Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/423aec00-c59b-4d0c-b517-6f9fc7b76cb4.roa
File:                     423aec00-c59b-4d0c-b517-6f9fc7b76cb4.roa (raw, json)
Hash identifier:          OYaO5j690SBg+r/b5VM/kIyFwBfR277vUMXwgFl9P6g=
Subject key identifier:   1B:F3:EB:51:A4:BD:5F:77:97:D8:63:E6:50:D3:07:49:68:CB:AB:21
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       264FCE3692E279A5E0E94C25B5A21374B7C0C8C0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/423aec00-c59b-4d0c-b517-6f9fc7b76cb4.roa
Signing time:             Wed 23 Sep 2026 00:01:18 +0000
ROA not before:           Wed 23 Sep 2026 00:01:18 +0000
ROA not after:            Tue 22 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        64.145.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4f:ce:36:92:e2:79:a5:e0:e9:4c:25:b5:a2:13:74:b7:c0:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 23 00:01:18 2026 GMT
            Not After : Dec 22 23:59:59 2026 GMT
        Subject: serialNumber=97744d26dd1f3c57f8c4f97aea6db011b11fbf76d7f9c9d8a0259e60e5f1615b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f8:4b:8a:42:a6:a3:cf:19:36:5b:37:0a:cf:
                    83:28:d9:93:15:19:5b:9e:27:bd:27:f9:00:85:b0:
                    cb:58:66:c2:93:ef:eb:4b:92:c8:20:d4:f9:90:c8:
                    32:9b:bc:7c:bd:b2:7f:0f:a5:54:8c:aa:b7:2c:d3:
                    94:ef:4d:31:69:1a:ac:0a:31:49:8b:0b:fd:fc:87:
                    d9:50:28:59:87:30:a7:a2:1e:8a:c6:98:d0:1d:55:
                    7c:28:66:ed:41:5c:5b:bf:cc:50:6a:4c:8e:47:d6:
                    d8:ca:f4:92:b4:44:77:7f:d4:41:52:1f:a3:6a:5c:
                    54:b7:51:93:11:5f:48:d0:bd:18:32:d9:0a:d7:cd:
                    0d:09:02:c1:79:81:e2:c6:36:e6:09:38:c8:b2:14:
                    60:37:da:25:83:12:ab:4a:0b:a4:dc:0f:ce:1c:d5:
                    58:b0:67:8b:41:99:17:77:18:2b:06:90:11:96:59:
                    3d:f7:e4:36:4d:6c:cb:00:6e:e1:7b:b8:07:7e:01:
                    0d:d5:07:b6:cc:51:f3:11:ae:ca:55:3c:b4:34:54:
                    2e:4a:c7:cf:5d:37:d1:26:29:f6:49:45:54:bf:7b:
                    9d:54:72:22:b5:07:14:98:3f:c8:09:8a:f2:4f:25:
                    b5:81:3b:ec:a0:c9:2f:fb:02:ad:3f:77:cb:ad:ff:
                    53:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F3:EB:51:A4:BD:5F:77:97:D8:63:E6:50:D3:07:49:68:CB:AB:21
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/423aec00-c59b-4d0c-b517-6f9fc7b76cb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.145.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:0a:18:04:35:d0:b3:58:02:8a:f9:08:71:0f:aa:a6:1f:f6:
         e1:23:da:36:dd:14:19:32:a2:47:d9:f7:bf:a3:a5:98:5a:0f:
         8b:1e:72:fd:94:c1:63:06:5a:f8:0f:ec:20:fa:cc:d8:53:04:
         7f:37:49:ca:3e:22:7e:cd:e5:d8:7d:b7:b4:55:ff:d2:9e:d7:
         f2:db:5d:52:54:84:1b:e7:64:9f:cd:40:7f:99:a6:4e:e5:31:
         21:9d:1e:2d:ee:35:8a:75:bb:4c:0b:fa:29:c5:41:eb:6c:c5:
         da:7c:a5:98:db:df:af:c2:f0:53:3b:27:34:ae:2f:51:16:c6:
         d0:e2:69:61:33:59:f4:5d:39:22:b6:b0:ee:b6:fc:a2:eb:40:
         dd:38:e1:a6:36:4f:b3:62:38:91:71:8c:1c:48:77:aa:b4:05:
         79:fc:23:0c:43:5c:bb:ee:4b:b0:fb:9d:a5:54:55:5a:6b:32:
         69:80:93:58:eb:91:e7:03:82:8e:50:e6:38:e2:00:80:05:e6:
         37:9e:9e:5b:ef:dd:b2:04:cc:14:fd:c6:86:0a:80:29:f4:39:
         83:d1:68:13:f5:3b:ca:4f:bf:b9:2c:d5:48:62:3c:c6:9e:13:
         b8:44:03:4b:44:8b:38:07:ed:c2:26:65:dd:9d:0b:d1:c8:b2:
         5a:f1:f8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:06:12 2026 by rpki-client