Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c08fc396-5601-4f07-8925-a04dd514252b.roa
File:                     c08fc396-5601-4f07-8925-a04dd514252b.roa (raw, json)
Hash identifier:          JwD07h0LAR7FENIsOwuUoSwGptyxF006oOLvTuMkj50=
Subject key identifier:   FF:D6:AE:C6:01:68:5D:94:97:84:5D:1B:F2:F6:C6:D2:85:8B:DE:B4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       10E69617CF9E5301903D97118E0F110C60AA2614
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c08fc396-5601-4f07-8925-a04dd514252b.roa
Signing time:             Tue 04 Aug 2026 01:50:36 +0000
ROA not before:           Tue 04 Aug 2026 01:50:36 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        110.239.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e6:96:17:cf:9e:53:01:90:3d:97:11:8e:0f:11:0c:60:aa:26:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 01:50:36 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=141609e8a7d4c2d88aee17df9211edd71088e637356ba80ea4fbd338426cf601, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:84:58:a3:d2:27:55:ed:d6:d6:06:c8:13:
                    bd:01:29:76:d2:0d:7b:e6:e4:e0:88:7e:62:14:1a:
                    6f:a2:de:76:a6:1a:d6:62:a9:ba:d1:05:17:93:6d:
                    1d:a5:21:93:aa:bb:44:c8:64:bc:9a:34:91:10:fa:
                    6a:0b:6c:22:a6:9c:b8:7f:98:4d:b5:1e:fd:b9:b7:
                    45:e0:cd:5b:fd:14:83:d6:aa:30:c0:2e:2a:cf:d4:
                    28:25:6b:ef:ee:36:96:87:f2:c3:fc:5f:dc:b0:de:
                    a5:4c:8f:b9:43:ac:d8:6a:bd:a2:64:ab:b7:ba:dd:
                    09:e2:3e:d2:c2:ac:a9:bf:ee:ba:a0:22:26:1b:36:
                    73:51:55:25:9e:7b:d8:81:fb:4b:c2:21:43:58:9b:
                    c8:cb:04:27:d5:84:e9:dc:33:14:a6:aa:5e:97:31:
                    5c:79:97:93:79:fb:3e:5d:9f:d3:c0:96:de:a0:10:
                    7a:22:d9:21:21:d8:53:63:83:4e:7f:e7:15:76:f2:
                    f9:fc:33:8a:93:b7:68:ad:51:a4:ea:e3:69:e2:9f:
                    9b:39:9c:89:9e:b1:6c:62:57:6d:9e:f1:6e:cf:e5:
                    89:2f:e3:df:ec:9b:64:fd:62:e5:db:1f:d2:16:43:
                    10:0e:93:3e:dc:27:d9:00:5a:89:54:c3:b3:37:97:
                    a3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D6:AE:C6:01:68:5D:94:97:84:5D:1B:F2:F6:C6:D2:85:8B:DE:B4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c08fc396-5601-4f07-8925-a04dd514252b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.239.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:09:fd:cc:c2:ce:e8:8d:b7:fa:17:56:32:52:a1:95:5b:40:
         5d:ba:48:a5:2b:45:22:7a:d8:ae:8d:e6:fa:40:06:31:cc:f6:
         9c:f8:5c:3b:c7:c9:43:79:fa:e7:e7:f7:fa:ae:61:97:ee:91:
         8d:3d:ab:4c:a7:59:a2:2d:46:7c:b0:c3:73:90:7f:f9:bd:c2:
         e7:b7:bc:c5:2c:39:ca:bc:b3:b4:ca:89:56:68:8e:e5:41:1d:
         59:fd:4a:7c:f0:53:e1:57:71:08:e1:73:8c:50:ec:20:e7:3f:
         69:01:8a:c1:6b:6b:30:80:da:a5:86:42:44:fc:e9:60:ef:41:
         31:1f:ef:fc:7b:fc:c5:e0:35:8d:97:c9:5e:ca:ff:ee:7f:b6:
         ff:bb:b8:5a:ba:d3:0d:e0:85:1c:f5:74:0c:79:d4:26:c0:52:
         36:cd:c5:bd:50:57:43:72:28:1b:3b:8a:81:85:0f:a8:3f:f3:
         b2:cc:6d:d8:15:9e:d8:a9:33:eb:1f:c1:42:c9:5a:24:f1:ef:
         45:f6:db:7e:aa:3a:8d:42:c5:3a:c3:73:2b:e3:44:c8:5d:c8:
         24:df:30:17:c6:f5:49:fb:bc:f2:03:72:5e:21:93:e4:aa:8e:
         39:0f:d7:61:8a:74:42:59:7c:0a:83:e9:4c:05:5f:b0:98:97:
         11:14:a8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:44:15 2026 by rpki-client