Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aa0904e-f2c8-4b9d-917f-872e24dc4d90.roa
File:                     7aa0904e-f2c8-4b9d-917f-872e24dc4d90.roa (raw, json)
Hash identifier:          7sP12JuXn5bdmtCZnnrKn03OBdX1St4/edfNtoaYLVU=
Subject key identifier:   E7:4A:CA:93:39:D3:23:C1:DD:D6:5E:80:4A:0C:F5:A3:90:E5:44:03
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       18B189CCCC1093306AAA38A89A60C0A3D205DF6D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aa0904e-f2c8-4b9d-917f-872e24dc4d90.roa
Signing time:             Thu 22 Oct 2026 01:30:12 +0000
ROA not before:           Thu 22 Oct 2026 01:30:12 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        16.56.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b1:89:cc:cc:10:93:30:6a:aa:38:a8:9a:60:c0:a3:d2:05:df:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 01:30:12 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=b1266a7c433ad216cc43eb87f056644bc47a5d8fd80ad6798740eb8b294bcbc3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4b:e5:49:75:73:6d:df:4f:8f:32:59:3d:a4:
                    e1:d4:10:b2:26:55:a3:22:1e:23:4e:40:cc:cf:b6:
                    91:90:f5:93:5d:22:78:e7:f7:9f:c8:70:50:03:55:
                    8b:48:1f:17:b0:26:d8:59:3c:2a:e9:3a:83:e1:f3:
                    06:85:2f:fe:56:f3:f8:0a:7a:a1:46:55:91:57:97:
                    55:ae:91:d5:eb:1b:11:89:9f:c1:09:63:98:b2:14:
                    cd:0a:81:6e:6e:23:2c:c0:d0:af:da:a2:05:0e:f3:
                    05:68:b7:31:32:26:a7:0f:1d:47:54:59:0a:63:ae:
                    db:f7:8e:8c:bc:32:5c:b2:a2:49:ad:54:5f:48:bb:
                    2a:ae:6f:3c:57:64:2e:a8:82:ee:47:ba:6b:ef:ea:
                    d9:29:d0:1c:f2:15:6b:5a:ce:eb:fe:5a:e0:7b:96:
                    0c:99:72:ea:3a:f4:c6:aa:df:0e:8b:05:c4:b6:8d:
                    78:ae:df:12:4b:9a:7a:6f:39:00:c8:b5:65:41:ec:
                    cc:52:28:7b:a9:5e:39:3c:14:24:23:10:f7:f5:36:
                    7f:b1:8e:89:24:8b:4d:65:ba:f9:52:c2:0f:70:14:
                    cd:49:66:fa:b4:a6:34:65:56:d0:8e:f0:fa:55:a3:
                    45:dd:1c:28:31:76:f0:ac:5f:c8:f8:eb:cf:e8:ac:
                    b0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4A:CA:93:39:D3:23:C1:DD:D6:5E:80:4A:0C:F5:A3:90:E5:44:03
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aa0904e-f2c8-4b9d-917f-872e24dc4d90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.56.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         12:d7:23:2a:bf:c6:ee:58:a9:5c:a8:74:07:f1:4d:9b:2e:29:
         ee:8f:88:f9:fc:e1:10:87:32:ed:bc:e3:a6:76:d9:f9:ac:9b:
         fb:69:fd:6e:e0:0c:b1:99:b1:4b:1e:67:23:ac:15:67:7b:f5:
         be:55:fb:35:52:65:80:1b:99:bb:a8:3b:89:96:46:56:c0:c3:
         2f:02:19:ec:55:14:d9:8c:4f:02:0c:23:d4:78:43:75:5c:4d:
         fc:44:58:6f:49:e6:e3:12:4e:dd:cc:fb:32:e4:e6:b1:0b:4b:
         0d:ed:8a:7d:3b:b2:3e:c2:84:53:14:69:e3:5b:7f:92:6e:05:
         d1:c7:c9:be:ae:13:ca:8b:7c:74:ef:7f:b9:c2:fc:97:92:dc:
         41:a3:5d:a9:0d:22:88:c9:42:b4:cc:3f:e8:69:b5:75:ab:64:
         ea:71:1f:14:ac:3c:42:8f:3a:df:3c:ec:2a:af:20:08:66:71:
         45:f1:e9:60:ce:20:09:b0:95:78:0c:e7:8a:53:aa:b5:05:bf:
         3a:5c:05:67:d9:49:92:53:68:d9:4a:e3:86:66:f3:7f:38:93:
         95:4e:f9:1a:a1:f9:2c:5a:94:4c:a8:bf:a6:22:91:83:32:7e:
         ca:fc:5d:d5:ff:b2:9d:dd:99:c2:7b:34:74:05:72:6a:dc:6e:
         74:8f:e3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 01:13:35 2026 by rpki-client