Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9eaf6742-59c5-48eb-a0f8-74c2f6d197de.roa
File:                     9eaf6742-59c5-48eb-a0f8-74c2f6d197de.roa (raw, json)
Hash identifier:          lYTRIJwcCco313HJ9+uxpZPkAsQyMpjx4l6wHajmvi0=
Subject key identifier:   06:81:B4:DA:73:51:FE:9C:23:9E:F1:9D:07:3E:54:37:BC:45:77:50
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7E3013B292589E351E66C79DDE6E1EF50573312C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9eaf6742-59c5-48eb-a0f8-74c2f6d197de.roa
Signing time:             Fri 23 Oct 2026 01:21:12 +0000
ROA not before:           Fri 23 Oct 2026 01:21:12 +0000
ROA not after:            Thu 21 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        23.22.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:30:13:b2:92:58:9e:35:1e:66:c7:9d:de:6e:1e:f5:05:73:31:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 23 01:21:12 2026 GMT
            Not After : Jan 21 23:59:59 2027 GMT
        Subject: serialNumber=0d93f797f9ad5b0998f8fd8a8c3dbf224c3268224f2ed51c17b6ae412ac72ce6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0d:20:d1:59:11:cf:35:7e:fc:ed:11:08:56:
                    17:c3:f7:16:92:9a:02:f7:ac:9e:b2:1a:1b:6d:05:
                    55:41:5d:49:cd:05:67:b8:fb:22:42:66:f0:9d:8a:
                    19:16:b7:45:95:bf:c4:98:d4:7f:06:23:da:01:8a:
                    20:3b:35:9a:9d:eb:df:9b:25:85:b2:e6:54:66:99:
                    85:02:23:02:58:62:55:32:ba:4c:a4:59:e3:9b:65:
                    da:43:aa:74:da:09:44:3c:40:3d:1a:ea:c2:0c:48:
                    87:38:9e:01:f0:ec:15:80:46:92:12:ae:07:93:92:
                    d3:08:0c:6f:6c:d9:02:f2:08:ea:7d:ab:16:45:b8:
                    d4:e4:1d:95:58:c8:f2:6f:ef:73:de:4b:0a:e2:5a:
                    73:ac:ed:5c:50:84:66:cf:ba:5f:32:e4:45:e3:e9:
                    d7:1a:f1:52:80:3f:86:d2:85:55:ba:94:69:4c:31:
                    dd:be:44:84:0b:74:13:4f:0e:e2:a3:ce:5f:07:fa:
                    97:22:75:bf:62:e0:52:1a:67:75:28:0a:a2:9c:26:
                    f3:48:92:c2:8e:84:41:b0:30:c1:43:40:cc:f4:65:
                    07:54:a7:1c:17:51:dd:4d:ae:56:75:45:4b:1c:f9:
                    73:98:63:c5:92:0d:e0:36:95:d3:33:31:01:20:c0:
                    60:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:81:B4:DA:73:51:FE:9C:23:9E:F1:9D:07:3E:54:37:BC:45:77:50
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9eaf6742-59c5-48eb-a0f8-74c2f6d197de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.22.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:00:80:b8:54:72:ff:ac:59:4d:dd:a5:0f:f3:81:b5:63:13:
         08:20:b3:0a:16:1e:6c:e9:26:53:2f:81:c0:65:0f:82:32:ed:
         84:cc:cb:a2:e8:bc:07:37:91:2f:f6:c9:09:de:2e:a4:74:d8:
         34:ad:b8:04:5e:64:b0:18:bc:3a:be:d9:5f:97:de:8e:08:eb:
         7b:f2:e5:cd:58:c1:0d:32:20:bb:fc:81:35:f2:56:4c:21:ac:
         eb:fa:f3:4a:fc:a6:15:21:20:83:0d:62:5b:fd:d9:3a:a2:e8:
         83:94:00:c6:7f:f8:78:09:8a:90:a2:8b:cc:69:c1:e6:b4:58:
         4e:d4:47:58:44:23:9e:d2:b7:1f:1d:35:83:c0:7d:10:8a:d6:
         0e:d6:de:19:2d:14:d5:06:9f:05:ff:7a:54:77:8a:91:fe:8c:
         d2:42:a9:95:ac:bd:54:d9:50:d7:75:ba:f0:1c:c9:b2:28:4e:
         6e:7e:3e:21:7a:77:7a:0c:9c:d4:a0:6d:c6:32:08:0a:3c:29:
         f9:3f:42:cf:c6:0b:9a:38:e5:cc:a3:d7:55:77:78:0a:44:a6:
         4e:18:91:c0:fc:7c:94:2f:a4:7f:72:cc:b1:2e:9b:30:a1:5d:
         00:03:aa:67:48:03:17:0a:9f:8c:7f:b5:8a:50:01:25:35:ff:
         e0:d8:31:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:42:07 2026 by rpki-client