Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81e65b55-e793-4e3c-b747-4e9f7fe5cb15.roa
File:                     81e65b55-e793-4e3c-b747-4e9f7fe5cb15.roa (raw, json)
Hash identifier:          u/+XwnWFWjGiqka+vXeZcjj8w68VADPCFv4AYSWj63k=
Subject key identifier:   59:88:54:04:3A:D2:D1:E8:04:A9:2C:9B:54:3B:73:24:7C:F0:79:CC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3BBFDAFC2D78CCC4CA0B24B86AA84FD6FD908D7A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81e65b55-e793-4e3c-b747-4e9f7fe5cb15.roa
Signing time:             Sun 04 Oct 2026 00:10:41 +0000
ROA not before:           Sun 04 Oct 2026 00:10:41 +0000
ROA not after:            Sat 02 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        129.224.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:bf:da:fc:2d:78:cc:c4:ca:0b:24:b8:6a:a8:4f:d6:fd:90:8d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  4 00:10:41 2026 GMT
            Not After : Jan  2 23:59:59 2027 GMT
        Subject: serialNumber=a2d75a68118e1abc0ecb4526910dd1288d2aed5107343f24349f4fc5be311290, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ab:4f:72:bd:56:97:0d:91:24:7e:b4:6f:4c:
                    ac:73:9e:60:fd:71:2e:13:6b:e5:4e:97:a2:7f:57:
                    16:31:7d:69:05:2e:b1:9c:79:91:3f:49:b3:c3:a3:
                    0e:01:f0:43:a4:bf:ae:32:df:bf:cc:eb:0a:14:d9:
                    3a:d7:a9:a4:11:0a:b4:11:cb:3a:a1:02:3d:a3:d5:
                    24:39:0e:a1:19:b6:e1:30:37:e4:60:6a:e5:52:3c:
                    c7:f1:3a:1c:7c:30:b3:60:95:ec:82:0c:6a:62:1e:
                    fa:8e:6d:ca:a5:16:f7:38:a7:64:5e:2d:18:2e:ab:
                    ad:98:62:32:42:e3:3b:2e:82:36:6f:d1:ba:4a:89:
                    4a:b5:12:bd:74:b2:06:5d:4a:e6:37:35:6c:03:e9:
                    08:7e:49:2d:28:54:8d:bf:fe:d1:d1:d7:e8:ab:0c:
                    fb:ed:1e:b1:5b:32:5a:65:b3:82:64:eb:b8:67:30:
                    ef:62:18:bd:f3:30:97:ea:e1:76:30:da:62:94:10:
                    d1:81:70:39:6a:c6:e9:6d:77:46:8c:40:97:ad:c6:
                    c6:6b:4b:25:04:9d:a9:1a:55:b2:dc:20:60:b0:73:
                    5f:b8:c9:ad:ae:5d:d6:97:38:0f:56:f8:b3:38:4f:
                    95:f3:9e:ca:74:78:22:a4:da:28:48:58:04:33:32:
                    4a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:88:54:04:3A:D2:D1:E8:04:A9:2C:9B:54:3B:73:24:7C:F0:79:CC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81e65b55-e793-4e3c-b747-4e9f7fe5cb15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.224.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         47:11:6f:83:ee:1e:87:91:10:e1:6b:70:6b:82:19:5e:c1:05:
         25:78:ae:4c:2c:30:7d:dc:1c:0a:3b:5b:11:33:ba:05:16:84:
         30:d3:32:3f:b6:95:73:65:49:33:e6:d8:6f:63:3b:88:25:2a:
         50:96:40:30:02:a2:37:61:c9:1a:48:d3:91:37:31:48:17:68:
         ff:27:05:47:2f:79:07:0b:d0:68:b2:53:7a:56:6e:44:7e:3c:
         f7:6b:32:13:7b:b8:c7:4a:c7:0e:83:df:a2:76:88:45:71:b5:
         80:f5:3e:d1:fd:15:9a:34:ff:12:85:da:f2:dd:b2:a2:6b:96:
         c0:76:86:aa:05:d8:2d:75:84:e5:fe:be:94:20:89:50:e7:a8:
         8b:f0:5d:b6:ae:08:86:6f:e3:7d:83:37:5a:b5:4b:a8:cf:0a:
         08:80:02:92:41:f3:0d:ac:d6:fb:19:5d:c0:0a:e2:80:3d:8d:
         d7:30:4e:a3:05:a3:11:f2:34:ac:02:59:8a:c9:5a:f7:f2:f9:
         29:bc:04:39:0e:f7:df:b6:0b:d2:ac:be:91:2f:91:8e:38:f4:
         67:0d:1c:a7:4a:a6:c2:9a:7e:ee:b6:5d:15:97:5a:c4:b7:38:
         f5:32:cc:3c:76:ed:91:ae:69:ec:5f:31:90:0b:cc:da:0a:bc:
         99:d5:f8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 07:16:57 2026 by rpki-client