Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d2fe7a4-4293-4ba7-90d9-e9550e1bf0ee.roa
File:                     9d2fe7a4-4293-4ba7-90d9-e9550e1bf0ee.roa (raw, json)
Hash identifier:          gcfLFJe7uGq9b/XlCKuTeFeSy5W0q9LSs67hshrhvHE=
Subject key identifier:   75:6B:02:F3:F2:BB:83:41:17:4D:BA:BF:D7:53:95:F5:EA:4D:26:4B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3D64DEED5A7D4A86237BA7CA292B966538E4BD44
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d2fe7a4-4293-4ba7-90d9-e9550e1bf0ee.roa
Signing time:             Wed 21 Oct 2026 00:09:15 +0000
ROA not before:           Wed 21 Oct 2026 00:09:15 +0000
ROA not after:            Tue 19 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        24.110.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:64:de:ed:5a:7d:4a:86:23:7b:a7:ca:29:2b:96:65:38:e4:bd:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 21 00:09:15 2026 GMT
            Not After : Jan 19 23:59:59 2027 GMT
        Subject: serialNumber=2ccf319e7270c5a1797b92a66bfef416c9aa37b8cc78327ad046da80049104bf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d0:92:92:65:96:98:0b:31:77:1c:13:0f:a3:
                    de:f3:50:1f:a9:d0:7e:ac:89:cc:ac:4e:f2:2c:3a:
                    21:aa:05:51:e8:35:6c:81:6f:09:49:75:52:7d:d2:
                    be:7e:23:51:87:0e:42:0b:af:a4:cb:2b:82:c2:d7:
                    f5:91:85:bc:07:9c:13:4c:a8:9f:97:52:16:aa:da:
                    4f:9f:a2:9d:64:7e:a7:91:70:c0:93:ad:4c:2b:fe:
                    ee:8a:e9:b7:d3:43:90:be:74:18:76:bd:8c:54:89:
                    3a:9d:e6:c1:09:a3:f5:2c:65:4c:c7:22:38:f8:f7:
                    26:df:0b:01:5a:52:8f:7d:a9:b1:a4:d0:36:d8:bd:
                    8c:1f:f1:7b:86:eb:46:bb:30:ec:5c:2b:73:c7:ec:
                    01:51:69:c1:ec:28:69:0b:dc:b3:29:ac:24:c4:c3:
                    35:d5:db:49:b8:ee:6f:4e:64:b7:b9:c9:4e:98:c7:
                    6d:34:df:61:a3:eb:39:c9:0a:ca:f5:54:1c:d7:b2:
                    f4:5a:c3:3b:b9:7f:8e:70:78:c8:09:db:5c:d0:95:
                    81:79:52:49:a6:d0:bd:98:34:73:33:a2:10:6f:e2:
                    d7:fb:c5:82:16:75:90:48:62:6b:30:12:3d:b0:d1:
                    9e:0d:4f:84:c8:2a:31:67:57:46:ff:14:0f:6b:1a:
                    c1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6B:02:F3:F2:BB:83:41:17:4D:BA:BF:D7:53:95:F5:EA:4D:26:4B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d2fe7a4-4293-4ba7-90d9-e9550e1bf0ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.110.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:c5:09:16:d6:d4:1f:10:b9:15:07:15:b9:2c:32:9e:d2:f5:
         51:9e:7b:14:20:78:30:ba:e2:60:7b:a7:32:48:3e:82:74:4a:
         a0:15:39:7d:14:37:1b:c3:50:68:26:af:b6:51:56:0f:40:c4:
         d9:57:47:93:5e:d5:6d:16:ad:3b:ef:ef:05:29:9a:b6:34:d3:
         f8:b5:6b:33:b5:2c:ca:42:57:6a:ce:d9:21:61:62:0b:e2:d5:
         d3:84:dc:49:d4:bb:68:89:5f:d7:b8:b9:c7:45:f3:82:ac:3e:
         bd:0e:72:c8:52:1b:19:23:73:23:4c:00:49:fd:0c:fa:a1:b8:
         8e:16:b4:69:45:a1:4d:ef:d7:64:64:b7:c3:0d:35:9a:9e:ba:
         c7:9d:a3:dd:6f:c0:d5:b8:2f:82:ca:78:ce:89:7b:e0:8c:ec:
         ac:d1:d3:f9:63:62:cf:26:bf:b4:b4:13:7f:0e:73:60:97:e4:
         c0:0a:f9:c8:86:7a:b1:e3:27:56:be:ff:68:e1:f1:52:99:97:
         47:8a:98:cd:b9:00:1c:b0:37:c1:63:37:08:47:7d:67:7a:5f:
         0a:ea:00:64:65:3c:3c:25:b7:1c:a2:92:7c:b0:e7:40:08:7e:
         70:a5:00:12:7d:21:33:19:4b:d1:8a:0c:69:f0:11:b7:1d:b2:
         66:d8:0d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:15:58 2026 by rpki-client