Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87352d4c-dc85-4274-af66-3a28d56c0282.roa
File:                     87352d4c-dc85-4274-af66-3a28d56c0282.roa (raw, json)
Hash identifier:          pCyhs9yxcxrVucOgk7MaT6yHCEO9vDiMbD5Y7R1RwXs=
Subject key identifier:   C1:4D:0F:07:E0:D3:79:08:56:E1:BE:AF:80:07:CC:B7:7C:62:81:86
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       301300E2354E74BAA6D8AA19AB9CD47C465A244A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87352d4c-dc85-4274-af66-3a28d56c0282.roa
Signing time:             Sat 01 Aug 2026 00:41:30 +0000
ROA not before:           Sat 01 Aug 2026 00:41:30 +0000
ROA not after:            Fri 30 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        205.147.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:13:00:e2:35:4e:74:ba:a6:d8:aa:19:ab:9c:d4:7c:46:5a:24:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  1 00:41:30 2026 GMT
            Not After : Oct 30 23:59:59 2026 GMT
        Subject: serialNumber=affb17b33bf2efec9377cff05c7e3879c85105ffaca112d77268fa14cfdacbd8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1c:84:08:00:a3:f0:f0:e3:e7:13:e6:9a:4c:
                    01:bc:f2:66:41:1c:d8:a3:3b:e2:05:3b:22:5f:c4:
                    09:7d:b5:a4:e2:40:90:84:7e:c0:49:70:84:8b:83:
                    df:c9:a3:03:00:13:d6:d7:96:98:38:52:8b:45:c6:
                    7e:03:50:d9:ea:a5:77:b4:14:d4:af:62:f5:07:84:
                    3d:d7:c9:aa:65:6a:da:be:a3:8f:71:66:d1:29:dd:
                    20:df:2d:86:0f:60:25:ca:f9:f3:a3:ef:9a:f4:7c:
                    c6:66:dc:a0:a3:c5:18:6a:ce:64:91:93:11:37:52:
                    4d:2a:b1:5b:75:6b:b6:80:d3:3b:de:3d:f5:61:58:
                    7a:eb:40:c1:f1:5a:e9:b0:68:4c:f6:b4:19:2b:73:
                    5f:58:8f:7c:f2:1e:88:e3:e9:c5:2f:c9:b6:9d:51:
                    57:6e:f1:7d:a9:f8:7e:9d:33:3e:bb:9e:45:ba:62:
                    b1:32:50:01:9e:2f:20:be:93:b7:1a:1f:31:50:cc:
                    9e:32:51:3e:32:13:e9:4e:9b:1e:15:91:90:04:15:
                    30:bb:59:ce:e3:ef:28:9d:c4:37:c4:5b:99:71:f0:
                    d2:06:e9:e6:c6:12:dd:b3:21:6c:b4:9d:f7:05:7e:
                    04:94:66:27:0b:66:34:4a:e4:30:44:e4:d4:4e:f8:
                    63:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4D:0F:07:E0:D3:79:08:56:E1:BE:AF:80:07:CC:B7:7C:62:81:86
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87352d4c-dc85-4274-af66-3a28d56c0282.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.147.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:eb:c1:e2:c2:bb:63:5e:34:0c:90:fa:9b:37:ba:24:b3:b5:
         c2:ed:95:2e:3d:50:26:29:c2:6e:af:dc:c5:97:2f:da:0c:a0:
         1f:a1:2a:e2:d5:f8:61:1e:e0:8b:d2:7b:d1:80:91:d2:08:c2:
         77:f3:83:41:4f:eb:5d:b9:e9:19:a9:e7:93:ef:a2:73:3e:57:
         b8:a3:78:88:13:ae:7b:a5:49:69:72:9a:31:18:9b:ac:42:28:
         1c:6b:e9:6b:30:52:6e:23:44:7c:e1:71:39:4b:5a:54:57:92:
         b8:93:5f:99:a0:4f:39:e2:7e:59:7a:12:36:91:58:2b:3a:ac:
         81:1f:5e:83:1a:7a:9d:66:44:fe:33:5d:ea:2d:2b:4b:f6:91:
         e8:f1:b4:41:15:5f:ee:57:28:23:d7:41:43:56:53:1a:a3:d4:
         b8:57:bb:63:51:34:bf:b4:1d:f2:f1:77:8f:e0:40:e8:d2:c9:
         87:6d:51:0e:35:f4:dc:eb:69:fd:15:69:c9:4e:83:6b:31:d5:
         13:18:74:76:e7:40:50:b2:f8:e1:9c:7b:80:57:b5:59:0c:c1:
         af:7d:31:20:d5:d0:ed:c3:6b:2b:54:b5:a4:e6:11:89:bd:ee:
         9d:fd:b1:e3:04:ab:40:20:cf:b0:b2:e8:76:11:ab:10:28:20:
         0c:f6:29:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 12:13:18 2026 by rpki-client