Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/93d7471b-56b1-4f53-982e-a84765e52ef3.roa
File:                     93d7471b-56b1-4f53-982e-a84765e52ef3.roa (raw, json)
Hash identifier:          9FZ6X8Ou9JuokV3XjjEtpuuzGAzdaF49GSFShO+dagA=
Subject key identifier:   7C:DA:D8:8D:9E:E0:E9:F5:82:55:F2:E6:78:C8:E3:31:64:84:AC:04
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       28E2318B4FA1C4FFA3F18732EC3A311E9B7D89A8
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/93d7471b-56b1-4f53-982e-a84765e52ef3.roa
Signing time:             Fri 09 Oct 2026 00:20:08 +0000
ROA not before:           Fri 09 Oct 2026 00:20:08 +0000
ROA not after:            Thu 07 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        76.223.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e2:31:8b:4f:a1:c4:ff:a3:f1:87:32:ec:3a:31:1e:9b:7d:89:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Oct  9 00:20:08 2026 GMT
            Not After : Jan  7 23:59:59 2027 GMT
        Subject: serialNumber=38d2e5f6cbf82be9e87e5f1fa82e6af37fc19c462c7ca7286ab904b741eea90d, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:54:99:91:30:81:38:7e:ab:5d:62:d2:9d:59:
                    59:fa:12:39:80:21:f5:6f:30:9d:7e:7c:0c:aa:36:
                    ad:ad:16:62:47:52:d7:cb:ee:54:19:fd:01:78:cc:
                    bc:ce:a6:73:04:69:d4:98:10:a4:5c:38:84:5e:07:
                    1d:d4:61:45:47:25:4f:60:71:e3:e0:cf:a0:0c:cd:
                    22:8e:6f:1b:35:44:ed:8a:97:48:4e:dc:b8:86:ca:
                    6b:9a:58:ba:30:86:3c:5f:ca:90:c9:62:bb:66:d0:
                    42:01:3f:ed:ab:e3:7f:04:8d:da:fc:6e:8f:c0:3a:
                    54:01:5b:da:66:1d:75:18:05:79:ad:ea:cd:c1:5c:
                    0d:80:26:96:9d:50:57:32:4d:9f:80:d6:e5:4f:d4:
                    aa:ef:e9:ce:8d:d3:d8:c4:87:cd:87:8e:9a:53:82:
                    76:b9:4d:95:1f:91:e9:11:a7:35:1a:17:70:87:1e:
                    48:94:c2:d4:02:9a:48:d6:75:89:8e:58:c9:bd:dd:
                    f5:9d:35:a1:c0:60:6e:9b:b5:7b:55:a0:49:4e:a3:
                    d7:df:59:c3:a3:18:d8:31:cc:0b:17:1d:03:5e:80:
                    00:cb:a2:57:f1:d6:c2:9b:34:37:07:cc:45:29:87:
                    fd:c2:9e:0c:2f:73:2b:bc:9e:d3:22:f5:f4:68:60:
                    c3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DA:D8:8D:9E:E0:E9:F5:82:55:F2:E6:78:C8:E3:31:64:84:AC:04
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/93d7471b-56b1-4f53-982e-a84765e52ef3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:e7:a3:86:91:66:4b:23:6a:4e:df:9c:96:9e:27:fa:26:60:
         68:cf:a2:a5:82:a6:fe:70:e4:fc:9e:85:50:64:35:64:80:79:
         1e:29:df:22:df:a8:08:32:dd:81:f7:d2:4b:3a:3f:20:d2:c0:
         f5:9b:57:89:8c:78:8a:ea:33:5f:d0:97:da:bd:b1:68:82:90:
         dd:75:a7:7b:69:97:41:0a:12:08:52:ed:84:d7:79:27:86:40:
         29:83:c7:92:de:96:f1:d7:0b:a5:c9:1a:f2:52:d3:5f:e4:a8:
         6a:ac:81:fa:33:ed:63:04:6b:89:2e:ee:ed:d4:e2:f4:57:5c:
         21:13:dc:04:df:78:aa:a5:7f:67:92:e1:57:74:ad:48:87:a9:
         43:59:a8:37:6a:a4:04:ed:03:67:05:df:f1:46:97:c5:f2:0e:
         a5:15:2c:da:e0:e4:ea:fa:77:16:4a:fe:5b:31:24:1f:52:d3:
         66:d1:d7:60:25:87:79:d8:b3:1b:ca:f2:ba:63:ab:19:9f:7a:
         42:e4:50:13:1c:34:b6:08:d2:a0:16:24:d2:16:6b:92:7a:8c:
         46:47:95:78:97:22:11:48:da:b8:a3:d5:61:be:d0:81:41:d9:
         8b:93:84:17:13:f5:2b:2b:0d:56:56:78:25:f5:80:bd:81:d1:
         84:17:5d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 14:57:46 2026 by rpki-client