Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b466b9f8-fb3b-44eb-8997-8f74888df4ab.roa
File:                     b466b9f8-fb3b-44eb-8997-8f74888df4ab.roa (raw, json)
Hash identifier:          IHsftJrhUnlT/CbjpUp5cqU6ksXzFKfvhWdKW+JHDbg=
Subject key identifier:   51:41:23:1A:4A:E9:8C:76:94:AF:5A:22:6A:83:24:C7:82:E8:90:F6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       24AA902CF9F31D4D2555D390220E62C9C568249E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b466b9f8-fb3b-44eb-8997-8f74888df4ab.roa
Signing time:             Fri 07 Aug 2026 00:41:12 +0000
ROA not before:           Fri 07 Aug 2026 00:41:12 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        111.92.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:aa:90:2c:f9:f3:1d:4d:25:55:d3:90:22:0e:62:c9:c5:68:24:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  7 00:41:12 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=ff9fc6afc961886b39fef205464afb4a7d715960cc35b95c6b46a4bde6e23820, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1a:e9:d0:84:2a:00:36:38:2f:ae:c9:3c:b8:
                    23:3c:a8:e0:91:fc:f3:cf:42:9f:02:6e:88:ce:6d:
                    16:57:27:c6:1c:36:17:bf:a3:40:dd:5a:85:8c:c6:
                    a0:fe:b0:af:64:ae:9a:1a:fb:dc:ca:63:e7:a6:60:
                    5b:94:81:2d:b3:f2:92:fb:90:c2:60:5d:dc:17:12:
                    5f:1c:7a:83:3f:38:66:67:f5:9e:68:69:c2:65:5b:
                    a4:97:fe:35:59:92:93:56:19:ab:5b:07:6b:65:d4:
                    ff:df:79:c9:83:a5:27:19:09:b5:b8:27:03:47:22:
                    86:3c:1e:46:c5:e4:08:aa:f2:26:0b:36:d3:10:8f:
                    26:ee:65:5f:e0:f8:60:44:4a:0c:a8:1f:07:7a:b8:
                    98:48:82:40:6d:3e:11:8c:9a:9c:6d:ec:e6:bb:02:
                    45:87:e9:80:d1:a7:b2:fa:17:81:90:68:54:ae:55:
                    f9:75:b8:c8:43:65:e0:f1:0e:bd:d8:19:7b:a6:c1:
                    06:3b:07:dc:ea:01:c3:1d:70:1c:ba:62:97:af:96:
                    b8:d3:3d:45:14:9b:cc:6d:16:f5:11:18:8c:81:76:
                    42:88:83:7a:3f:1a:1d:ba:1d:01:83:34:f4:f3:7e:
                    57:c2:bc:31:2b:10:c3:99:77:5e:b2:81:ee:cf:05:
                    52:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:41:23:1A:4A:E9:8C:76:94:AF:5A:22:6A:83:24:C7:82:E8:90:F6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b466b9f8-fb3b-44eb-8997-8f74888df4ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.92.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:c3:e2:0c:dc:87:5a:db:a0:9c:09:85:af:90:74:23:5e:08:
         01:c5:27:eb:15:c0:6c:4b:7a:2c:61:b1:41:17:1e:74:d1:17:
         03:d4:12:69:2d:05:97:1e:fb:a4:19:96:7a:4f:4d:47:6f:9e:
         5d:7a:6b:e8:5e:d0:10:80:b9:9e:d3:b9:d7:c7:87:a1:60:ef:
         18:8f:e9:27:8b:2f:9b:0b:ca:93:16:e9:ac:31:4b:32:1f:aa:
         96:ae:d1:11:85:70:34:97:7f:be:0a:88:a1:03:7b:a0:ff:90:
         08:38:d9:21:43:80:9e:a6:f4:b3:c9:a0:26:4b:2c:a5:06:53:
         8b:11:1d:33:ab:01:c6:c8:5a:aa:ca:98:66:90:d8:46:8c:9c:
         79:6f:97:82:09:e6:80:d6:be:0c:2a:76:5c:1f:46:9c:da:ad:
         a9:4b:4e:11:2f:13:89:2a:f7:91:36:5a:53:39:23:a6:9f:09:
         3f:0b:c2:1e:36:60:c8:76:3e:cf:32:89:32:d7:55:81:10:ea:
         57:6f:6b:cf:20:b5:03:00:ef:ef:29:af:32:fd:8a:ba:05:b9:
         44:36:d7:05:cf:1a:f2:23:d9:86:d2:ec:54:c6:b3:18:74:50:
         95:d9:83:27:21:fb:89:ed:00:b6:85:f1:48:fc:a8:02:c5:e0:
         a8:44:0a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 17:01:05 2026 by rpki-client