Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c0aaaaf-b875-45d0-97a5-74d06fba2985.roa
File:                     0c0aaaaf-b875-45d0-97a5-74d06fba2985.roa (raw, json)
Hash identifier:          VghVzjCpmeJaPM2HkB8FN5cb3ARktdZTvZFQQ3iwcr8=
Subject key identifier:   47:FB:F8:70:1F:33:A5:93:71:B8:5F:DE:83:5F:BA:BD:7A:45:A7:90
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0314EDFF39F87D29BBD3368C8ADE78DA6ED327C1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c0aaaaf-b875-45d0-97a5-74d06fba2985.roa
Signing time:             Fri 13 Feb 2026 00:11:08 +0000
ROA not before:           Fri 13 Feb 2026 00:11:08 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        50.16.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:14:ed:ff:39:f8:7d:29:bb:d3:36:8c:8a:de:78:da:6e:d3:27:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 13 00:11:08 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=24ad2fcc4af89877bd8c37fdaf55519b333d786177c0219b90b838d71bd5661f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:91:85:8e:b3:bb:2e:14:99:c6:77:fa:43:59:
                    57:c9:75:da:84:29:5b:d9:fb:dc:dd:91:22:99:24:
                    0a:cc:50:98:ae:22:1f:88:92:1a:c3:7c:fe:e0:72:
                    48:f0:57:33:6a:d8:20:6a:d9:1f:77:49:d4:8e:33:
                    9a:df:29:cd:7c:8f:07:97:5e:6a:bb:27:d9:3b:70:
                    ce:d3:40:5b:e3:ff:b8:a7:7d:6a:c6:0d:e4:dd:40:
                    b7:64:f2:ab:ed:8b:57:32:7e:34:22:21:bf:05:bd:
                    d3:b5:98:d1:cd:68:13:20:17:68:5a:1d:19:47:60:
                    87:2f:75:3a:ed:d9:47:56:d8:50:95:0a:58:fb:ad:
                    99:8b:20:12:cb:70:f1:86:cc:93:4b:73:75:b3:c1:
                    18:7b:98:81:f0:5e:8d:9b:a6:20:1f:53:1e:3b:df:
                    72:1f:cd:9e:c1:f3:df:21:e6:ea:92:f1:9e:6a:6f:
                    ae:38:a5:4a:98:c1:f9:db:27:d7:91:9f:11:f2:20:
                    65:93:29:ad:77:f9:39:26:43:05:3a:f0:8a:f9:15:
                    7c:4a:c8:54:9d:fe:a7:82:ca:16:77:7e:3c:3d:47:
                    71:34:e8:49:9a:38:4f:fb:c7:e7:a9:37:77:18:3d:
                    85:4e:04:a6:a8:e7:46:8c:6d:af:b8:5c:2b:ff:38:
                    e8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FB:F8:70:1F:33:A5:93:71:B8:5F:DE:83:5F:BA:BD:7A:45:A7:90
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c0aaaaf-b875-45d0-97a5-74d06fba2985.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.16.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c2:ae:65:76:97:62:43:b6:ae:1b:eb:c3:d0:1f:18:33:e6:5e:
         27:f5:62:32:2c:be:2b:ca:f5:d5:45:5e:39:55:5a:b3:89:3d:
         ba:25:4f:20:ea:bf:b3:f0:45:19:35:02:4d:b6:33:3a:1e:80:
         9f:e5:80:a2:69:11:d8:22:62:89:9b:8f:33:cf:6a:21:78:74:
         b6:ac:f0:9a:d2:40:84:e9:e7:88:2b:de:6d:49:f4:cc:26:30:
         71:8d:ed:ba:97:de:95:f6:09:4d:5e:f1:e1:03:93:85:1d:30:
         00:df:67:d1:7f:61:e2:90:3a:19:d6:23:6c:ea:f9:db:51:c3:
         c3:a1:db:76:14:f8:ec:d8:2e:0c:03:5d:15:a2:12:65:d0:3d:
         3d:df:86:be:86:e6:f4:00:11:73:39:94:b3:d1:d7:98:31:aa:
         0c:65:1c:11:ee:d5:a7:97:f5:3d:62:e5:44:f4:d4:af:07:c5:
         de:81:ce:4e:60:ca:a6:29:4d:81:48:17:2b:f6:f1:36:04:3e:
         2b:10:04:e6:49:f2:0f:d3:fd:8f:4f:6f:6f:ae:bc:a0:52:13:
         4a:5e:77:91:b1:29:85:b8:a7:d3:a5:66:c2:76:65:18:7f:a5:
         31:f6:57:17:eb:bf:24:fc:47:89:f6:b5:fb:4d:29:05:6a:02:
         8d:e8:10:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:23:21 2026 by rpki-client