Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1c3df38-2bd4-4a14-8668-93a101933934.roa
File:                     c1c3df38-2bd4-4a14-8668-93a101933934.roa (raw, json)
Hash identifier:          elUnn6RIi4n4j+f4OspxYrths5kSsoDZ8FUsGyuwI0Q=
Subject key identifier:   8D:71:D9:D5:57:B2:3B:0E:23:28:9A:E4:79:9B:CB:FC:24:0A:09:0C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       722C7C57A056233CB5B7929DAEE6F7B05C27347B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1c3df38-2bd4-4a14-8668-93a101933934.roa
Signing time:             Sun 16 Aug 2026 00:00:05 +0000
ROA not before:           Sun 16 Aug 2026 00:00:05 +0000
ROA not after:            Sat 14 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        100.49.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2c:7c:57:a0:56:23:3c:b5:b7:92:9d:ae:e6:f7:b0:5c:27:34:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 16 00:00:05 2026 GMT
            Not After : Nov 14 23:59:59 2026 GMT
        Subject: serialNumber=075f9351272eac1e6bc187ad8de09c0cb78189f6b8250fab33b50956bd164761, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9a:28:76:76:96:51:6d:98:29:64:15:c3:54:
                    9c:7e:b5:bd:ec:55:ff:b8:27:05:15:04:ed:d7:5f:
                    1d:23:a4:cf:31:73:7f:de:a4:43:d3:4c:51:f0:55:
                    c0:76:6d:05:13:46:5b:b9:f8:bb:37:2a:31:ae:fa:
                    54:ae:71:cc:e5:f9:6e:f7:0a:c0:99:9f:08:30:5e:
                    87:6e:73:2c:9d:68:94:74:f2:49:d3:bc:37:d8:bc:
                    28:29:56:5c:e1:3e:ec:1d:a0:2b:8b:c8:b9:65:42:
                    e4:36:13:3e:8d:69:fc:f2:ed:c9:66:2e:9f:4b:f6:
                    61:30:58:a7:f8:38:ae:90:e2:48:43:90:e8:5d:df:
                    5e:a5:22:10:ea:71:a1:2b:77:e7:04:c2:30:f9:6f:
                    f3:81:26:1b:26:25:94:b9:2f:75:87:e9:66:f8:6f:
                    d4:c2:a3:d8:1a:d8:29:69:76:92:8d:78:2b:d5:83:
                    6a:ff:d0:51:33:f7:e9:9f:c4:34:74:fc:ee:5b:eb:
                    2b:7d:64:94:3e:13:81:d7:3f:05:06:24:1b:69:6b:
                    fa:3c:82:99:c2:db:fe:87:68:a2:79:5d:29:46:cc:
                    b2:75:cb:ec:7d:cb:cf:e9:73:2e:36:61:e1:c4:ca:
                    43:c7:9f:5e:f0:29:5b:38:3b:3f:37:75:77:27:27:
                    01:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:71:D9:D5:57:B2:3B:0E:23:28:9A:E4:79:9B:CB:FC:24:0A:09:0C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1c3df38-2bd4-4a14-8668-93a101933934.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.49.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:dd:88:d1:a7:84:d7:db:f1:c3:41:89:1c:f1:25:e1:dd:75:
         28:14:68:ab:97:a2:4f:0c:a7:8c:6d:63:67:35:4c:18:b8:51:
         de:75:a5:78:7a:40:13:77:03:f7:76:a6:68:bc:35:30:4b:44:
         ba:e6:a7:ff:3a:a2:5f:ce:1b:b9:65:16:ea:ac:4d:dd:31:83:
         d3:c5:b2:c5:4c:2c:83:1a:fa:ac:c2:90:c4:15:9d:e3:8f:61:
         6d:9d:8c:af:83:16:fb:28:96:8a:d9:20:62:ae:89:3c:cd:ec:
         bc:3b:56:5b:47:f4:87:5d:f4:58:4a:9d:2c:1f:e8:c8:83:d0:
         aa:02:3d:fd:6e:ad:40:aa:a4:a1:2f:02:c7:f0:48:cb:f8:a1:
         cb:51:a3:f1:d2:4b:9b:34:8f:8a:94:93:05:22:18:11:f6:a8:
         02:83:54:12:7c:b5:eb:11:cd:73:80:6b:2b:8b:90:3a:1b:4e:
         a3:02:ad:1c:06:ef:a2:36:05:ef:a3:4e:0e:b1:dc:95:10:b7:
         1c:c5:99:da:2e:0a:e5:28:a9:3c:28:f5:af:20:3d:df:97:28:
         13:65:3b:49:c1:10:ee:a3:f8:97:b0:a2:90:1f:7b:04:ed:4b:
         cd:fe:85:9b:5e:5a:a9:e5:03:92:5a:b4:e2:c9:b9:aa:c1:34:
         de:26:3f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:51:48 2026 by rpki-client