Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/77589b1b-ff9a-42b2-bec7-a1653f08cb4d.roa
File:                     77589b1b-ff9a-42b2-bec7-a1653f08cb4d.roa (raw, json)
Hash identifier:          j2G8tVgJB5NUcujan78SEYGjQIjjhW4xKEm84oiFE7g=
Subject key identifier:   A2:A2:8F:3C:7A:75:D7:EB:04:FF:EF:EB:30:E6:A2:00:2F:E2:B2:EE
Certificate issuer:       /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial:       7B4DA355369C76962A5899F41313FF198B668AE5
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/77589b1b-ff9a-42b2-bec7-a1653f08cb4d.roa
Signing time:             Fri 23 Oct 2026 00:02:54 +0000
ROA not before:           Fri 23 Oct 2026 00:02:54 +0000
ROA not after:            Thu 21 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        184.169.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Nov 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4d:a3:55:36:9c:76:96:2a:58:99:f4:13:13:ff:19:8b:66:8a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
        Validity
            Not Before: Oct 23 00:02:54 2026 GMT
            Not After : Jan 21 23:59:59 2027 GMT
        Subject: serialNumber=a17e8cad91b896aca498809c7d8098a167220089f1569f67232f781933ed1494, CN=71c3876e-b944-4600-92c7-cec33d89523f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:15:2e:d4:b0:b3:fb:7d:4f:44:6f:7c:bb:3c:
                    b9:8d:17:39:e8:08:f0:37:bc:53:18:90:79:e8:2a:
                    06:8b:e9:72:ca:42:f9:ae:4d:61:9d:aa:44:e4:42:
                    d7:48:38:34:31:53:a0:18:f6:35:3e:75:b9:4e:a9:
                    1f:e0:75:8c:0c:c6:ba:04:17:2d:27:4c:b4:48:d1:
                    12:aa:b9:d0:84:a8:ef:75:13:06:98:cf:c5:7d:27:
                    53:2e:40:c6:79:78:f0:08:ce:53:93:66:8a:af:f8:
                    e9:ee:52:ec:9a:85:45:8d:41:64:f1:0f:be:cb:99:
                    3a:08:ee:58:02:88:7e:05:0d:ff:2f:e0:25:73:f9:
                    a4:3b:86:24:29:9e:39:76:6d:cc:9a:92:bb:5b:4f:
                    95:64:e4:e9:b0:49:38:81:cd:15:8b:16:d0:8c:9a:
                    07:08:65:e8:4e:99:bf:1c:7a:cc:f1:24:94:48:88:
                    f2:2d:5c:9f:33:41:5d:91:9d:8f:67:84:be:3f:26:
                    34:3e:93:95:50:7c:4e:0d:45:2d:f5:f9:f0:ba:36:
                    5a:0e:ea:a3:a6:1c:16:6e:a5:7c:1a:48:1b:e2:09:
                    3a:b4:06:95:e8:44:f4:1e:02:57:0a:0e:f2:bb:0a:
                    cd:8d:d8:40:1b:bd:aa:d8:2f:da:a3:fa:4b:fb:bc:
                    16:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A2:8F:3C:7A:75:D7:EB:04:FF:EF:EB:30:E6:A2:00:2F:E2:B2:EE
            X509v3 Authority Key Identifier:
                keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/77589b1b-ff9a-42b2-bec7-a1653f08cb4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:08:9f:13:8d:b7:44:70:df:e9:13:64:e0:27:8f:03:22:b2:
         69:f3:1b:a1:c0:bc:98:01:6b:7e:ae:1d:c1:63:9d:4e:cb:bb:
         6c:ae:f1:8f:3c:f8:45:61:aa:a2:00:4d:b2:48:e4:5f:80:b4:
         18:73:88:df:08:f9:a7:b3:7c:f9:89:8b:cb:e8:29:ab:9e:c4:
         f4:05:d9:28:6a:b3:83:a7:44:3a:44:71:15:f9:a2:c0:63:03:
         24:16:d0:64:3b:b4:c5:2b:15:f7:e1:dc:01:7e:fd:f1:34:81:
         07:cf:3d:00:65:70:83:92:eb:9d:9e:a7:cb:98:d2:aa:64:2f:
         7b:6d:df:d2:86:b6:5d:a1:fd:cc:ae:2a:07:2a:6e:32:98:6a:
         62:21:92:1b:de:32:19:dd:69:4b:3a:d1:5f:13:95:04:30:d6:
         76:46:e3:b2:2f:70:45:50:b1:23:6f:0b:34:66:17:0c:89:89:
         cc:d0:17:7c:23:4c:0f:c3:60:4a:f8:dc:e6:ae:b3:14:bf:3c:
         a9:25:bf:ee:41:d8:83:0a:9c:e6:70:10:7e:06:d3:7c:12:8d:
         5b:a9:4c:9c:51:3d:7b:e5:54:27:3b:d7:8a:2d:f7:c7:e7:72:
         fd:91:b0:76:f5:f9:83:e9:a2:f5:83:b2:6a:03:21:b2:ec:e7:
         56:61:de:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 20:27:20 2026 by rpki-client