Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a583480e-e1d9-4d35-8137-1605a5cfffc9.roa
File:                     a583480e-e1d9-4d35-8137-1605a5cfffc9.roa (raw, json)
Hash identifier:          KKEdIsI6j6lE7nqAeYy20rXSHiTX9+0TPmrLGH6HsJc=
Subject key identifier:   9B:BE:57:18:AE:70:E9:1B:63:D6:13:E8:75:33:46:E4:D7:41:FF:0A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4DED10555EB49B349178EECBDD76FC491DBE0551
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a583480e-e1d9-4d35-8137-1605a5cfffc9.roa
Signing time:             Sun 11 Oct 2026 01:06:52 +0000
ROA not before:           Sun 11 Oct 2026 01:06:52 +0000
ROA not after:            Sat 09 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        37.203.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ed:10:55:5e:b4:9b:34:91:78:ee:cb:dd:76:fc:49:1d:be:05:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 01:06:52 2026 GMT
            Not After : Jan  9 23:59:59 2027 GMT
        Subject: serialNumber=72bdf8c8a1fdffe936b11735ada6a5b00f9d965e84272c66002e9e3e7334e89a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:56:9b:6d:5b:05:7d:4b:74:7f:ed:07:eb:f4:
                    75:24:2b:a1:b2:34:86:54:07:a5:dc:0e:1c:60:d8:
                    67:d7:2e:8b:ff:1d:5d:a2:90:f0:b8:ae:ab:1c:75:
                    f5:80:f8:ad:17:74:b1:ec:70:55:31:d6:cb:77:6b:
                    f5:19:5d:47:69:1e:d9:58:bc:3c:bf:b0:0f:50:99:
                    46:b1:a2:ad:3b:67:3d:01:2c:da:88:7f:c0:fd:43:
                    ca:4b:c6:35:63:e2:f3:bd:d8:58:4c:61:47:a5:73:
                    a3:05:f9:f3:c9:d3:a1:c3:8f:1f:63:fc:a9:a2:eb:
                    d6:e4:90:82:cb:5e:aa:b8:98:2b:d4:9d:87:7c:47:
                    48:9e:9f:0a:44:4d:9e:f4:7f:93:f6:d5:6e:c7:97:
                    d1:ab:c4:d9:aa:ca:5c:84:a8:9c:da:49:1a:3d:46:
                    12:31:19:a3:59:aa:da:6e:9f:84:e9:b5:76:14:b4:
                    43:79:15:31:12:53:6f:b0:5f:83:88:bb:2c:30:92:
                    14:79:25:c2:b8:7e:bc:b9:65:0c:2c:d6:3c:6d:0c:
                    1b:54:8f:6f:02:02:de:f1:c2:1a:f7:2e:75:d7:a8:
                    63:fa:c6:85:49:52:3c:a7:18:b5:7f:f9:d7:83:bc:
                    df:43:d6:97:60:9d:28:56:6d:e1:87:c8:37:99:67:
                    94:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BE:57:18:AE:70:E9:1B:63:D6:13:E8:75:33:46:E4:D7:41:FF:0A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a583480e-e1d9-4d35-8137-1605a5cfffc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.203.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:ab:90:07:ba:db:30:07:8d:ed:8d:14:eb:83:5e:16:5a:2d:
         a2:53:d7:95:f8:d0:d5:e1:cd:c5:39:5c:27:c8:41:b2:81:04:
         9b:a0:73:55:7b:cf:0f:87:c0:1a:94:9c:fc:07:c9:32:e2:3d:
         46:35:79:d8:2f:3c:54:5d:b4:b4:ca:d0:1c:38:e9:15:bd:41:
         17:57:f7:c7:52:3b:37:49:1a:df:07:22:0f:17:c7:a4:e4:1c:
         d2:eb:8a:15:47:7c:fe:77:ad:65:6a:fa:81:c8:4d:aa:58:8d:
         92:ce:2f:e4:86:f3:10:1f:21:0e:e5:af:89:7e:dd:f5:2e:ad:
         d9:76:64:b1:2f:0b:72:3f:ec:2d:a0:2e:9f:8f:91:43:82:58:
         ba:c7:9d:52:5c:3b:bc:bd:b3:15:00:a4:78:5e:8d:be:b0:a1:
         51:ff:a7:50:32:6b:24:53:c2:64:6d:dd:08:f7:12:d8:55:5c:
         94:7f:2d:f0:18:2b:59:02:6f:39:c4:80:dd:76:e2:4e:12:f4:
         0e:6e:b3:e4:fa:e8:8a:16:b1:f0:a4:66:00:6e:44:fe:fc:99:
         1b:3e:14:77:e9:7d:cd:4e:44:b4:3e:6a:8a:e0:a1:c5:0d:ef:
         d1:8e:72:c0:49:de:e2:0d:18:51:58:20:8d:97:70:3d:84:b1:
         5a:00:bf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 04:12:45 2026 by rpki-client