Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8edec16c-0561-46b3-9c82-eaf4a972bd19.roa
File:                     8edec16c-0561-46b3-9c82-eaf4a972bd19.roa (raw, json)
Hash identifier:          ABenI6zlMm2UeJmKLCYW419jCrZVOUvDXAXtzstYH3Y=
Subject key identifier:   E2:E2:AC:70:4A:31:53:7E:D1:BB:7E:81:A2:B2:34:24:EF:B8:4D:EB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0728F9B12FC28E56A89905592645DB64CCADB720
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8edec16c-0561-46b3-9c82-eaf4a972bd19.roa
Signing time:             Wed 21 Oct 2026 00:09:44 +0000
ROA not before:           Wed 21 Oct 2026 00:09:44 +0000
ROA not after:            Tue 19 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        45.33.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:28:f9:b1:2f:c2:8e:56:a8:99:05:59:26:45:db:64:cc:ad:b7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 21 00:09:44 2026 GMT
            Not After : Jan 19 23:59:59 2027 GMT
        Subject: serialNumber=2221d5d501465aa260a9fae554422600197e5f34b512a6da15aed3ca1e1c4631, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d2:46:c8:6f:b4:d3:e2:1c:ae:bd:92:81:08:
                    09:f5:ea:1e:cc:8a:93:4a:45:ba:01:7c:8f:86:61:
                    c0:f6:42:b1:b9:93:27:36:c6:c1:fa:e9:ed:5a:40:
                    34:7e:62:18:2b:7c:ed:ec:80:0e:38:ad:70:4a:c3:
                    da:89:e5:47:5a:b4:9a:e7:dd:e9:70:78:60:07:37:
                    e3:81:1c:04:98:00:2f:d3:c4:17:1b:53:c0:92:89:
                    5b:33:c3:9d:a0:2c:46:4a:62:24:b6:f8:85:fc:62:
                    e9:c6:72:63:5c:12:34:4a:00:e0:08:62:71:59:64:
                    86:f6:fb:fe:31:b6:59:40:b3:99:e5:6c:5c:eb:be:
                    d0:78:b4:1c:2b:9f:68:4a:cd:4e:24:65:22:86:f6:
                    ce:d8:cb:f3:9c:d9:dc:be:7d:24:54:98:0c:41:a8:
                    da:09:4e:4b:11:88:d9:eb:59:23:f7:0a:d2:0d:7a:
                    cd:a8:bf:88:af:88:0a:bd:e3:e4:bb:7a:d8:81:54:
                    52:eb:ad:2d:6a:ed:a6:42:b2:1d:58:2a:26:98:f9:
                    7b:b4:6a:c3:99:18:aa:d3:03:72:1d:dc:f7:21:44:
                    ab:37:70:c6:55:5c:46:71:e5:23:ad:db:a8:74:43:
                    ca:6d:2c:da:2b:18:f4:23:c4:f1:b9:92:69:68:04:
                    0c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E2:AC:70:4A:31:53:7E:D1:BB:7E:81:A2:B2:34:24:EF:B8:4D:EB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8edec16c-0561-46b3-9c82-eaf4a972bd19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.33.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:ee:5b:4b:fe:8a:e1:3b:ab:ed:85:7c:8e:21:5f:75:82:ab:
         2e:b0:d6:fe:1c:56:a6:a6:e8:6b:00:38:d5:d1:4a:22:66:02:
         54:02:43:fc:3f:c0:39:5e:b8:49:29:07:1a:32:4b:ad:e0:8c:
         3c:52:1c:80:be:ee:99:47:ae:37:7e:48:7d:15:b4:8a:c2:46:
         40:cf:bb:de:c6:2e:c0:28:01:65:5e:07:60:4d:82:11:38:3f:
         cc:aa:ed:a0:ba:e5:96:4c:c5:ce:b1:b1:98:05:76:0d:1e:c5:
         31:12:0d:3d:20:aa:d9:8e:5c:11:11:f7:28:57:d2:7b:46:d1:
         11:16:f5:67:86:62:2f:d2:71:c2:02:39:ba:4a:77:3c:ee:fe:
         62:2a:6d:75:bc:1b:54:2e:a7:34:9b:f4:48:c5:be:f2:06:a5:
         c6:4c:8c:0e:04:49:38:93:00:14:8d:b1:ec:8d:7a:e7:c4:5c:
         5b:8d:ff:28:51:11:84:a9:76:64:cd:29:0b:39:11:36:b5:cb:
         6c:30:39:1d:9a:90:c0:93:b7:d0:77:38:32:ac:ca:07:d7:de:
         f9:b1:b4:34:14:fa:43:be:48:b3:f7:af:f8:be:f3:d0:11:43:
         4b:e8:d7:e0:59:e4:cc:93:c8:08:49:99:38:97:0f:8d:94:76:
         fe:69:5b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:52:19 2026 by rpki-client