Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8708d37-30dd-4bc4-8a9e-e27b02d8da69.roa
File:                     f8708d37-30dd-4bc4-8a9e-e27b02d8da69.roa (raw, json)
Hash identifier:          aDKQueMtDEStaWvB95Q61XBxHhPNO2DfpVNdE9urg38=
Subject key identifier:   92:E5:79:06:3B:6B:64:48:C9:BC:DE:DA:AF:67:9D:FD:FA:15:1F:2C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1EC59C7C8AB06DD30EE9FFEF3B5BB68D2EA83612
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8708d37-30dd-4bc4-8a9e-e27b02d8da69.roa
Signing time:             Thu 30 Jul 2026 00:31:15 +0000
ROA not before:           Thu 30 Jul 2026 00:31:15 +0000
ROA not after:            Wed 28 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        23.91.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c5:9c:7c:8a:b0:6d:d3:0e:e9:ff:ef:3b:5b:b6:8d:2e:a8:36:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 30 00:31:15 2026 GMT
            Not After : Oct 28 23:59:59 2026 GMT
        Subject: serialNumber=3c73dcbe46cca30ad1d3b4260ed6ef8b237df5924e8b2d249872cddfb112beee, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:80:27:01:c4:db:9c:53:53:56:21:7f:ae:63:
                    0c:f8:c0:0d:37:de:af:a7:81:53:ee:b4:c3:96:7c:
                    f9:b4:88:b6:ef:87:4c:5f:c7:22:9b:c5:cb:2a:8f:
                    e2:28:63:d7:9c:0f:ce:0b:a7:99:97:0a:cf:0f:39:
                    a0:f4:23:48:99:bf:c8:e6:d8:e3:3b:88:53:80:59:
                    74:d6:a9:b8:fc:f9:f1:a2:36:1f:bb:94:fd:2e:9a:
                    d7:7e:59:61:61:ac:c7:78:66:cf:d8:2c:eb:f3:d6:
                    fd:3f:17:c3:4a:85:d5:d3:90:95:66:0a:5a:0e:f5:
                    5b:b8:28:e7:93:98:61:2f:84:8c:34:fe:3c:29:e0:
                    14:90:48:f5:5a:3f:e3:9e:19:12:53:00:b0:95:af:
                    d7:93:ee:d4:2c:ab:dc:2e:f9:7f:c2:fc:cd:53:da:
                    ab:89:76:af:b1:82:c8:92:5e:69:89:a0:d3:76:a3:
                    47:37:3b:89:2d:75:12:95:f4:40:5d:c5:e1:7b:48:
                    89:35:e4:b8:7b:a9:e0:5e:28:f2:0f:61:d8:4c:3d:
                    0d:84:5c:49:e8:0a:b4:9a:70:bd:7b:3b:5e:e1:de:
                    e9:91:fe:68:20:7b:ab:b9:af:e2:bd:03:6f:ed:6e:
                    dc:02:1b:0c:e6:16:08:be:f9:96:00:5c:75:52:83:
                    2a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E5:79:06:3B:6B:64:48:C9:BC:DE:DA:AF:67:9D:FD:FA:15:1F:2C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8708d37-30dd-4bc4-8a9e-e27b02d8da69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:d3:d8:89:17:0d:7c:50:e5:82:15:a6:d5:69:71:e0:fb:91:
         32:46:ba:ac:54:a0:10:ec:68:6f:19:97:0f:bb:0e:44:b1:de:
         e4:db:56:f9:67:4f:9a:b5:a5:6a:a1:0e:70:ff:c8:2d:40:8e:
         aa:72:73:29:2b:df:30:20:f8:38:49:00:8a:85:46:cf:bc:61:
         b6:dc:2e:70:91:ce:e9:9d:4d:c5:c1:29:0a:b5:7e:39:2a:2d:
         8e:3e:fb:39:d8:5f:48:a1:5e:ed:0c:35:f7:7f:72:02:3c:64:
         ca:0a:90:e4:f3:e0:43:b1:a6:8a:ba:ad:b1:af:32:38:db:28:
         77:7e:42:f4:32:e5:d1:c7:9d:08:4a:45:83:50:50:d1:4d:2b:
         35:fe:a4:82:1e:d6:3c:20:5b:e8:b2:50:bd:a4:65:87:c9:1f:
         28:c6:3f:88:26:ac:91:2e:00:39:d0:eb:1d:c6:12:f3:6d:61:
         49:31:38:11:bb:9e:b7:3c:bc:32:6d:c8:c7:78:13:73:c1:5a:
         6b:39:ca:53:40:11:f7:08:8e:7a:5c:07:db:2a:60:84:24:0e:
         dc:e5:6a:a7:05:bf:f5:2b:48:d9:77:72:40:10:91:db:3f:eb:
         5b:eb:eb:99:e6:16:bf:6a:fe:e5:63:f8:c3:a1:db:20:92:82:
         17:7e:dc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 11:01:32 2026 by rpki-client