Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9521470e-60a8-4627-854b-23346de593e3.roa
File:                     9521470e-60a8-4627-854b-23346de593e3.roa (raw, json)
Hash identifier:          lU2lMB/10vpJOiIZ7ts9zOH4usL+gNOk/CaEQ4Yoe3o=
Subject key identifier:   37:5C:2D:29:64:6B:30:A9:28:8A:30:E5:E9:C2:58:C7:F8:6A:27:53
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2F42A3B6A44867C34C9FFAC3281AD81F87AE12E2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9521470e-60a8-4627-854b-23346de593e3.roa
Signing time:             Tue 06 Oct 2026 00:50:09 +0000
ROA not before:           Tue 06 Oct 2026 00:50:09 +0000
ROA not after:            Mon 04 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        15.219.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:42:a3:b6:a4:48:67:c3:4c:9f:fa:c3:28:1a:d8:1f:87:ae:12:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 00:50:09 2026 GMT
            Not After : Jan  4 23:59:59 2027 GMT
        Subject: serialNumber=36747182479c760348efee53c8b9202dc2e6e631e609f86f74da391dfa8c856f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:99:ec:83:50:1c:3d:e7:ef:e7:da:cc:05:42:
                    8b:23:1d:8f:78:cb:44:2f:55:d5:4a:5c:8f:17:06:
                    d5:4e:06:20:64:50:38:7d:9a:e2:19:93:a8:a9:e8:
                    2a:63:3c:68:3f:e9:63:89:e4:17:3d:24:9b:12:28:
                    54:e5:5e:4c:7d:df:69:0b:60:37:9a:21:4e:0f:f2:
                    c1:7a:f5:5c:ba:6f:cb:ad:85:92:d9:fe:e4:70:cc:
                    5e:9d:22:41:0f:2c:83:bd:84:57:0b:b8:76:68:b0:
                    76:37:ea:a5:5e:64:5f:32:5f:ef:3e:02:59:66:6f:
                    03:18:0a:e3:12:71:d7:00:02:19:a1:05:13:4a:cf:
                    4c:0c:96:44:49:df:37:7e:f4:e6:17:48:6d:3a:16:
                    1b:31:9c:9c:bf:2a:58:41:2f:77:55:87:6f:dc:99:
                    6e:5b:7d:2b:d7:98:78:0c:08:44:e7:e5:00:4d:52:
                    e2:4c:26:0a:ad:6d:80:91:e6:a8:8f:18:a5:66:99:
                    69:17:4c:42:e3:93:e3:55:90:d7:4f:da:8e:15:1c:
                    a5:db:ac:30:4f:b4:d8:2d:5c:1f:b3:0e:6b:eb:26:
                    20:ae:4a:c6:c6:50:4a:60:68:7f:9b:37:e0:6c:e8:
                    78:f3:2f:29:bc:0c:38:e5:75:8a:4d:ae:d5:42:fa:
                    b0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5C:2D:29:64:6B:30:A9:28:8A:30:E5:E9:C2:58:C7:F8:6A:27:53
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9521470e-60a8-4627-854b-23346de593e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.219.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         33:1b:1b:cd:26:08:a0:cd:7e:ba:4e:0e:08:1f:33:41:5d:7e:
         76:3b:f1:65:ff:29:46:21:5c:ea:1d:c3:f7:48:fe:ca:a0:16:
         f7:fb:c2:6d:ab:f1:b0:e8:9d:0d:51:d0:8e:18:6c:bb:64:ef:
         72:a5:33:10:99:d3:2e:12:29:36:44:20:4c:32:a1:10:87:31:
         39:da:63:7d:dc:9a:0a:9c:de:9d:1e:15:6b:7f:be:b7:b8:d5:
         78:25:7f:89:bc:35:b7:7c:79:61:5a:6a:c8:05:56:cb:df:59:
         96:c5:9c:3b:6f:79:82:df:51:ae:9c:82:af:2f:79:87:eb:b5:
         69:1a:e4:e6:8a:0d:26:cf:3e:03:6a:a8:c4:6e:89:35:f7:a2:
         84:cd:25:5e:cb:82:77:a6:d8:44:28:29:f0:09:fd:fb:58:fe:
         87:e8:ea:fe:62:b5:9b:7e:f3:70:05:dd:7b:a5:49:0d:73:70:
         23:20:bd:bd:1e:17:2f:43:4d:50:9c:ca:7c:00:99:3a:a1:e5:
         46:02:67:4f:f4:f4:3c:df:75:70:77:e8:d1:25:4e:bb:bc:df:
         a7:4a:cf:9d:0c:b4:eb:e8:3e:69:00:2c:9d:0d:39:bb:e0:26:
         09:13:4a:41:28:5f:6e:e9:52:89:c6:ae:69:bf:61:78:16:f4:
         87:2d:89:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 02:45:23 2026 by rpki-client