Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b448195b-84f3-4e2c-beb9-33cee532dce4.roa
File:                     b448195b-84f3-4e2c-beb9-33cee532dce4.roa (raw, json)
Hash identifier:          HWTPcEPsySR70eBSlkCWLRcei4fZ72bF1rnqtpKywdE=
Subject key identifier:   16:E5:BF:50:A3:19:60:69:FA:B3:C4:73:AE:B2:6F:7D:04:32:55:85
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0BABC43AE020FA937A6BCE7E3E9B31B613491A1B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b448195b-84f3-4e2c-beb9-33cee532dce4.roa
Signing time:             Thu 22 Oct 2026 02:11:43 +0000
ROA not before:           Thu 22 Oct 2026 02:11:43 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        107.22.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ab:c4:3a:e0:20:fa:93:7a:6b:ce:7e:3e:9b:31:b6:13:49:1a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 02:11:43 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=9d5d8b4a2371d64372869e19c8b1a5828f3ca29fcb9eed6cc55136edf30f4f13, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:42:25:c4:63:55:71:dd:c4:9f:d3:ff:22:53:
                    46:72:56:9b:0c:6e:39:6e:d8:ff:3f:68:4e:ca:5b:
                    de:13:0b:93:4b:5c:9d:b5:a3:02:d1:6f:7d:5e:5e:
                    9a:84:9a:bb:7b:81:01:37:81:d8:c8:ee:a2:80:53:
                    d6:2c:c4:93:ec:6b:73:a9:22:b9:b3:93:95:b8:cd:
                    2e:99:79:af:00:b9:0f:6e:98:6f:d4:ca:32:dd:22:
                    90:e0:20:eb:07:63:8e:a5:6e:b6:3a:26:bd:8b:56:
                    0d:ae:6f:69:e3:db:78:16:7f:b3:ac:6c:25:01:3a:
                    85:a9:ad:99:70:c5:c8:a3:a1:16:2a:5c:42:79:56:
                    bb:2c:a3:12:86:10:7e:42:89:c7:cf:82:ba:41:6e:
                    3a:e9:81:79:1f:df:cc:ab:1b:47:60:2c:48:6a:04:
                    83:39:fd:a6:d8:73:94:ce:ee:6c:83:b8:ba:12:89:
                    2f:54:c0:fb:7f:e7:4e:26:da:ee:b8:bd:ae:5e:7e:
                    3e:ac:f2:75:38:0e:c4:56:6b:63:f3:ac:d1:aa:53:
                    51:75:aa:69:6d:ae:71:0c:a7:47:c2:14:aa:a6:47:
                    4c:2e:af:7a:c3:68:fe:09:70:d0:8f:c2:e3:72:1f:
                    ed:0b:6b:26:a8:0a:fb:41:43:69:bb:02:67:a0:1c:
                    91:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E5:BF:50:A3:19:60:69:FA:B3:C4:73:AE:B2:6F:7D:04:32:55:85
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b448195b-84f3-4e2c-beb9-33cee532dce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.22.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:48:74:ac:35:e8:c9:53:6d:d1:aa:82:33:d5:04:4a:38:2c:
         b9:74:fe:a1:ed:70:fa:de:cd:b2:8c:5d:c8:bf:2d:e0:5e:af:
         01:28:5a:21:fc:db:3f:c3:77:45:5a:fd:c5:15:93:21:d0:55:
         ac:e6:3a:15:81:18:b2:d7:61:a5:ab:6a:f5:d0:8d:3a:9c:89:
         10:d3:b2:b3:a6:70:1f:cd:4b:2f:af:10:ef:8e:11:43:68:98:
         63:10:27:d1:ac:eb:a8:ac:a7:52:ec:72:46:0c:8e:8d:85:6c:
         8b:47:a2:23:22:b0:fb:b6:d0:80:f8:d3:e7:dd:cc:7f:f6:a8:
         af:47:70:20:7e:ff:e0:ad:fb:52:ac:0e:91:67:97:1a:dc:7e:
         56:38:35:86:2e:73:39:08:69:aa:b6:7d:4f:ed:72:91:af:01:
         89:6a:e4:52:8f:6b:e1:c2:f5:fc:56:0b:b8:fc:c8:78:48:df:
         79:25:27:0f:16:58:00:aa:46:27:39:6a:e0:94:34:27:85:e8:
         93:bf:34:7e:e4:a1:2f:12:7d:42:f8:60:93:66:4e:72:82:b8:
         e3:7f:d9:3a:4c:30:ee:7d:9b:a8:e1:9b:57:93:39:98:cf:f1:
         ac:ed:e1:b2:0f:c6:09:91:8a:32:25:59:43:92:18:eb:36:5d:
         63:82:90:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 20:12:40 2026 by rpki-client