Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c6e7fe3-77da-4a4a-b3ed-67cbe6c76f83.roa
File:                     0c6e7fe3-77da-4a4a-b3ed-67cbe6c76f83.roa (raw, json)
Hash identifier:          BVoRy9AVqLKmFhM2h+KFd1DA6o7yQoOvu52dQ23d+AM=
Subject key identifier:   1F:A8:A0:E0:D1:81:4C:33:82:10:1B:56:BA:DE:40:01:EE:31:EC:03
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5EBA63D06CD27E28FC94E85676EA49BE03B053C0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c6e7fe3-77da-4a4a-b3ed-67cbe6c76f83.roa
Signing time:             Sat 21 Feb 2026 00:41:59 +0000
ROA not before:           Sat 21 Feb 2026 00:41:59 +0000
ROA not after:            Fri 22 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        71.152.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ba:63:d0:6c:d2:7e:28:fc:94:e8:56:76:ea:49:be:03:b0:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 21 00:41:59 2026 GMT
            Not After : May 22 23:59:59 2026 GMT
        Subject: serialNumber=cc5cc1d3b938700ed025fdc2a9e37a9d1696f2f6e11db0732b19bab267a4f2e9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e0:6e:43:12:f6:04:f9:da:7b:f8:8b:2a:87:
                    b7:4a:b6:01:f8:14:2c:e1:2e:3f:27:28:2f:6e:9e:
                    e0:5c:36:4f:db:f1:bb:44:f7:e7:86:2d:e9:c8:bd:
                    49:b4:f3:84:ea:ea:00:8e:03:4b:55:03:2c:b1:b7:
                    a9:df:fd:a1:8e:b4:fd:50:99:ee:21:a4:af:3f:29:
                    8b:69:bb:65:6f:8c:d3:81:fb:e7:f4:78:26:c0:8a:
                    28:f4:dc:4d:72:81:0b:7c:27:cb:ee:3e:5e:33:fc:
                    90:ee:56:97:c3:3c:8c:69:5a:4d:aa:4f:b8:b2:62:
                    e4:a4:47:74:ab:22:1d:48:4a:91:e7:2f:20:ca:16:
                    e9:69:21:fe:34:e9:14:b5:5c:e9:09:ff:8a:80:0a:
                    76:ee:0d:d3:73:f2:27:14:33:83:e4:05:76:21:05:
                    5d:8f:d2:33:e1:dd:75:78:49:2f:96:53:ca:27:75:
                    67:f9:99:cb:5e:02:e9:ac:78:64:c6:d9:ac:59:ff:
                    e8:55:f5:08:7d:46:90:ef:70:ac:5d:05:22:f5:c2:
                    96:b1:22:2b:88:79:aa:9e:05:e4:2d:a6:2b:62:ee:
                    e8:7d:24:9b:15:9f:24:f0:a3:27:dd:c5:a5:a2:a7:
                    a5:f6:6e:df:e2:31:df:31:49:5f:48:6a:0e:27:86:
                    49:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A8:A0:E0:D1:81:4C:33:82:10:1B:56:BA:DE:40:01:EE:31:EC:03
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c6e7fe3-77da-4a4a-b3ed-67cbe6c76f83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.152.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:f4:46:16:05:39:47:9c:7d:b6:b7:66:d8:8d:ae:96:1c:ca:
         2b:af:66:a3:6b:c9:11:88:e9:e7:00:35:c5:2f:55:d3:91:e0:
         5b:98:09:77:2b:cd:96:9d:c7:64:c9:32:8b:8d:51:54:b4:de:
         49:3d:72:d6:2a:ec:3a:e4:17:b6:53:75:ee:0f:a7:5d:06:32:
         d4:35:ca:85:13:57:b4:a4:d8:be:34:31:60:bc:ce:7d:05:1f:
         b2:3b:1e:7f:88:f1:f9:8a:2b:ba:17:8d:e0:ec:c7:42:cd:b7:
         0c:7c:bb:a1:8c:fb:f2:c5:30:a5:54:40:f3:99:04:dc:7d:e3:
         27:80:25:f3:0b:4a:04:9b:d3:61:6e:52:d8:39:76:c4:c8:28:
         cd:e3:86:57:9f:9d:a4:95:b1:53:6a:3c:3d:eb:15:31:02:cb:
         5d:6b:72:c5:5a:10:8c:74:55:07:63:ac:fd:c5:cf:fd:67:a2:
         b2:54:aa:f7:f2:ae:38:26:2b:21:4d:43:ab:cd:ef:ab:fa:b8:
         cf:97:7b:d1:94:a0:9a:75:f7:97:3f:c6:d5:01:fd:4f:fe:f2:
         38:a5:56:15:4b:2d:9e:fb:80:24:57:3e:8b:de:fd:02:c6:09:
         3e:e2:16:b6:88:1c:4d:eb:65:1a:d3:04:17:a9:81:a7:1d:f5:
         ca:c3:dc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:24:48 2026 by rpki-client