Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9df4275a-fd2d-469c-bf6b-95557b6a7e2f.roa
File:                     9df4275a-fd2d-469c-bf6b-95557b6a7e2f.roa (raw, json)
Hash identifier:          qP0VaPLfEeTOwmYdKkpLltYdfNUkIjl+eDaXKqVvlng=
Subject key identifier:   DD:E5:9E:25:C6:AB:8D:62:CA:6C:C0:FA:26:07:0C:61:0C:19:A7:3A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7C5BF5ADF6D8C350CC84C1C3E4B29B4B41F2E02C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9df4275a-fd2d-469c-bf6b-95557b6a7e2f.roa
Signing time:             Sat 24 Oct 2026 00:21:12 +0000
ROA not before:           Sat 24 Oct 2026 00:21:12 +0000
ROA not after:            Fri 22 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        56.160.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:5b:f5:ad:f6:d8:c3:50:cc:84:c1:c3:e4:b2:9b:4b:41:f2:e0:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 24 00:21:12 2026 GMT
            Not After : Jan 22 23:59:59 2027 GMT
        Subject: serialNumber=0b3df176e7e49be8ad82f20570ff054be0c45a8bd801afcd069a306925510fd7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2e:d5:cf:fa:b2:81:13:0f:f6:03:6d:c6:17:
                    18:27:d3:0f:77:a5:c1:51:84:a1:c5:15:c9:43:63:
                    41:3c:ea:4f:bf:fc:8a:f4:51:df:16:9d:77:3b:11:
                    28:a8:bf:0d:35:a4:26:62:56:a4:f7:ac:9c:42:34:
                    e5:c0:b1:4a:f7:5d:ca:5f:06:4a:ea:91:4e:4e:4d:
                    61:3d:8d:16:de:01:0b:4e:5e:b7:ad:d4:75:fd:8e:
                    fd:7b:03:de:e4:83:3c:20:cd:54:05:7a:46:c8:90:
                    7b:e8:35:b0:97:fc:23:8a:26:56:70:bd:af:f4:7f:
                    8f:41:a3:2b:99:a2:fe:20:24:d0:e7:a6:1c:65:d6:
                    0a:dd:7a:25:43:6c:66:2c:fa:45:69:b5:48:4f:25:
                    51:ef:da:b4:ce:a1:99:f6:de:5c:e9:85:fc:23:c2:
                    03:91:fe:d1:25:f7:69:c2:e3:3e:09:fd:84:6c:ca:
                    b7:46:3b:d7:76:76:bf:7e:8e:7f:8b:67:3f:27:e8:
                    1c:33:a8:29:5a:12:bd:76:ca:cd:64:98:39:84:50:
                    4f:1d:40:df:a8:67:7a:b9:ca:06:06:13:8a:76:31:
                    93:66:d4:11:2b:9f:06:35:2a:3c:44:81:ab:8f:e2:
                    a1:9b:5e:e8:68:10:5e:89:2d:0c:84:e9:89:07:2a:
                    c2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E5:9E:25:C6:AB:8D:62:CA:6C:C0:FA:26:07:0C:61:0C:19:A7:3A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9df4275a-fd2d-469c-bf6b-95557b6a7e2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.160.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         81:c5:2b:30:70:b9:15:6c:b0:ae:5c:8b:cd:1a:db:7f:52:57:
         4c:0f:c6:70:17:0e:a1:fe:a9:e3:d1:d1:a7:d5:98:2a:b3:2a:
         1c:66:28:db:ad:7f:18:d9:07:6b:52:4c:2a:55:12:d3:ae:c2:
         37:42:fb:68:77:2a:6f:8d:cf:95:90:47:d7:26:15:5a:28:00:
         bf:cf:ad:54:f4:ed:9e:45:76:f0:ed:d2:7e:d0:be:41:2c:54:
         b4:94:f8:be:d5:70:f0:a0:74:4a:62:e0:16:3d:bd:c5:45:d2:
         54:93:51:66:d0:b5:01:bc:b6:19:a7:7e:13:76:db:b2:b2:4a:
         c2:e9:44:c1:16:ae:57:28:d5:ef:de:20:e2:7f:f1:5e:7e:35:
         6e:d8:5a:5e:55:eb:2f:91:a2:dd:4e:56:98:b9:00:97:9c:58:
         67:cb:c7:43:ea:bf:0c:c7:2e:ba:1c:77:26:c5:29:9b:5e:cb:
         91:9f:cb:48:3b:09:a5:ce:4d:68:4f:87:0a:3d:ea:61:43:15:
         d1:97:52:68:6e:70:f4:c8:45:d8:c2:fa:2a:01:69:91:5a:ed:
         9e:a2:88:b6:49:de:42:66:16:a8:f3:d6:ee:59:06:c7:af:35:
         c5:5a:4c:32:25:80:50:6c:5d:bf:e5:a4:d0:56:2b:39:cd:57:
         7d:64:c5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 07:49:49 2026 by rpki-client