Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c15493d7-7585-4637-a264-dc1a788dad6d.roa
File:                     c15493d7-7585-4637-a264-dc1a788dad6d.roa (raw, json)
Hash identifier:          UYzgYNXlKrrJogohpZ3prqVx0RYZ2Css/jC9+V1G7QE=
Subject key identifier:   97:13:23:A4:CF:E9:F4:47:56:3C:57:6E:D0:2D:E4:42:D3:24:09:FB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3599077A6781F4BDA061A899D276744259D54981
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c15493d7-7585-4637-a264-dc1a788dad6d.roa
Signing time:             Thu 08 Oct 2026 00:11:36 +0000
ROA not before:           Thu 08 Oct 2026 00:11:36 +0000
ROA not after:            Wed 06 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        216.73.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:99:07:7a:67:81:f4:bd:a0:61:a8:99:d2:76:74:42:59:d5:49:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:11:36 2026 GMT
            Not After : Jan  6 23:59:59 2027 GMT
        Subject: serialNumber=17cfc58690e346d9f9726eb5577c6c6f1f6947230520420667623ea4171eadc7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7d:4b:b2:d6:19:27:a1:e9:9a:08:f1:bd:a0:
                    2a:0e:b6:f0:1d:df:60:99:2d:4b:84:79:25:74:3e:
                    97:b8:ef:0e:40:aa:de:5b:7a:d5:d8:22:d4:23:06:
                    b6:57:a4:fa:ce:0f:21:f2:d6:3d:e7:77:98:53:07:
                    0c:cb:df:74:f9:e2:2c:eb:97:03:1b:64:75:f7:78:
                    fb:ac:57:99:8c:79:49:64:e5:e2:72:22:f1:4e:53:
                    5a:37:b1:63:d4:1b:ba:58:5e:b2:e6:1a:86:6d:0d:
                    98:06:82:cf:cc:d7:a8:f0:8d:ef:1e:c8:d5:d4:6d:
                    ef:a1:76:64:23:7a:2d:c0:65:76:29:4d:4d:94:08:
                    c5:e2:84:5e:b3:65:91:ef:57:4b:d0:9e:c6:1c:e4:
                    fd:c5:0d:ee:ae:2c:fd:96:87:c2:23:f8:b8:38:4c:
                    d2:cf:02:5b:97:bb:b2:16:0e:82:4d:50:a5:16:d1:
                    df:86:fb:b8:6c:2b:02:29:e0:18:d7:ab:18:5c:e0:
                    8e:57:6d:a8:4b:01:b4:8a:40:2f:c8:28:43:e8:9d:
                    9e:ae:10:4c:4a:f2:93:8c:c3:87:95:d3:87:6a:41:
                    14:38:67:0e:51:f4:aa:2a:e7:a2:44:7b:bb:1a:1b:
                    80:be:7e:33:4a:de:a8:b7:78:b7:57:5d:88:b4:29:
                    fd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:13:23:A4:CF:E9:F4:47:56:3C:57:6E:D0:2D:E4:42:D3:24:09:FB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c15493d7-7585-4637-a264-dc1a788dad6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8b:a1:ff:3e:14:e7:d3:51:69:ae:65:2a:d1:3f:52:37:07:7a:
         f1:aa:c9:10:4e:a9:87:7a:d4:85:50:72:00:44:ff:8d:3b:8a:
         44:ec:56:6d:71:f7:03:98:1c:71:64:06:6f:a3:1d:f4:83:32:
         50:82:2f:d0:f0:f8:6d:33:7e:f1:4e:03:ac:86:e2:74:c7:a5:
         b9:24:9a:e1:b4:13:ad:6e:91:56:72:95:03:0b:80:3c:bd:fd:
         ca:10:f4:4d:76:1a:f5:75:5d:8a:77:82:81:0d:42:75:35:61:
         10:bc:8f:88:10:1a:f4:f2:97:95:92:3c:52:b2:7d:b6:bc:4f:
         17:58:54:16:97:c2:29:cb:2c:fe:8e:a0:f4:b6:3c:2b:c3:c2:
         8e:1f:e9:2c:57:32:db:ef:ea:b7:f0:2b:8e:e9:8f:d1:a2:62:
         72:81:28:a4:8a:63:63:64:70:c2:4a:67:2f:79:0f:71:e4:ff:
         9a:ee:2d:ce:6e:70:61:8c:b4:7e:67:c7:0a:3e:4e:a4:78:ad:
         93:a2:19:54:6d:08:92:d2:19:1e:2e:1b:36:ea:a9:e5:57:0c:
         a1:55:70:ea:bb:a1:89:df:21:8c:cc:b5:3b:76:e8:c3:90:68:
         7b:7b:9f:bd:64:bf:42:86:f9:89:e6:c6:01:20:c4:57:b8:a0:
         53:14:6f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:39:08 2026 by rpki-client