Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb311526-c6e1-4481-9a8a-416a5edd5172.roa
File:                     fb311526-c6e1-4481-9a8a-416a5edd5172.roa (raw, json)
Hash identifier:          Rkc/u6oHO74l+/UZCx9CpYBOxDS5a6raE9/kx+O7OGs=
Subject key identifier:   49:6F:04:05:82:4B:39:AC:A7:AA:88:03:0B:D1:08:6C:F9:40:D9:E2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       10DF67A65ACF3EECB5634CE74CBFE5DF47DB2A97
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb311526-c6e1-4481-9a8a-416a5edd5172.roa
Signing time:             Fri 24 Jul 2026 00:51:35 +0000
ROA not before:           Fri 24 Jul 2026 00:51:35 +0000
ROA not after:            Thu 22 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.137.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:df:67:a6:5a:cf:3e:ec:b5:63:4c:e7:4c:bf:e5:df:47:db:2a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 24 00:51:35 2026 GMT
            Not After : Oct 22 23:59:59 2026 GMT
        Subject: serialNumber=ac8dfbd13899a116da14b4b638344308d9c54d2fff9b581f0083cc1775c4b4c3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:69:00:9d:4b:f2:03:d9:7f:b9:bc:05:86:1c:
                    35:0b:1b:5c:1f:6f:df:e1:0f:25:66:6a:60:34:cd:
                    3a:6d:43:db:60:dc:d6:58:18:a5:07:32:a2:56:4d:
                    61:26:fc:f2:79:d6:bf:20:56:d8:47:1d:e4:22:9f:
                    cb:a1:1f:95:a4:04:7c:33:43:a5:35:98:08:c7:f4:
                    29:6f:5d:2c:36:d5:fd:56:bd:87:24:be:96:ad:65:
                    b7:2c:13:b4:74:ce:b3:3e:9f:39:48:34:ea:60:02:
                    aa:67:35:2c:28:ee:ee:30:54:d3:9a:e0:b2:41:7e:
                    b4:e1:85:8e:9b:7e:94:fd:9b:ba:32:d9:25:ca:72:
                    2c:23:03:a6:87:b6:b8:e8:92:da:18:d6:55:70:6c:
                    24:af:a2:d3:d3:22:15:1e:89:3c:c1:54:29:f2:01:
                    56:8e:52:5e:9b:03:40:6b:7b:9f:b7:0a:81:ae:22:
                    4d:24:78:18:3b:cb:fb:03:45:f8:8e:b5:e8:06:be:
                    07:7a:7b:ba:ab:26:26:1a:80:8f:92:78:ff:50:aa:
                    c4:98:d7:57:f5:e2:b7:fc:b4:4e:23:d2:cd:f6:fd:
                    52:b7:30:b5:42:5f:46:a8:36:c6:c2:48:72:16:82:
                    81:de:43:f3:a6:92:08:74:75:a6:74:03:0a:85:20:
                    9c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6F:04:05:82:4B:39:AC:A7:AA:88:03:0B:D1:08:6C:F9:40:D9:E2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb311526-c6e1-4481-9a8a-416a5edd5172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.137.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d0:7f:b6:16:d4:10:aa:0a:78:f9:95:76:02:5c:b1:a1:5b:fe:
         14:61:42:9b:3b:cd:ed:e0:1f:7f:6f:f6:3a:b4:f2:50:45:60:
         23:a9:9e:0e:ea:59:9d:84:2f:9c:71:c3:5b:f2:0b:bf:56:89:
         4f:34:98:87:4e:27:d1:6b:8c:32:9d:4b:1b:2c:ff:3e:97:0c:
         8c:97:e4:74:cc:42:76:92:c2:71:23:1d:b6:ab:04:e9:c9:65:
         e5:2f:01:5b:c0:b4:d1:b8:12:dd:78:83:87:f6:31:16:11:39:
         c0:7b:e4:04:07:76:42:af:43:1c:a7:eb:24:6c:c5:e8:31:f3:
         33:da:a0:f1:95:61:ce:d4:4c:1f:28:88:a5:bf:2d:bf:d5:10:
         01:27:56:fd:7c:1d:0b:85:e6:c6:f0:a8:21:d7:fe:0a:15:0b:
         44:4a:e5:3b:dc:d5:2f:e9:bf:5c:51:99:b0:61:81:00:be:b4:
         10:b7:5c:00:6b:06:5c:05:a6:9d:58:af:78:3a:3b:df:c7:18:
         58:22:68:a2:6b:88:33:64:1f:79:99:b0:15:62:be:76:bb:cd:
         c5:dd:a8:8b:4a:2e:e6:ff:50:46:20:4a:88:79:98:fe:a9:84:
         05:c8:30:22:75:ba:53:c8:b4:14:14:c7:38:58:5d:31:a0:ac:
         bc:ff:ad:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 13:23:09 2026 by rpki-client