Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9d0356d-ebd3-4994-9756-b2199398d95a.roa
File:                     a9d0356d-ebd3-4994-9756-b2199398d95a.roa (raw, json)
Hash identifier:          InCGiP5QuBwxIhgib0ODbY5bcrPdURoJVptFNwxycmY=
Subject key identifier:   38:69:6D:9C:34:7B:3D:18:3B:F2:42:4A:F2:2E:7E:AD:A3:B6:E1:C5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       133E2C6853D4FFE345546659599816FFFD48C288
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9d0356d-ebd3-4994-9756-b2199398d95a.roa
Signing time:             Fri 16 Oct 2026 00:30:38 +0000
ROA not before:           Fri 16 Oct 2026 00:30:38 +0000
ROA not after:            Thu 14 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        216.198.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:3e:2c:68:53:d4:ff:e3:45:54:66:59:59:98:16:ff:fd:48:c2:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 16 00:30:38 2026 GMT
            Not After : Jan 14 23:59:59 2027 GMT
        Subject: serialNumber=d947ecebcd6951b172edb7bbec3ee6d69697a5d33decb05f893d3408863fac9b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0b:35:c4:31:4c:95:46:ee:ad:6a:58:af:4f:
                    aa:22:58:ee:a1:b6:13:8b:f7:82:81:82:9e:de:e1:
                    28:6e:5d:b2:f4:ed:6d:1f:5d:29:90:66:35:b9:5b:
                    96:c4:35:bd:0a:01:d1:cd:6d:a3:dc:61:95:82:b5:
                    a8:6f:62:8a:79:e8:03:a1:81:f6:03:9a:b9:7d:b2:
                    dc:ba:99:ae:f7:20:f5:b9:7a:dd:20:58:bc:46:bb:
                    c6:47:a9:c3:0a:15:b5:b1:5b:f4:bb:6b:73:26:6d:
                    2b:45:4f:09:d7:11:c8:c2:13:35:a4:52:0a:af:77:
                    74:2c:d2:ba:28:e1:1e:cb:a8:b6:d5:b1:6d:8c:64:
                    ef:a0:64:3a:78:b9:7b:e3:81:de:d9:b3:b8:74:c6:
                    f5:20:82:14:24:7a:8a:76:2c:88:d6:e0:a9:02:45:
                    01:da:58:29:a5:37:7e:f5:80:b7:73:87:b9:2b:48:
                    3c:97:ea:2e:07:31:95:5b:79:53:98:9d:21:6f:af:
                    5d:57:54:53:1d:92:5b:43:c6:bf:8c:43:36:09:e8:
                    4c:ab:8e:82:ef:6e:17:d2:82:a8:85:cf:a2:17:3b:
                    7b:e2:c9:4a:ac:29:bc:36:5c:67:af:10:24:63:88:
                    62:c3:7b:cd:af:6b:85:5f:80:d0:20:0f:9c:55:c0:
                    b0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:69:6D:9C:34:7B:3D:18:3B:F2:42:4A:F2:2E:7E:AD:A3:B6:E1:C5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9d0356d-ebd3-4994-9756-b2199398d95a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.198.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:30:5b:7f:3a:1c:58:dd:4d:85:7a:5a:e7:f5:10:78:36:f7:
         47:18:cb:8b:a3:6f:71:22:ce:f3:02:5a:a7:fd:2c:ec:15:d9:
         af:89:ae:ff:ab:5e:4f:ac:4a:8e:58:ed:3e:95:0e:98:c7:74:
         da:ab:3e:ff:06:b4:35:e4:57:a1:54:9c:a7:08:b5:3d:69:e5:
         e6:7c:2f:0c:86:ae:b3:6e:1f:65:a4:7d:4c:2b:45:eb:9c:71:
         0f:04:a3:00:5b:4e:99:0d:3e:67:b5:6c:1c:47:1b:a9:e7:2f:
         ac:d5:d3:44:8b:8c:c3:2a:f7:88:af:3c:2e:92:16:23:56:a2:
         04:17:11:4c:39:af:05:6a:16:7a:e0:1e:ff:88:e4:79:23:d2:
         96:aa:f1:d5:c1:cb:d1:d1:c1:be:3d:62:d5:42:b7:05:da:87:
         04:64:55:41:4e:29:08:78:c3:e6:be:b1:e0:fe:4e:c6:26:85:
         dd:f3:22:06:46:da:de:a0:52:0c:e7:ab:37:40:ba:0d:26:a0:
         04:f6:e9:b7:7e:d8:f1:2e:86:e3:b8:28:84:fc:22:7a:02:eb:
         1f:89:c4:f5:64:8e:b7:59:ef:f4:a1:64:a9:c6:27:46:8e:51:
         68:e9:10:d4:8d:09:a9:f3:a4:8c:d7:92:bc:9a:c9:5d:1d:0e:
         be:0f:43:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:30:34 2026 by rpki-client