Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1bcd7874-89b7-496a-9e61-695dcca4b351.roa
File:                     1bcd7874-89b7-496a-9e61-695dcca4b351.roa (raw, json)
Hash identifier:          mH/OJMsJQm0bY8jDdm/AyuYtSVhhO47JdEzw5JVvQh0=
Subject key identifier:   48:DD:E4:A3:6C:B9:C2:8C:F7:B0:88:E1:10:BE:6E:88:A2:37:65:28
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1AAC97648F2C616434917F460EC67738015D85B8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1bcd7874-89b7-496a-9e61-695dcca4b351.roa
Signing time:             Fri 13 Feb 2026 00:20:09 +0000
ROA not before:           Fri 13 Feb 2026 00:20:09 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        93.77.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ac:97:64:8f:2c:61:64:34:91:7f:46:0e:c6:77:38:01:5d:85:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 13 00:20:09 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=c6e36068ef3f98df261bcb218f2ccbdca290a28c4137c9f251316e7573290de7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:69:09:30:99:a2:b4:28:ec:74:68:d0:b5:d8:
                    95:08:1f:74:01:03:17:a0:e3:4d:95:41:28:48:3b:
                    7d:f7:6d:3d:cd:16:fe:f6:4e:d1:34:d8:1c:37:f2:
                    26:cc:3d:b4:10:56:cd:f9:2a:8b:a0:0d:23:9e:bf:
                    a9:11:83:70:29:b8:f6:7a:6c:ec:83:cf:e1:16:26:
                    07:2c:0a:7a:d3:9a:9f:63:17:e8:72:ef:ce:c5:3e:
                    99:33:4a:34:59:e2:d0:31:8a:8d:7e:e1:20:32:69:
                    15:74:af:71:7c:ab:50:99:25:97:c8:bc:65:2c:7c:
                    2d:af:93:81:40:32:91:47:2d:2f:7e:64:06:c3:61:
                    ab:b1:ec:11:da:2a:6b:8b:1a:ab:ae:7a:24:d5:c0:
                    24:33:ed:8d:57:68:91:41:1b:fb:13:72:96:62:19:
                    78:1f:a1:69:05:8f:ea:ff:65:d7:06:8e:e9:f1:a3:
                    76:88:36:8f:04:d9:29:38:b4:9b:c2:c3:fe:45:16:
                    61:b9:b2:2b:6d:43:d9:af:1d:93:2d:3e:5c:06:c6:
                    64:ec:15:a4:ef:72:c7:ae:19:11:33:a3:fe:f0:b8:
                    37:fb:de:fd:53:34:74:de:a2:90:14:ed:3d:13:2d:
                    49:d5:31:04:66:7e:2b:3a:e2:ce:34:b3:00:2f:92:
                    c6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DD:E4:A3:6C:B9:C2:8C:F7:B0:88:E1:10:BE:6E:88:A2:37:65:28
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1bcd7874-89b7-496a-9e61-695dcca4b351.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.77.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:ab:84:0e:c8:e3:e0:86:eb:6f:a8:75:00:f4:c8:9c:a4:62:
         99:8b:4e:c2:8f:b1:10:29:11:71:e0:ca:bd:c7:fb:5a:f4:aa:
         f3:21:bd:f8:60:f6:05:83:a6:20:db:0e:6d:df:ab:a2:6e:f5:
         d9:fc:3b:1d:00:6e:be:e5:db:3b:e8:f9:dd:a0:f2:48:02:fc:
         14:68:17:a2:f9:86:88:85:eb:ba:58:22:3d:9e:10:56:3b:8d:
         e1:40:4a:d4:16:95:06:fb:8b:9e:ee:00:c7:41:80:e4:6b:be:
         88:cc:0a:ce:0f:55:c5:54:ba:81:52:55:f3:d4:49:ac:cd:53:
         c1:5f:71:cf:00:4d:be:25:62:45:d5:1b:4f:8b:bc:03:9a:90:
         ab:30:b7:da:be:bc:4f:03:72:a5:d2:0a:f9:2b:70:14:0a:17:
         0a:29:44:30:91:af:dd:8c:02:2b:4c:31:9f:8c:fe:5d:53:a5:
         cc:1b:0c:25:98:4c:b6:47:17:b9:fe:6b:df:3d:54:ff:01:05:
         d2:b4:e5:a1:94:a7:07:57:31:d7:1d:c9:6e:da:80:d2:59:62:
         d4:ed:21:61:31:83:b4:2a:42:78:3a:ab:79:10:3f:c4:d7:e8:
         a9:39:18:d5:82:55:70:3a:82:d1:d4:9b:1d:82:ca:c1:a6:80:
         8d:0c:da:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:55:10 2026 by rpki-client