Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/167c2022-ea91-49dd-a73e-cd5a040c15b6.roa
File:                     167c2022-ea91-49dd-a73e-cd5a040c15b6.roa (raw, json)
Hash identifier:          Nv0d2YvK6hik8l54FRxi62rwS7wGkvsjSqnyoiKAVAE=
Subject key identifier:   FD:6E:5E:3F:05:5F:D7:ED:50:B3:B7:4A:09:36:9E:87:54:BC:14:A8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       77B7ACA8FFC1D6021CD42C9D2772706E4595C43F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/167c2022-ea91-49dd-a73e-cd5a040c15b6.roa
Signing time:             Sat 14 Feb 2026 00:51:48 +0000
ROA not before:           Sat 14 Feb 2026 00:51:48 +0000
ROA not after:            Fri 15 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        184.72.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b7:ac:a8:ff:c1:d6:02:1c:d4:2c:9d:27:72:70:6e:45:95:c4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 14 00:51:48 2026 GMT
            Not After : May 15 23:59:59 2026 GMT
        Subject: serialNumber=bdd183a54216be85c8f7a5d02a4f565717d9b816765a88e18490c215a22d8106, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e1:24:7a:91:dd:ba:c3:33:18:06:c3:29:a1:
                    6d:db:50:bb:74:f2:36:c2:85:48:b1:e8:77:53:f4:
                    ce:d4:68:b0:a3:0b:e2:b7:51:ef:96:c0:eb:1d:c5:
                    5b:0f:5f:ab:b1:aa:3a:f6:38:07:bd:d9:bc:4c:3c:
                    d6:5c:51:a5:b0:ea:b8:f2:7b:bc:6b:a4:66:b3:1d:
                    b7:62:e1:5e:e8:65:76:40:12:9c:ba:3c:00:e6:eb:
                    e7:66:1f:08:6b:2e:b1:52:ad:1a:f5:89:f6:25:75:
                    3b:34:ca:d0:fd:fe:b5:ff:7c:8e:3f:f7:f1:4f:f2:
                    19:84:c1:8a:c8:b0:28:a7:85:21:15:c9:1d:be:be:
                    57:23:15:b7:7c:30:b0:37:d6:22:dc:ca:d6:af:28:
                    59:b4:eb:11:80:aa:04:71:5b:a9:ff:45:c7:18:86:
                    5c:0c:ef:50:4f:b7:66:d2:27:e5:8e:b9:06:f1:bf:
                    79:04:9a:55:b5:80:9a:94:4b:3f:8f:e1:55:5d:ae:
                    e9:a3:93:7c:28:92:bf:e7:f2:99:d2:11:0c:66:74:
                    65:37:69:ba:81:5c:0f:da:5c:3b:5a:73:76:83:29:
                    5e:40:56:27:00:4f:a4:cd:2d:45:7d:1c:fb:4f:75:
                    43:a9:3f:5e:28:e2:bf:d8:5d:ec:f7:1a:49:40:bf:
                    db:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6E:5E:3F:05:5F:D7:ED:50:B3:B7:4A:09:36:9E:87:54:BC:14:A8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/167c2022-ea91-49dd-a73e-cd5a040c15b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7f:8c:31:2c:be:eb:68:78:bc:1d:26:18:1f:3b:c0:df:0b:b6:
         95:ea:d6:de:33:ce:6d:3b:23:ce:06:b7:6a:19:5b:a8:be:6b:
         33:02:91:87:f6:66:01:18:e6:fb:ee:1c:fc:61:5d:43:5a:dc:
         5a:86:0a:f5:ce:eb:06:ec:57:e8:01:12:f0:47:e1:91:87:b3:
         b9:95:bb:61:6b:e6:bd:37:a1:b3:1c:46:f8:c8:13:93:88:1a:
         45:6d:3e:09:eb:36:e8:3c:f5:d1:e2:b6:e5:5c:6b:37:5f:07:
         b1:13:39:b5:10:98:20:f4:64:d4:d0:f5:1f:36:51:3f:79:e5:
         a5:9a:0d:eb:a6:8f:9a:c5:43:00:85:96:78:e6:72:12:dd:40:
         65:d7:70:29:15:0d:72:bc:b8:e5:73:8c:16:f1:98:8f:ad:fe:
         cf:53:78:d1:45:bc:78:1e:cb:7b:ed:4b:b5:37:91:bb:16:56:
         c4:43:76:41:e6:08:4d:6e:cd:c2:59:7d:69:4c:8c:90:52:70:
         32:a3:2a:b7:4e:b4:8c:fa:3d:8c:58:47:31:52:4b:ce:39:c3:
         62:a8:af:86:d7:34:a6:1a:b8:86:c0:ad:3c:c7:09:65:da:18:
         4c:69:21:ff:93:d4:b7:29:94:65:86:5b:24:53:5d:88:cc:47:
         82:92:ed:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:27:18 2026 by rpki-client