Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6b39c3e-9738-436a-82b3-baacdf83c549.roa
File:                     f6b39c3e-9738-436a-82b3-baacdf83c549.roa (raw, json)
Hash identifier:          PuHzBKSjNOdU1coOn6NOHRE3lowU6CNOSU0QZFsJvXs=
Subject key identifier:   31:CF:FA:D0:CA:78:8F:AF:4C:19:FE:C1:67:C3:B1:84:D4:85:52:CB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7E6B5507B41035805234A724570B6A85EEC7E176
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6b39c3e-9738-436a-82b3-baacdf83c549.roa
Signing time:             Mon 03 Aug 2026 02:21:04 +0000
ROA not before:           Mon 03 Aug 2026 02:21:04 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        110.238.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:6b:55:07:b4:10:35:80:52:34:a7:24:57:0b:6a:85:ee:c7:e1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 02:21:04 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=3056e93e3f899c85c8cd0eab366986259e8629e6bed6bced2cc6d03ed5b1044a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3a:9d:21:4f:18:64:82:c9:69:84:f3:55:20:
                    79:c8:70:a7:19:0a:63:df:c5:40:45:6b:82:60:47:
                    75:de:1f:24:1a:06:4a:b8:77:5d:25:65:e9:43:8c:
                    3f:b7:b0:84:e7:35:18:9e:fa:70:07:fd:04:fa:ea:
                    65:93:3d:be:4c:2c:ca:1f:16:e5:84:97:fe:5c:43:
                    98:bb:e6:41:1c:95:92:5d:03:6e:b2:1e:a5:7b:bb:
                    8a:cf:c7:ee:84:c3:d6:bf:72:c2:76:20:79:17:43:
                    71:dd:ce:10:e5:e1:16:56:ef:7f:17:26:db:d1:56:
                    b8:b7:62:a5:ff:0d:f9:1f:28:6a:4e:fd:c8:98:63:
                    d0:3e:5f:05:e3:0b:b0:5b:94:5e:a8:ec:a3:d2:f0:
                    5a:85:51:19:a8:46:a3:71:3a:29:6d:f5:2d:16:79:
                    ae:1e:07:9c:14:49:36:79:cf:92:99:00:a7:7b:55:
                    9b:c5:b7:92:69:25:b2:8e:06:52:ba:9b:10:f8:94:
                    06:66:3a:d8:5b:03:81:34:e3:4c:f3:a5:9c:ae:36:
                    e2:dc:0a:47:72:6e:31:73:63:86:17:09:7c:97:04:
                    51:0e:cc:c4:d7:62:ad:f3:80:3c:e2:2d:fe:d1:b8:
                    7d:76:e8:d5:5c:d4:63:7d:58:1b:0b:7f:15:7a:11:
                    4c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CF:FA:D0:CA:78:8F:AF:4C:19:FE:C1:67:C3:B1:84:D4:85:52:CB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6b39c3e-9738-436a-82b3-baacdf83c549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.238.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:0b:a7:82:8d:bc:3f:11:b3:29:c1:80:30:2d:92:6a:2b:d8:
         b5:f1:04:9c:72:bd:ec:e5:37:f9:02:ba:be:90:b6:da:7b:ce:
         49:0e:57:ab:03:28:40:0d:24:4f:c6:47:14:4c:c5:53:05:a0:
         6c:e0:ba:40:fc:1f:c3:e1:17:7b:a5:b9:da:10:37:54:e8:7a:
         e5:72:7b:ce:9f:c7:17:08:76:08:39:66:bf:5f:f2:c9:be:2c:
         9d:61:10:d8:03:b6:11:07:52:c9:ef:16:10:51:74:d5:89:26:
         a7:a9:3e:67:92:a6:db:53:2d:46:e5:6d:9d:77:93:f9:78:07:
         4a:e2:3e:e3:ff:85:6e:42:eb:af:12:3b:2f:1e:e2:7b:78:f4:
         91:98:cc:cf:c7:a7:e2:5c:a9:26:a7:68:36:ac:e9:ae:1d:2e:
         ba:90:b0:b6:74:28:81:95:66:85:b3:dd:49:b5:97:27:e8:77:
         78:7a:77:af:f7:f6:5a:82:8f:14:6c:29:f7:bf:a0:03:5d:9a:
         04:35:6c:fc:fe:a9:62:14:23:e6:ac:ff:a0:07:2e:b1:3e:c5:
         1a:3a:b1:f6:d6:47:05:b4:a6:0b:bd:ff:28:ef:0f:8b:fe:b4:
         3d:ac:c9:81:50:55:06:c0:37:2b:c3:2f:00:ab:fa:4f:24:67:
         00:ce:b5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 14:54:16 2026 by rpki-client