Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94a7c917-6869-4830-9bca-db6ddd98328b.roa
File:                     94a7c917-6869-4830-9bca-db6ddd98328b.roa (raw, json)
Hash identifier:          WOgQqnbvzlnveHB0+dIIKXuvsjHftZ9Pywrla1pjB1M=
Subject key identifier:   C0:7E:D0:22:57:DC:C6:EF:21:B3:2D:C0:E4:95:77:32:63:03:15:3F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2FD6394D3F032CCBC32BBDC1767646B880CFB379
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94a7c917-6869-4830-9bca-db6ddd98328b.roa
Signing time:             Tue 27 Oct 2026 00:10:07 +0000
ROA not before:           Tue 27 Oct 2026 00:10:07 +0000
ROA not after:            Mon 25 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        56.110.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d6:39:4d:3f:03:2c:cb:c3:2b:bd:c1:76:76:46:b8:80:cf:b3:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 27 00:10:07 2026 GMT
            Not After : Jan 25 23:59:59 2027 GMT
        Subject: serialNumber=fda1d61580123423d7edef943ccdbceac901c88cec412c18e1f4cbafdc21dc7e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:93:d3:ae:66:be:ba:02:33:d9:09:26:98:49:
                    ba:3a:8b:92:46:21:fb:5a:f7:b8:f8:47:29:8f:cf:
                    be:f1:77:db:48:8c:d7:a3:28:a9:d1:18:37:76:ae:
                    5c:ec:89:61:dd:d5:b1:cf:5a:7d:a3:b9:45:93:06:
                    05:6c:52:d1:a3:41:de:91:21:d4:ae:c8:29:9c:9b:
                    71:b7:13:a0:c2:3a:e8:73:05:f6:7c:bc:b5:36:a4:
                    49:2e:5d:c7:87:7b:7c:61:74:c5:2e:12:58:a5:13:
                    47:42:b8:9b:ca:7b:a9:6f:df:06:d4:ae:24:e8:8a:
                    36:b6:7e:e0:b8:37:9c:c6:a1:f4:97:69:88:61:a4:
                    46:58:39:3a:f1:1c:f5:c2:1e:11:9f:0a:64:54:11:
                    2e:58:55:6f:e4:93:10:24:5f:3c:aa:59:7f:32:32:
                    cf:01:b3:de:0d:50:96:e2:d4:8a:a5:c9:a6:1d:ad:
                    8c:eb:dc:25:bc:73:d7:f4:d5:15:db:f4:6d:d7:8f:
                    b8:fe:ac:26:79:ea:e1:b8:7a:0d:cf:30:3b:78:16:
                    cf:8d:e0:42:60:83:22:35:84:75:3b:88:aa:0f:b9:
                    c6:05:12:f1:b3:49:97:be:51:97:0f:21:b1:27:d4:
                    3d:c5:5a:97:74:c0:19:a7:2f:ee:04:0b:5e:e8:08:
                    bf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7E:D0:22:57:DC:C6:EF:21:B3:2D:C0:E4:95:77:32:63:03:15:3F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94a7c917-6869-4830-9bca-db6ddd98328b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.110.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         96:60:c1:9a:2d:c6:63:45:66:37:c2:24:c1:70:66:3e:7a:fb:
         23:9c:d0:5a:ad:ee:74:a0:09:bc:43:0b:8f:f7:c7:9f:a4:1f:
         f9:ce:74:b7:f8:92:8d:bb:ae:e9:c6:56:9b:18:5a:cb:7b:04:
         b6:76:74:9a:62:91:b9:55:52:4d:b9:e5:1e:04:ef:d7:d7:aa:
         c2:22:46:bf:bf:bd:2d:ae:c7:5c:8e:ac:64:2f:b7:d6:a8:5e:
         e0:66:1f:8f:50:3a:d8:8e:c3:9b:36:d2:ae:33:5d:f5:d2:37:
         8f:19:69:12:a6:05:7e:ec:34:65:74:e3:43:4b:6c:f4:bc:15:
         d1:54:16:52:3d:6a:bd:b9:82:e3:97:5e:f5:2b:e4:cf:16:e5:
         25:3d:b1:b4:2b:52:4e:14:ac:8a:05:18:f3:0f:ed:5c:f1:67:
         34:f0:a3:aa:03:66:fa:7e:2e:29:a0:d2:40:ac:e4:cf:2b:2a:
         3f:4e:f5:80:dc:3c:05:e1:64:81:e1:67:84:1e:4a:ac:04:be:
         ed:55:1e:a5:c6:6a:5a:94:51:31:9f:28:b7:b9:18:36:03:53:
         b4:0e:41:ad:78:d9:d0:13:e6:dc:99:f8:6a:a2:c3:26:9e:35:
         8a:b9:41:75:0d:74:2d:a9:eb:dc:9d:25:cd:ce:cd:da:8c:c0:
         18:a5:1e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:30:14 2026 by rpki-client