Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/794cdf15-c75c-428a-8c4d-ad0e3ca07a7e.roa
File:                     794cdf15-c75c-428a-8c4d-ad0e3ca07a7e.roa (raw, json)
Hash identifier:          AnXDgz6kl5C4II8DVpENjR6lXewtL9ej20adUv3h5Zk=
Subject key identifier:   D3:17:2B:50:95:21:46:7C:B9:F3:BE:A4:59:1E:F5:9D:D9:0E:19:44
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       67E10FC35AE8E70EA81DBC4D055AD96C79101A9F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/794cdf15-c75c-428a-8c4d-ad0e3ca07a7e.roa
Signing time:             Tue 20 Oct 2026 00:40:33 +0000
ROA not before:           Tue 20 Oct 2026 00:40:33 +0000
ROA not after:            Mon 18 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        209.92.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e1:0f:c3:5a:e8:e7:0e:a8:1d:bc:4d:05:5a:d9:6c:79:10:1a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 00:40:33 2026 GMT
            Not After : Jan 18 23:59:59 2027 GMT
        Subject: serialNumber=32c8db120f6b234de13584225f6f1d758b24c4387c712aa220d91322b3e9feb5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7b:59:21:d2:5d:8e:67:4b:d6:1c:f1:7c:1a:
                    de:83:16:d6:59:66:5b:bd:d7:61:77:b6:96:6e:40:
                    5f:cf:f3:50:26:90:93:40:9c:32:3c:af:b3:3d:5b:
                    49:dc:80:81:51:94:98:d5:a8:c0:cb:94:96:a9:4e:
                    a5:b7:5d:3f:16:5f:13:44:1d:70:34:f8:95:73:10:
                    19:86:80:f2:bb:e8:7c:f6:23:fc:13:ae:e7:30:eb:
                    e2:3b:d6:6a:6d:15:a3:b8:c3:53:cb:31:45:ac:4d:
                    c0:b5:0f:89:48:fa:37:43:55:d8:1b:cb:52:1d:89:
                    5a:61:c7:5f:07:c0:f5:c1:88:ce:9a:51:eb:62:15:
                    39:08:e6:cd:d3:2a:e8:cd:7b:7c:3a:4a:36:2b:8c:
                    3b:a6:03:15:f8:38:0a:bb:44:ad:01:4e:19:33:4b:
                    88:a3:ba:c1:16:44:fe:33:74:3e:45:c2:a8:3b:6d:
                    82:9b:d3:ba:cc:cd:e8:9b:89:05:96:da:bb:46:0c:
                    02:42:f8:2c:fc:b7:a7:bb:98:06:2a:79:7c:8d:dc:
                    7f:f3:9f:74:59:29:69:2b:73:47:80:84:51:dd:f8:
                    e5:d4:4c:03:8a:00:d7:29:38:c2:28:51:96:a7:90:
                    f7:fd:ba:8c:0d:2d:67:fe:4e:87:ac:fd:ac:b7:a3:
                    9e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:17:2B:50:95:21:46:7C:B9:F3:BE:A4:59:1E:F5:9D:D9:0E:19:44
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/794cdf15-c75c-428a-8c4d-ad0e3ca07a7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:f6:d1:7b:8f:cd:8b:87:b7:04:2e:d4:28:a6:60:be:ec:95:
         a7:bb:48:4c:98:8d:8e:7b:0b:9a:12:c6:37:5c:c0:f6:b9:51:
         d6:e6:e4:4f:bd:bd:55:59:73:d5:e2:5c:49:b0:07:54:78:0a:
         2d:11:64:1b:9c:7b:8a:d1:db:fa:db:93:59:e5:95:32:2d:1a:
         f4:9e:c0:58:bb:3c:cb:29:06:37:2e:7e:30:62:d7:57:92:e6:
         5c:91:94:4a:f0:5d:9a:ed:17:31:3a:b6:be:b9:ad:29:0a:e4:
         b0:6c:d9:93:17:d9:3b:0d:09:0e:9b:9c:a9:79:96:e4:cb:48:
         e2:23:eb:d2:7d:19:02:fa:a2:95:d5:e6:13:e5:37:4f:5e:be:
         ce:b8:76:08:ff:6a:35:c0:c8:74:d1:f8:ce:87:00:0e:39:d1:
         22:42:4e:51:03:bc:42:63:e2:43:75:56:af:08:8f:11:04:38:
         6b:14:3f:f5:4b:85:11:02:d1:5b:85:16:13:94:88:98:67:eb:
         b8:82:a6:96:7d:d4:85:0e:10:03:ac:b1:d1:d8:68:da:65:f9:
         72:2a:0b:ba:0f:79:e4:c2:4e:72:a5:00:4d:28:1c:dc:ec:7b:
         e8:0d:fc:cf:ae:00:f0:01:a3:13:6d:65:36:1f:56:cc:e5:b3:
         81:01:19:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:39:30 2026 by rpki-client