Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9155fb8e-4b88-4b5d-acc6-999e583f0281.roa
File:                     9155fb8e-4b88-4b5d-acc6-999e583f0281.roa (raw, json)
Hash identifier:          kJiTxblUi8f6cQeNJU9RsxXANAakwC0z+YwTuSP0z3c=
Subject key identifier:   39:B5:74:91:D9:BD:3E:15:11:7A:7F:BA:BA:34:DD:06:BD:B6:9E:14
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       703D1196C8DA06E07C787ABCE5FB8627E3501318
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9155fb8e-4b88-4b5d-acc6-999e583f0281.roa
Signing time:             Mon 26 Oct 2026 00:40:03 +0000
ROA not before:           Mon 26 Oct 2026 00:40:03 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        79.73.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:3d:11:96:c8:da:06:e0:7c:78:7a:bc:e5:fb:86:27:e3:50:13:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 26 00:40:03 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=662bf8dabf994b7bb437e61c71b8553b1a23c9582fc8cde5d3d57bd30fe40413, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d3:11:5b:ec:19:92:59:73:9c:78:a7:1b:f3:
                    fc:27:27:e6:75:4f:cf:46:16:04:8f:4d:95:71:33:
                    2a:1e:48:7c:d1:8a:cf:15:4a:8b:b5:7e:49:8d:6b:
                    13:52:a4:5b:74:de:2b:fd:14:3e:a6:5a:2a:79:0d:
                    69:d8:75:2d:4c:14:3f:fb:cc:a3:64:61:b9:1a:1b:
                    9c:d2:43:84:6f:54:21:69:a3:20:bd:9d:71:c9:bb:
                    21:fe:0e:4a:5b:f2:b1:3d:0d:f8:2b:29:6b:60:97:
                    2e:b2:ab:76:6a:0f:74:d3:5f:52:8a:b3:21:53:0d:
                    43:85:7d:c1:72:3a:d4:68:7f:37:e0:6e:74:13:9d:
                    2c:b4:c3:a9:37:46:eb:ed:1e:e6:32:a2:68:b4:32:
                    41:d8:ac:d5:f8:5d:a8:13:e5:dc:71:9d:22:2a:d1:
                    3c:cb:76:1b:56:8f:11:36:d5:e8:08:4f:8c:c8:2d:
                    fc:0d:4a:13:a9:97:a7:3c:51:0e:69:63:18:29:60:
                    95:70:e4:d9:6e:5c:9b:79:28:22:0e:e4:9d:2d:fb:
                    a6:08:cb:ea:e9:1d:38:56:c9:dd:4f:c6:c8:4c:54:
                    9f:5a:7d:90:b5:4b:c9:e9:eb:20:aa:97:4c:cc:40:
                    03:a6:d6:b1:0b:23:fd:58:aa:06:63:d7:b8:75:9a:
                    d2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B5:74:91:D9:BD:3E:15:11:7A:7F:BA:BA:34:DD:06:BD:B6:9E:14
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9155fb8e-4b88-4b5d-acc6-999e583f0281.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.73.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a2:c3:2d:b3:1e:94:cb:f5:0c:24:30:db:c0:52:d8:f9:4b:c9:
         ac:52:fe:ef:74:4f:22:cf:8d:9a:a0:d4:66:ba:3f:6c:97:44:
         be:08:c8:db:81:6f:34:1d:b6:5c:27:17:bf:62:0a:ed:49:cd:
         e4:64:77:0a:fa:83:b2:fb:69:15:0b:ea:60:3d:bb:12:5d:82:
         f3:eb:73:28:bf:42:a6:da:f0:d9:69:d9:c5:95:a1:cc:b2:89:
         f7:79:87:a1:38:8d:5b:2b:66:e4:7d:19:11:aa:61:f9:f2:b4:
         38:32:ba:3f:fa:74:7b:30:77:a6:49:f2:03:12:ac:78:20:95:
         83:9f:16:e0:ff:30:43:4f:e2:0f:d4:0d:02:7f:3f:75:e4:53:
         21:e8:9f:08:6e:62:39:2c:d7:71:f5:91:76:34:20:ce:0e:49:
         6d:d2:ea:aa:d6:b6:d4:10:44:7e:38:e8:ef:4d:d7:77:f3:ea:
         1b:d4:8a:82:99:da:be:75:c2:d7:20:01:f1:eb:cc:c7:ef:94:
         7e:34:50:66:1c:eb:80:60:7d:1b:4c:e9:50:14:b2:f0:3b:6f:
         b5:89:c5:c3:a7:72:7f:eb:f0:2d:e5:39:55:ce:b6:d9:82:17:
         b3:67:4b:b5:89:b5:f5:a2:0a:18:ae:cd:10:6c:e6:ff:30:89:
         85:30:f0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:29:51 2026 by rpki-client