Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/e0073d5a-9507-4588-b834-e01ed691ccb6.roa
File:                     e0073d5a-9507-4588-b834-e01ed691ccb6.roa (raw, json)
Hash identifier:          PC3zloMBqd+7yWy2w59K3TNGCFUI/bPzd1a5mPp25tg=
Subject key identifier:   7C:F2:11:41:0E:12:25:C6:B9:90:40:7C:0E:65:B7:6A:87:6A:50:A9
Certificate issuer:       /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Certificate serial:       6619E75BA13B19679E2A66838542211A63DBA687
Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/e0073d5a-9507-4588-b834-e01ed691ccb6.roa
Signing time:             Fri 23 Oct 2026 00:10:06 +0000
ROA not before:           Fri 23 Oct 2026 00:10:06 +0000
ROA not after:            Thu 21 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        198.41.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:19:e7:5b:a1:3b:19:67:9e:2a:66:83:85:42:21:1a:63:db:a6:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
        Validity
            Not Before: Oct 23 00:10:06 2026 GMT
            Not After : Jan 21 23:59:59 2027 GMT
        Subject: serialNumber=336f0b95c5c4d6e267473ed5096a4fd11939eccee3345eee144b9d185503a99f, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:93:92:67:a2:6c:51:98:7a:56:0f:79:37:bb:
                    5b:28:10:56:3d:15:24:58:25:41:58:ed:bb:ce:54:
                    f9:08:40:67:10:01:c2:de:62:15:7b:54:61:68:e9:
                    86:72:5e:1e:65:c5:ac:e7:fb:92:2e:6b:85:cc:44:
                    1e:c3:23:3a:4d:0a:07:3d:84:5e:c4:f8:f4:cc:ce:
                    72:33:73:1e:68:66:83:fe:77:c9:ea:67:9a:f9:57:
                    3b:c0:2a:ee:4c:36:ac:5b:89:21:55:c5:e6:46:6e:
                    d8:40:9e:16:25:ee:c5:a7:ec:73:7b:4d:f1:29:b4:
                    4a:13:4e:af:d8:f2:b5:58:34:7d:a6:6e:9f:57:74:
                    c0:18:52:c6:a2:86:54:67:aa:2a:e9:c4:47:56:77:
                    b1:9e:3d:33:07:ed:fb:58:a3:19:97:99:ba:87:0e:
                    d1:f6:a6:ba:55:ae:79:a7:b8:b0:d2:9a:06:31:1a:
                    1b:d8:20:a8:a1:b1:e3:3d:cd:b9:0f:23:82:09:76:
                    5f:63:2b:cd:27:7c:80:7d:1d:1a:4a:c5:d4:22:57:
                    45:43:1b:11:33:aa:d5:08:51:e4:be:38:e3:8a:a3:
                    1d:0e:c7:cf:6a:94:4c:90:33:98:eb:2a:68:71:d6:
                    57:b0:35:45:7b:9e:74:ca:a6:e2:8f:3d:23:74:af:
                    a5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F2:11:41:0E:12:25:C6:B9:90:40:7C:0E:65:B7:6A:87:6A:50:A9
            X509v3 Authority Key Identifier:
                keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/e0073d5a-9507-4588-b834-e01ed691ccb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:50:d0:fe:da:45:1a:97:ee:2a:1b:db:6c:90:d1:68:09:49:
         37:94:ea:4e:14:6f:4a:82:12:66:41:99:66:54:bd:2c:ec:b6:
         52:88:87:7d:9a:8f:cc:bf:57:ac:b2:9f:e2:12:ad:83:11:2b:
         dc:3d:b4:c6:81:0c:b2:f2:5c:58:ff:42:8c:d9:7d:63:de:56:
         4d:ce:f6:4f:ca:b0:eb:5d:44:17:3b:19:7b:bb:48:52:80:11:
         26:9e:e2:a0:63:27:0a:c0:47:90:56:ae:04:57:0f:ef:e6:24:
         ce:03:c0:8c:bd:ec:86:90:11:40:46:b0:91:08:d1:65:2a:d2:
         e7:b0:0f:81:8e:8d:a5:51:50:d6:13:cd:25:69:09:46:98:59:
         71:8d:a6:4b:fe:f9:6b:53:14:73:30:fe:7d:8e:69:71:da:dc:
         f8:1f:52:c0:40:ab:1e:1c:40:b4:79:79:23:57:c1:b7:3d:8d:
         2c:07:41:35:49:db:f4:c2:33:1a:9e:80:36:03:17:c7:ab:5d:
         91:a5:ab:23:90:1e:b5:8f:fa:8e:fd:26:b3:33:69:61:ab:b2:
         5d:ed:d2:fe:ea:ea:aa:5b:8d:e2:63:bd:80:d0:bf:7e:b6:9e:
         b0:4b:9b:08:70:5a:7f:e7:ad:d7:bd:11:ad:b1:2d:93:20:6e:
         fc:22:ff:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 02:52:25 2026 by rpki-client