Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/014c5b16-8b1e-4d0f-9900-050775309905.roa
File:                     014c5b16-8b1e-4d0f-9900-050775309905.roa (raw, json)
Hash identifier:          PFKFzEySsCsdz4IevEPqcjDWlLLKqU4yW7U4lbT78wE=
Subject key identifier:   25:86:D2:ED:C7:80:B0:54:D3:BE:42:27:2E:36:84:22:CB:0B:A4:F7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       04EE9B671C4C736D0DD979EAA9F02DB68534BF9E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/014c5b16-8b1e-4d0f-9900-050775309905.roa
Signing time:             Tue 17 Feb 2026 00:20:49 +0000
ROA not before:           Tue 17 Feb 2026 00:20:49 +0000
ROA not after:            Mon 18 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        75.22.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ee:9b:67:1c:4c:73:6d:0d:d9:79:ea:a9:f0:2d:b6:85:34:bf:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 17 00:20:49 2026 GMT
            Not After : May 18 23:59:59 2026 GMT
        Subject: serialNumber=a8ae4150e5fdd212578e780525246755fd80b496f16890cd15ea6d3d8e903239, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:65:0d:ce:b5:1f:fe:75:f8:50:b1:9b:1c:a0:
                    a6:60:12:bb:90:4e:13:4a:db:db:47:1f:e8:05:b2:
                    e1:01:eb:70:e6:07:9d:e4:1b:06:0e:29:9d:ee:eb:
                    80:52:c5:ca:29:b6:2f:01:96:29:6b:a0:2d:de:fb:
                    9c:b7:40:44:1f:b1:0f:1e:46:0d:d2:15:d4:f2:3a:
                    83:20:af:98:32:8f:da:2e:ff:c0:d2:3d:32:0c:3d:
                    05:c0:d2:65:82:07:66:8d:24:c8:e4:20:d1:c0:22:
                    a1:81:2f:5a:f5:3e:a9:2e:b2:72:6a:09:4d:97:dc:
                    1c:14:d5:07:42:31:db:cb:37:c7:67:65:7e:5a:68:
                    65:a0:7c:18:b0:5c:96:58:16:64:6f:b1:1b:60:db:
                    51:e9:6f:e1:34:78:00:ab:3c:62:a4:a5:bb:16:45:
                    06:e2:31:9d:4b:6f:9a:d1:48:c0:46:3d:c0:86:a1:
                    73:02:66:4c:1d:05:67:03:1a:15:b4:ab:1b:38:4a:
                    a5:c1:37:9a:27:42:f9:be:bb:bd:71:f2:9b:44:1b:
                    6d:e4:d3:37:78:f3:cc:0c:77:62:1d:67:e6:4a:b1:
                    b4:14:d3:da:7a:ee:eb:82:67:ff:a1:39:6b:57:bb:
                    7f:34:76:8a:ec:dd:d3:13:bb:36:d3:35:91:bd:56:
                    da:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:86:D2:ED:C7:80:B0:54:D3:BE:42:27:2E:36:84:22:CB:0B:A4:F7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/014c5b16-8b1e-4d0f-9900-050775309905.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.22.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9e:de:ac:9b:13:40:b7:4c:2a:48:c0:19:2e:ec:a2:92:27:2e:
         65:f8:ce:80:65:8b:74:18:0b:12:65:7f:0a:78:0d:d3:00:56:
         27:77:7d:7b:53:69:40:9b:78:ab:6d:5e:f0:f6:66:45:42:1a:
         34:28:a6:7e:10:e6:1f:c0:16:b9:11:e8:63:5c:ad:54:53:9c:
         d3:36:ca:65:82:33:de:2c:0b:8d:bb:33:30:bd:fa:47:54:16:
         a7:84:16:13:b1:1d:e7:f8:b6:00:a5:e6:26:98:f7:bc:75:4e:
         24:25:f4:64:0a:68:fa:27:a2:04:1d:e9:7e:f4:a0:6c:83:1a:
         25:7f:27:0d:32:64:80:ae:b6:48:5c:ef:59:18:3e:58:04:e2:
         ef:c5:f0:7f:77:9b:a0:83:20:be:3b:38:46:ca:6c:f2:07:a6:
         d4:d8:44:13:9f:39:99:7a:37:87:b9:02:20:ca:91:27:bf:b4:
         8a:dd:8a:2f:a4:b8:96:12:ca:20:14:d8:b8:7f:3e:6c:bb:7c:
         f2:61:75:ff:22:d8:5f:4f:ee:4e:8b:7d:1d:07:d3:bb:9e:0b:
         50:b4:0e:d0:8a:88:2e:4e:74:4f:e3:cf:38:28:e3:97:b0:d3:
         b6:97:6d:12:a6:bc:14:6a:d3:0a:68:13:bd:a6:a5:b3:97:3c:
         18:4a:f7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:49:40 2026 by rpki-client