:64:72:7D:E7:3E:B8:03:89:D4:52
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       750F3A415FEA66D39CC86E3648F12BFFB5554181
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/781b948d-83f7-4660-9e59-5ddf6e52bb0b.roa
Signing time:             Sat 10 Oct 2026 00:09:31 +0000
ROA not before:           Sat 10 Oct 2026 00:09:31 +0000
ROA not after:            Fri 08 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        23.238.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0f:3a:41:5f:ea:66:d3:9c:c8:6e:36:48:f1:2b:ff:b5:55:41:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 10 00:09:31 2026 GMT
            Not After : Jan  8 23:59:59 2027 GMT
        Subject: serialNumber=d70c87006c5e38e6a3aed110d8e6a46f1c558cfd1e9de89757d458bc600dc010, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ba:cc:8e:7c:a0:56:d1:53:8b:fd:99:c7:43:
                    c9:5d:d2:ec:16:7a:e5:8b:28:c9:83:c0:d6:b4:1c:
                    98:b7:c4:93:b8:ac:f1:1d:f7:c2:52:19:bd:fc:e1:
                    14:52:c9:2b:0b:fb:33:54:1a:b0:c2:00:9d:00:d7:
                    b2:20:70:0b:9d:0f:8d:82:ed:a8:a3:15:0a:72:0a:
                    a4:bd:64:2c:6f:1b:e0:00:37:11:31:89:53:45:17:
                    82:eb:7e:12:fd:95:b9:fc:37:60:f6:19:d9:b4:88:
                    65:95:38:97:2e:32:b4:20:46:c1:3f:b5:11:f1:5e:
                    2a:14:d1:4f:e0:1f:ae:31:dc:1c:8d:a2:6f:72:4b:
                    f0:27:b4:2d:0a:53:40:e0:37:20:2d:db:84:9a:94:
                    92:8d:0c:90:f6:3a:8c:4d:2d:31:6b:34:44:3a:17:
                    69:74:41:64:df:a0:b2:7e:9d:c4:73:29:29:94:64:
                    96:c7:68:e6:5d:34:5b:e4:1a:0f:0e:e7:15:ce:98:
                    62:13:a3:97:45:b8:03:74:0e:30:08:4b:6e:e4:9b:
                    d2:6e:0e:38:52:29:e6:62:78:58:8c:b4:36:ea:17:
                    2b:e8:e9:9e:b7:22:e9:72:0e:46:6a:42:eb:ca:11:
                    1a:ef:22:1a:e1:4a:5a:d0:90:fd:48:c0:8a:f6:cd:
                    42:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6E:9D:C7:D5:96:49:1C:84:D3:64:72:7D:E7:3E:B8:03:89:D4:52
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/781b948d-83f7-4660-9e59-5ddf6e52bb0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.238.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:cf:d5:6a:19:65:c2:2c:f4:33:47:d5:50:c7:a4:13:f3:30:
         d0:b6:7d:4c:03:48:6e:f8:d1:af:e3:b4:5d:83:79:79:0e:c4:
         98:e1:8f:34:7b:63:97:26:58:be:6d:72:61:23:3a:0b:92:87:
         23:c8:d7:a8:df:85:35:35:05:a8:ee:bf:15:08:70:ee:e7:82:
         21:ea:63:3a:83:be:90:45:ff:f0:a1:15:f4:52:ec:d9:2c:74:
         1f:05:11:fa:61:47:5b:ac:03:f7:15:f0:71:6f:9e:90:b8:e7:
         f7:13:b0:86:0d:ab:56:d2:4c:87:3f:10:5d:d7:c3:c1:80:13:
         39:ac:1d:d4:2c:d1:2c:8d:fc:bd:5d:fa:49:1f:7e:3a:50:63:
         18:9c:b8:08:d4:2a:1a:68:b7:c0:79:4d:02:21:e4:0d:0e:c1:
         5e:fa:10:20:90:b9:00:9f:8c:4e:f4:11:d2:c9:e3:83:9a:f8:
         bc:e3:91:8e:e4:7e:67:e2:bc:7f:93:29:84:13:cd:2f:c2:4c:
         3f:2b:bf:d3:b4:b5:3f:8f:42:67:a9:7f:35:d3:9c:2c:80:c9:
         2f:8e:18:82:2b:09:83:bb:31:60:6a:61:43:fd:79:88:59:da:
         2f:2e:48:77:0e:2d:7d:4c:02:b8:86:33:f6:d0:0b:cb:ec:2f:
         25:b0:c9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 23:03:01 2026 by rpki-client