Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a83ed0e8-a8b6-44ed-a8c9-0a39bb496c66.roa
File:                     a83ed0e8-a8b6-44ed-a8c9-0a39bb496c66.roa (raw, json)
Hash identifier:          sapbzM0UkkumAo6IN7c3ke8JAEP+lbIiHar/A9J2CaA=
Subject key identifier:   A1:08:7F:CD:E9:F7:5F:03:8D:08:62:CC:FC:E6:F9:25:2D:DC:8C:1D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       79D403FF21D638E41F845AA5005BBE37F37FDF38
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a83ed0e8-a8b6-44ed-a8c9-0a39bb496c66.roa
Signing time:             Sun 11 Oct 2026 00:41:50 +0000
ROA not before:           Sun 11 Oct 2026 00:41:50 +0000
ROA not after:            Sat 09 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        50.18.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d4:03:ff:21:d6:38:e4:1f:84:5a:a5:00:5b:be:37:f3:7f:df:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 00:41:50 2026 GMT
            Not After : Jan  9 23:59:59 2027 GMT
        Subject: serialNumber=e5c2c5b69b6c076db07ba562be473b11c4845a59aaed072955bb08af760ee09e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7d:3b:f9:87:b9:3b:b6:28:05:cc:84:24:c0:
                    04:2a:4c:0b:e5:7b:7d:01:87:3d:33:0f:47:4f:c0:
                    f7:ed:38:29:f9:d2:16:99:de:83:0d:e0:e6:d0:27:
                    01:32:9a:e7:90:ca:21:a7:03:aa:d4:13:21:20:42:
                    2f:97:d6:9d:61:bd:d8:93:83:8f:17:65:c1:fc:11:
                    d2:5c:59:74:3f:bd:52:a0:56:85:01:7b:90:44:5c:
                    46:d4:11:8e:ba:cb:2d:00:c3:fa:88:fd:92:09:c8:
                    75:20:8f:67:c1:26:8e:df:bf:5e:61:27:79:1c:e5:
                    ad:6a:be:fd:db:19:b7:4f:6c:de:cc:10:a5:f3:a8:
                    40:6a:9a:bb:11:7d:68:b7:c8:6d:d6:60:e1:72:63:
                    c8:c1:9e:cb:e0:f6:42:b2:9e:ea:d7:e4:5f:c9:4d:
                    04:20:b3:76:22:92:b4:e0:c0:6c:9d:8d:c5:ab:e1:
                    6b:7f:89:bc:db:1c:b8:85:09:78:2e:e0:bd:89:94:
                    df:c6:87:59:07:ea:15:f0:b0:12:78:d6:a0:f5:07:
                    89:29:bf:e6:0c:2d:d7:c5:c3:ad:5b:f9:5e:93:58:
                    56:f2:9a:82:d2:33:bd:d5:08:61:44:83:57:e7:47:
                    aa:48:cd:7d:86:d9:99:af:00:5b:4d:39:09:17:24:
                    bf:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:08:7F:CD:E9:F7:5F:03:8D:08:62:CC:FC:E6:F9:25:2D:DC:8C:1D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a83ed0e8-a8b6-44ed-a8c9-0a39bb496c66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.18.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:44:6f:56:81:53:bf:c3:2c:89:67:7b:64:2b:78:e2:5b:94:
         ec:f0:39:17:97:e5:1f:a4:50:cf:d6:13:64:37:56:f3:87:79:
         8a:a2:e2:dd:95:2b:48:ac:5e:ab:96:87:eb:1e:03:c9:d9:a9:
         31:ab:0f:4d:b2:89:bd:2d:0e:9a:f8:d1:ef:72:6b:bf:0d:4f:
         5a:30:85:7a:92:13:c3:ec:8c:60:2d:8e:3a:4e:76:72:ff:a3:
         3d:bc:94:8b:fb:9d:9a:3f:ea:67:85:77:a3:91:45:db:a9:fe:
         b4:7e:44:29:ee:8f:ed:99:3e:a0:86:07:11:d2:c6:fb:fe:5a:
         f9:98:f5:0c:ce:cb:2c:59:7c:87:bc:12:08:fb:51:e1:3d:40:
         8e:66:22:53:47:5e:a2:41:f8:b2:b2:a1:ad:16:63:66:64:17:
         78:13:0e:f6:42:34:92:45:c0:b2:51:d8:57:24:1b:43:7a:ef:
         fe:fd:b9:d7:e4:a9:5a:a8:91:47:89:c4:b9:5e:8b:f0:87:7c:
         a2:95:f7:b5:a0:e8:4a:2b:d1:ab:6c:22:51:f9:a2:ea:61:4a:
         ed:b9:3e:80:d1:0d:26:b5:66:6d:9d:c3:c3:24:a4:df:15:1f:
         24:eb:0a:c1:b2:27:29:2a:75:3d:51:2a:32:41:e7:2a:c9:a7:
         67:50:f9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 15:59:08 2026 by rpki-client