Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86ee3df-61f3-4ab1-828b-9e897f5e27bf.roa
File:                     c86ee3df-61f3-4ab1-828b-9e897f5e27bf.roa (raw, json)
Hash identifier:          LvxC5GaacPMWaXfa9OpLCDroySjujO3W02F0JXow1OE=
Subject key identifier:   C0:14:71:F4:26:7B:9B:98:1F:ED:2F:C6:5F:D4:EB:DA:6A:0A:39:55
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       361B9D0765E69606B2F20983170AEF53EB612348
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86ee3df-61f3-4ab1-828b-9e897f5e27bf.roa
Signing time:             Mon 05 Oct 2026 00:11:01 +0000
ROA not before:           Mon 05 Oct 2026 00:11:01 +0000
ROA not after:            Sun 03 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        16.165.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:1b:9d:07:65:e6:96:06:b2:f2:09:83:17:0a:ef:53:eb:61:23:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  5 00:11:01 2026 GMT
            Not After : Jan  3 23:59:59 2027 GMT
        Subject: serialNumber=f5b117f7b020fb7f38e814a130796fcb997c21d7b80757072099a66fdc398c7a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7b:ea:82:76:9f:f3:74:87:1d:4e:0e:78:66:
                    4b:b3:2e:7b:1b:99:4e:92:ae:0d:05:fa:1d:e9:dc:
                    8f:cc:d6:bb:60:db:be:71:25:52:cd:c5:b6:49:c4:
                    d5:e1:59:a9:04:0e:c0:f7:d4:3c:10:0e:90:57:53:
                    8b:4c:13:fd:97:4d:6e:cd:13:03:6a:06:3e:54:57:
                    a4:ae:e2:4b:3b:3d:21:1d:08:df:26:fb:96:22:d6:
                    70:f9:8e:18:5c:08:bb:c3:35:22:47:6c:35:cc:dd:
                    bd:48:87:dd:bf:93:ab:f1:4b:97:c3:ab:d5:f0:e3:
                    ef:88:00:d7:79:48:86:75:a9:cc:4a:81:7f:6b:d2:
                    26:56:66:ab:d2:3b:c9:9c:8a:31:16:0f:c5:1f:9e:
                    0a:c8:37:9c:45:0d:9d:ea:fa:81:72:73:f5:87:05:
                    9d:74:03:fc:6d:f6:d0:92:dd:bd:27:49:8d:c7:54:
                    7a:33:87:f4:ba:e4:6b:b2:8c:10:ea:d4:99:48:68:
                    d6:58:06:4b:95:99:b2:08:8e:d2:3c:be:b3:a2:8a:
                    a2:1a:84:42:5f:68:c7:a2:a4:75:c9:10:f5:e2:54:
                    74:68:65:5e:6c:72:5b:cc:47:94:3e:4d:aa:5b:2f:
                    56:8e:93:65:ce:16:d2:7a:3b:99:24:31:9e:d0:4c:
                    06:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:14:71:F4:26:7B:9B:98:1F:ED:2F:C6:5F:D4:EB:DA:6A:0A:39:55
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86ee3df-61f3-4ab1-828b-9e897f5e27bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.165.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b7:9d:db:40:be:7f:29:21:9c:cd:37:db:cb:ff:0d:f3:d7:c4:
         9f:3a:23:06:5e:d4:f3:3f:ec:e8:cc:50:6c:91:0e:b3:da:e5:
         07:b4:98:12:39:45:a0:d9:3f:dc:91:33:cc:ab:00:a2:17:c7:
         94:93:94:82:d3:02:3d:13:74:c6:7e:5c:da:60:0f:6f:30:14:
         f8:5f:d9:4c:74:32:e0:98:66:42:8b:bd:62:30:ea:9b:f0:ac:
         78:a5:b8:5e:fe:75:29:5c:01:1c:f4:52:68:f1:0f:e4:04:4f:
         e1:fa:7e:2a:bd:83:69:17:c3:47:b4:b1:b8:db:18:f6:34:ba:
         47:09:fc:6b:bd:d4:51:6b:07:26:d2:72:5f:be:fa:60:a8:3c:
         7d:23:ac:07:62:7d:a0:d3:fc:b5:7c:a4:65:e4:96:21:bd:91:
         63:53:18:b6:1a:57:fc:99:28:3d:f6:28:ba:bb:67:ae:6d:70:
         b9:f4:c1:fc:5a:c9:a2:db:7d:c6:7e:63:bd:f9:18:cc:ad:ad:
         61:f4:8d:d2:ed:f3:00:94:f5:bd:97:9d:38:0e:b1:a0:99:ee:
         aa:c7:19:51:41:0f:67:f0:c0:c3:13:0e:12:d6:c1:d3:6d:f4:
         a2:73:9e:ef:61:e5:c1:2d:ef:15:22:16:3e:e6:c2:4b:67:42:
         0c:91:da:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 16:13:31 2026 by rpki-client