Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94513e26-aa15-4586-bd55-6b68d61713d8.roa
File:                     94513e26-aa15-4586-bd55-6b68d61713d8.roa (raw, json)
Hash identifier:          7oPHZ28Wgon8JbzkO/WnLLYJ8EsjYIN+82WLs2SW6w4=
Subject key identifier:   9D:EB:58:52:DD:7B:A1:59:D7:80:9D:6C:B4:21:C7:28:AC:16:83:CE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       11C7A13680B7B4C229C759DD0B585355A5F0E092
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94513e26-aa15-4586-bd55-6b68d61713d8.roa
Signing time:             Fri 23 Oct 2026 01:30:16 +0000
ROA not before:           Fri 23 Oct 2026 01:30:16 +0000
ROA not after:            Thu 21 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        162.222.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c7:a1:36:80:b7:b4:c2:29:c7:59:dd:0b:58:53:55:a5:f0:e0:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 23 01:30:16 2026 GMT
            Not After : Jan 21 23:59:59 2027 GMT
        Subject: serialNumber=5244fe016b5809f40991d0c5be087c17631532db7c4ca16add0b3e16a78c9067, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:04:e3:52:ef:88:7f:2c:42:55:0f:01:87:53:
                    5b:34:12:ab:22:de:78:78:c3:cc:cf:5f:df:3b:af:
                    96:e6:ba:62:72:89:52:75:52:b0:ef:3f:0d:85:8a:
                    39:6d:11:af:47:3b:71:0c:28:e5:fd:5a:ec:3f:be:
                    20:56:fc:a3:22:97:77:6d:31:92:74:d5:28:6b:6b:
                    d6:8f:4f:d8:db:b1:50:ba:53:56:25:32:83:e1:fb:
                    a4:f8:4a:45:eb:27:2c:f3:9f:42:43:8f:91:c9:c8:
                    d8:26:9a:12:c0:43:54:e5:cb:c4:97:86:0a:4f:7d:
                    69:7d:85:a2:a8:82:96:8c:0c:75:61:e6:4f:a7:6e:
                    4c:99:59:e1:c2:7e:fd:14:7a:95:9c:ca:09:d6:7a:
                    65:17:dc:db:6d:b4:c8:4f:77:b4:e4:13:4f:1e:09:
                    4b:e8:84:7f:f9:ba:c0:2e:fc:b2:e3:5b:10:1e:58:
                    91:7d:7f:85:72:58:ba:1f:13:eb:fa:36:6d:b3:00:
                    b6:6c:96:7b:a0:56:e8:ec:19:fd:f4:8e:6f:e4:b0:
                    99:4b:d8:f5:28:a2:5f:8a:d5:18:db:1f:25:f6:cf:
                    89:da:a5:df:2b:b6:7d:dd:3c:24:47:72:79:40:df:
                    28:29:f0:21:0b:c1:ae:33:d0:b8:6a:b8:bb:b1:fb:
                    a9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EB:58:52:DD:7B:A1:59:D7:80:9D:6C:B4:21:C7:28:AC:16:83:CE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94513e26-aa15-4586-bd55-6b68d61713d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:07:59:41:a6:ba:ec:e9:a8:11:36:b6:35:0f:df:35:09:26:
         d0:31:47:26:74:14:27:80:c1:70:fe:dc:70:dc:96:76:e8:1c:
         37:5e:99:a2:0a:65:c7:a0:c7:ad:d6:6b:62:e4:6d:0b:7f:23:
         47:57:6b:34:6f:ed:55:5c:70:9b:b1:46:b8:73:71:5e:f9:a3:
         56:5c:59:5b:08:5b:6b:6d:d0:35:38:89:7e:e4:b4:52:0a:5b:
         6b:47:bf:29:44:3c:fa:23:be:70:3d:6a:fb:57:91:6c:66:4f:
         2d:12:b2:41:ba:dd:83:7f:fd:85:96:18:64:b6:d0:88:7f:f4:
         8d:db:72:fe:2a:88:f1:4f:37:eb:03:b4:5e:8e:8a:02:68:bf:
         c3:9d:57:18:73:ef:7b:79:ad:bf:8f:b6:bb:a7:cf:50:d9:d3:
         c1:57:e5:ca:e1:9b:c3:b5:d6:5d:07:7d:0d:46:25:04:2c:f8:
         f0:3c:44:6b:37:1d:c7:ad:4c:9b:9f:7f:f7:4a:64:67:b9:b2:
         c1:58:9e:20:a4:a8:f1:96:e3:66:f2:ab:d1:49:c0:0a:a3:cd:
         0c:03:aa:2b:4e:f2:2d:7f:71:cd:e3:a3:eb:33:f4:7f:53:2b:
         e6:36:b6:0c:53:62:67:3e:b6:06:2c:9e:e7:4a:7e:a3:22:00:
         f3:e9:1d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:37:22 2026 by rpki-client