Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18fa7199-3dc5-4ca9-bc26-096bf3df3e9d.roa
File:                     18fa7199-3dc5-4ca9-bc26-096bf3df3e9d.roa (raw, json)
Hash identifier:          slxLBTI3JAPB/aAexMeTUtTeRO2TfnG6o7Q+zdkDk7Y=
Subject key identifier:   28:E6:4D:86:BA:D2:C8:B5:C1:E1:03:90:77:88:D5:B7:E2:18:CC:70
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       49E470F0CFA39B10BF4B3888FE1E3D172EDE6CFF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18fa7199-3dc5-4ca9-bc26-096bf3df3e9d.roa
Signing time:             Sat 14 Feb 2026 00:31:20 +0000
ROA not before:           Sat 14 Feb 2026 00:31:20 +0000
ROA not after:            Fri 15 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        184.73.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e4:70:f0:cf:a3:9b:10:bf:4b:38:88:fe:1e:3d:17:2e:de:6c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 14 00:31:20 2026 GMT
            Not After : May 15 23:59:59 2026 GMT
        Subject: serialNumber=e06fee2dd080f8c491764a69a0dfadbd4e52f3ff6e93e7b748a5dc1209c9bbeb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6b:4f:cd:8c:44:cc:98:b6:3a:46:01:d3:65:
                    92:82:94:c9:16:83:e9:5e:f4:36:6a:bc:6b:75:80:
                    8a:41:c1:53:a9:ea:54:4a:67:ed:72:92:b5:d8:8c:
                    b7:59:e4:a0:9f:ea:1f:ff:f4:54:42:3f:05:20:89:
                    da:54:43:ac:a3:38:e3:00:b4:3c:d0:b2:2d:9a:97:
                    47:18:4e:22:b1:8c:f8:7c:7e:0f:22:98:f0:a8:6f:
                    b4:b4:f3:dc:19:f7:f2:47:c0:08:94:3b:b7:f9:96:
                    68:e7:04:96:d2:17:ff:1d:6b:54:b2:db:20:0b:65:
                    88:c7:62:3b:4c:2d:a6:f4:82:37:c6:12:4d:9b:da:
                    ee:b7:f8:0e:38:4f:58:17:f6:86:3f:83:be:47:16:
                    d4:7d:32:c2:73:cf:66:ea:9b:fe:8e:fc:e3:04:d4:
                    a9:d6:98:40:09:37:ca:e7:b5:60:8b:59:2c:a4:79:
                    e6:7c:30:04:cd:5f:88:2b:36:01:1c:6e:b6:d7:12:
                    72:f1:ba:4c:62:24:bc:b5:b2:09:a5:a7:9e:3b:2e:
                    ba:10:18:83:3f:46:2c:bc:31:30:c1:13:f0:0d:e5:
                    08:19:77:dd:e5:69:5a:6a:6b:f0:b5:b9:ea:a3:a8:
                    43:bf:d2:d0:b8:0a:3e:ba:a2:5b:d5:33:11:c5:f7:
                    38:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E6:4D:86:BA:D2:C8:B5:C1:E1:03:90:77:88:D5:B7:E2:18:CC:70
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18fa7199-3dc5-4ca9-bc26-096bf3df3e9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.73.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ab:6e:e4:53:f2:e1:41:42:f5:ae:86:05:6b:a2:cf:68:e2:20:
         a7:f3:e3:67:f4:dd:30:12:66:1a:3c:cd:da:10:40:04:aa:23:
         0b:2c:dd:b5:a3:f5:e7:7d:ee:82:ae:7f:cd:1c:62:99:f4:5c:
         d7:8d:8b:76:c2:8e:e8:a7:8e:0b:5c:a4:c7:19:7d:76:88:7b:
         76:45:7a:d5:94:3f:31:a2:f0:21:e6:04:a3:3d:0f:ff:e0:58:
         a8:c5:a9:04:9c:08:38:96:df:bd:53:39:11:22:0b:60:f2:15:
         10:b0:09:87:a0:fb:4e:91:0c:1e:3a:2b:88:f3:36:bf:fc:ad:
         b2:07:33:89:33:82:63:6d:0b:39:b3:c0:68:6d:e1:be:93:8e:
         3a:6b:c3:46:1a:29:18:08:07:f1:c3:1b:ca:36:60:62:1d:ae:
         90:60:8a:8a:41:14:2c:f6:93:7e:fe:a6:29:46:9e:82:58:59:
         50:35:62:09:b7:91:68:d7:fb:83:56:e2:66:30:9c:c5:3f:35:
         4b:29:c7:b0:66:37:6e:17:40:eb:83:87:66:08:86:55:d0:0b:
         28:7b:21:a9:60:52:b4:ef:66:13:b8:84:e2:9d:c2:62:86:cd:
         24:05:14:c8:ff:bc:ac:99:60:09:96:5d:49:3f:1b:bd:07:24:
         99:cb:22:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:17:14 2026 by rpki-client