Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7865b6e9-bdb5-431a-96cd-04c3eebdad74.roa
File:                     7865b6e9-bdb5-431a-96cd-04c3eebdad74.roa (raw, json)
Hash identifier:          FA0z92pmSqCh1TXnJT2c0pb6wXXp7aZ+mmgk7r7FxRc=
Subject key identifier:   07:83:DD:9E:52:A1:BC:2D:00:9F:56:A1:43:07:AF:47:24:8F:4D:B7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5ACFA6EB8EAF5F3E69D5FC7C4145B3597977775B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7865b6e9-bdb5-431a-96cd-04c3eebdad74.roa
Signing time:             Tue 13 Oct 2026 00:40:35 +0000
ROA not before:           Tue 13 Oct 2026 00:40:35 +0000
ROA not after:            Mon 11 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        216.24.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:cf:a6:eb:8e:af:5f:3e:69:d5:fc:7c:41:45:b3:59:79:77:77:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 13 00:40:35 2026 GMT
            Not After : Jan 11 23:59:59 2027 GMT
        Subject: serialNumber=0c2cada86425d0463b2304361a03b00aa5ccf1f2536503f24aa0ce577e77755c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d1:43:1f:03:46:5a:6b:38:48:c4:a8:72:b1:
                    ad:54:b9:34:86:14:f9:bb:a0:c0:24:2b:7a:89:fc:
                    f8:4f:71:23:d6:2f:0f:23:00:f5:8d:2c:fd:fd:35:
                    fb:24:c9:74:ef:ea:ee:53:e3:3b:db:e7:d2:96:0a:
                    5d:a0:63:55:1d:12:a1:41:2d:ca:66:29:5b:0f:97:
                    61:74:29:0b:89:0a:d7:f8:88:86:a7:41:31:de:fc:
                    fb:ab:35:84:6e:11:7f:c8:e9:93:23:dd:e0:9c:89:
                    0e:f2:f5:1e:6b:92:fc:46:49:5c:bc:7f:ad:c2:8b:
                    05:bb:7a:c6:98:2b:d3:1a:d5:ef:3a:46:e8:76:e2:
                    e4:3b:07:6c:90:88:2d:ff:5c:7c:ce:a0:24:b7:be:
                    3f:04:1f:db:26:b5:14:3d:82:6e:a4:2f:9a:c7:a5:
                    00:ec:b8:ed:4b:b4:45:29:5b:0a:e6:cd:cd:aa:04:
                    5d:42:11:b4:f2:18:f5:4f:82:3b:76:89:76:29:82:
                    0f:23:fc:78:6a:26:b8:66:00:09:4a:7b:91:5c:dc:
                    93:ea:99:b0:d0:e8:3f:46:69:a9:c3:f1:b2:bb:e4:
                    3f:25:fe:dd:c6:d2:21:e3:a3:8f:43:23:bf:4e:51:
                    d1:ab:ad:eb:a4:1e:ab:12:d1:a5:11:8e:51:7f:72:
                    8d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:83:DD:9E:52:A1:BC:2D:00:9F:56:A1:43:07:AF:47:24:8F:4D:B7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7865b6e9-bdb5-431a-96cd-04c3eebdad74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         62:b0:e5:b5:c0:7d:b1:16:74:8a:1c:d8:5f:c0:4a:8e:79:a7:
         1f:69:bc:49:f9:5d:2b:5e:02:81:94:18:ef:f4:18:4b:b5:7b:
         5e:0f:64:01:5f:68:24:ba:ea:6b:5e:12:8a:04:bc:33:71:bd:
         b2:08:5e:f6:e7:e9:7b:b2:82:30:79:a4:0d:d2:0d:d6:36:41:
         82:33:d8:2f:66:68:f9:39:c3:df:94:04:40:ee:01:7f:85:0d:
         14:72:02:11:d8:58:24:8b:55:9b:55:57:e4:9a:79:42:48:4f:
         f6:49:29:6d:66:49:fe:f1:b5:b4:9b:24:0d:25:ec:37:b0:e5:
         85:44:2e:1d:66:92:a7:3a:b5:12:ba:e1:cb:5f:9b:73:62:d0:
         79:eb:13:2f:5d:a6:f6:67:6e:f1:a5:e0:90:e2:89:20:28:30:
         12:c0:21:e1:42:d1:27:4f:54:03:3a:43:48:5f:cb:ef:3d:df:
         15:91:b8:f1:b9:29:80:1e:99:f4:96:3e:84:97:9d:6b:3a:46:
         67:b7:b8:de:73:43:e5:c3:5b:02:1c:34:cc:a7:79:3a:23:1b:
         c2:1b:35:06:2b:dd:bf:41:a6:a8:9b:41:db:ab:c7:c5:78:8a:
         ad:69:74:11:e3:52:d4:b0:f4:fc:dd:4d:78:de:5c:28:2f:ca:
         6d:58:00:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 01:26:11 2026 by rpki-client