Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13fff5ce-e24c-47b0-8733-aa45784ee06b.roa
File:                     13fff5ce-e24c-47b0-8733-aa45784ee06b.roa (raw, json)
Hash identifier:          owgGbNqjelBf6CiXnwKvwyfGCHSUXg1P5VcMV3mB2Jo=
Subject key identifier:   12:D1:42:71:D4:18:DE:6B:82:52:41:D2:55:6C:F1:BE:8F:0F:FE:84
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1B1BDB1F9213AB61D470817091D8395105CC668D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13fff5ce-e24c-47b0-8733-aa45784ee06b.roa
Signing time:             Thu 26 Feb 2026 00:41:21 +0000
ROA not before:           Thu 26 Feb 2026 00:41:21 +0000
ROA not after:            Wed 27 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.195.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:1b:db:1f:92:13:ab:61:d4:70:81:70:91:d8:39:51:05:cc:66:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 26 00:41:21 2026 GMT
            Not After : May 27 23:59:59 2026 GMT
        Subject: serialNumber=dde6b3e25b12ccf2fecc58989b2edcdc11e35b6360d681f6c8f398b245b2655b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ac:e2:7b:2e:51:69:42:cb:84:15:28:41:c9:
                    fb:4b:89:10:9a:85:d9:e3:69:95:6e:03:b1:11:1c:
                    90:08:45:5b:81:dd:c7:cd:a6:87:54:03:ce:3a:ba:
                    74:5d:1f:48:d6:c4:5b:43:e4:a3:45:75:cc:17:41:
                    12:24:28:a9:9e:8c:09:dc:70:eb:df:e6:ed:0c:5a:
                    9c:f7:dd:3c:64:74:fb:5e:a4:91:3b:1c:06:12:e0:
                    33:e4:28:df:cb:2c:33:23:a9:26:cc:56:28:af:98:
                    60:9c:3d:09:2b:70:a3:4c:82:e2:5e:02:0c:89:96:
                    ba:ba:1b:cb:d9:55:2f:db:f5:3c:2a:72:a3:bc:2b:
                    7d:a3:26:67:a9:6a:75:d1:0c:e2:87:fb:93:37:52:
                    e7:71:b0:ba:c1:28:f5:54:84:06:3c:a1:07:fb:57:
                    54:e4:eb:f0:9d:ee:91:1a:32:a7:4d:65:2b:a7:5e:
                    35:61:a0:2c:35:02:54:14:b6:bf:ec:9f:a7:ce:3c:
                    47:b6:28:f2:19:2d:4c:6e:98:34:91:0a:c5:b6:6f:
                    4d:51:21:64:00:39:e2:17:8f:e3:f2:83:02:e4:63:
                    f4:18:58:75:ad:91:4f:da:af:76:f8:92:2a:c7:cf:
                    ba:ec:08:6f:3d:02:2e:32:9d:54:bf:64:ba:83:23:
                    77:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D1:42:71:D4:18:DE:6B:82:52:41:D2:55:6C:F1:BE:8F:0F:FE:84
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13fff5ce-e24c-47b0-8733-aa45784ee06b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.195.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d0:c2:2d:ae:5f:65:0f:c5:b2:8a:b7:84:89:e7:0e:a7:9e:16:
         e7:0c:c5:1f:34:05:92:bc:fd:27:d7:d3:8d:ca:f1:78:0b:15:
         52:46:9b:2c:13:79:e7:06:3d:f7:0d:54:67:93:9b:25:ee:8a:
         19:43:cc:c4:84:30:87:60:f8:b5:67:95:2f:0d:b9:56:47:39:
         90:7a:06:65:bf:54:7a:5d:f4:87:cc:fb:3b:d2:de:1d:b4:ff:
         0c:f1:68:9a:6b:9a:03:3e:7d:4b:1d:e0:25:6b:6d:9a:ac:60:
         ea:f1:7e:eb:ab:86:d9:7d:3c:55:67:3b:94:ff:ea:43:af:00:
         c9:ec:e6:3d:bc:94:a2:de:c2:65:f5:b3:e4:4a:24:06:18:cd:
         f8:26:5e:14:1a:ca:a9:f1:15:f7:8a:81:0e:82:54:0f:91:c0:
         e8:3c:4a:c6:d8:ad:d3:aa:df:7b:9a:de:f2:6c:49:80:2f:9e:
         73:f1:2e:68:58:d8:75:e3:a4:7f:ce:dd:65:03:83:99:99:f0:
         4c:4f:57:15:e4:8a:a7:5d:6a:3e:56:9a:b1:50:ed:7f:7f:ee:
         94:ac:3d:c5:fc:10:e1:89:d3:57:e2:f5:0d:5d:44:16:f8:30:
         6b:15:b3:bc:f3:d9:6b:0a:04:18:c9:e2:88:4b:42:1a:65:35:
         85:5e:46:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:12:36 2026 by rpki-client