Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29186ad2-6c7d-42dd-9b13-4b57a1ceca27.roa
File:                     29186ad2-6c7d-42dd-9b13-4b57a1ceca27.roa (raw, json)
Hash identifier:          MEOpb7Pr0kRx7BhHvpavFaEbGqCukEYMmnEivCLuFjs=
Subject key identifier:   55:DA:B1:3F:93:E5:83:1E:5A:67:52:EA:F0:AC:D7:2F:28:9F:E8:AC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4C18300B3BC1EDD97B446399AC707B27B574C661
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29186ad2-6c7d-42dd-9b13-4b57a1ceca27.roa
Signing time:             Thu 26 Feb 2026 00:11:43 +0000
ROA not before:           Thu 26 Feb 2026 00:11:43 +0000
ROA not after:            Wed 27 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.213.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:18:30:0b:3b:c1:ed:d9:7b:44:63:99:ac:70:7b:27:b5:74:c6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 26 00:11:43 2026 GMT
            Not After : May 27 23:59:59 2026 GMT
        Subject: serialNumber=ff5966dc4d3cc6ac24d1bead202b74c4caac23df4dba80dfb2eab2654da94f2a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7b:5a:b9:02:87:be:5c:ff:7d:03:46:88:6f:
                    fc:85:6b:69:67:74:b9:d7:63:d9:ca:c7:0f:e3:95:
                    45:33:aa:1e:81:dc:5a:da:bd:ff:6f:16:af:15:b6:
                    82:fc:e1:0c:21:a5:d7:1b:3e:38:79:58:e1:1e:58:
                    0d:8a:7b:91:90:e2:69:bb:d1:74:83:97:1e:f6:b4:
                    6a:c1:68:ec:d3:6e:5e:0c:9d:34:97:01:21:49:04:
                    fc:ba:9b:e1:38:d1:01:6b:6f:ff:87:b1:f2:51:11:
                    df:ff:95:75:1c:79:15:78:6b:f2:38:17:38:62:30:
                    df:fa:de:65:87:61:e3:88:29:61:46:c8:dc:21:0a:
                    94:ec:9a:be:dc:3e:e5:04:7e:26:45:93:2c:68:be:
                    2b:f0:7c:5b:0a:fa:c0:34:11:5a:da:bb:8e:95:20:
                    86:cd:c4:70:f9:50:f5:65:75:b3:53:f2:c7:c3:bc:
                    f0:4b:07:10:af:45:fc:8a:fa:93:3a:28:41:33:6d:
                    e3:c8:04:f7:80:83:c6:81:9a:fa:9b:bf:6b:57:3d:
                    f9:10:0e:df:3f:55:fe:19:cf:dc:a1:7b:83:96:59:
                    e1:1d:d4:f6:33:ef:d4:c1:5c:01:90:74:dc:37:1e:
                    61:02:75:f1:71:6e:e3:14:7e:b7:ea:10:7e:82:e1:
                    bc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DA:B1:3F:93:E5:83:1E:5A:67:52:EA:F0:AC:D7:2F:28:9F:E8:AC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29186ad2-6c7d-42dd-9b13-4b57a1ceca27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.213.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         64:02:28:3f:19:61:d1:a8:85:fe:79:66:8c:d6:2d:a6:b2:d3:
         da:bb:84:17:2b:57:e5:6f:c8:85:37:3f:60:48:1d:15:9c:07:
         c5:26:97:5d:30:73:1f:6e:c4:47:bd:f7:5d:aa:38:2f:ca:6f:
         30:3e:40:1b:ae:89:b3:6c:c7:b0:b3:aa:f0:4c:e6:db:3d:f7:
         89:9b:8f:96:4e:9f:13:47:30:af:96:19:04:6f:ff:31:f1:17:
         5f:1b:c7:9f:a5:3f:1d:3c:a1:8d:66:bd:20:f4:64:d0:7c:3a:
         33:1c:41:3d:62:fa:49:69:cf:d3:6d:7c:a4:ae:81:28:dd:d1:
         f0:d7:01:d6:e3:ae:1b:a7:38:07:dc:4f:72:cc:33:2e:7e:c1:
         f3:2b:a9:7e:9d:82:1b:11:77:5b:0f:1a:c8:23:fc:8d:99:4d:
         b5:2c:69:ff:1c:3b:b9:d8:fd:f8:e0:cc:9a:d4:d1:6f:dc:ff:
         a6:64:c7:71:8c:a5:72:8c:80:8c:00:7f:a5:d1:53:9b:ca:5f:
         68:0b:3c:1f:8c:38:71:fc:91:ee:b2:c3:15:b6:1c:06:a9:1b:
         69:b1:7a:08:a9:c8:11:dc:df:fb:53:b5:65:f1:1f:da:8f:3a:
         3a:fc:05:35:0a:ca:c7:d8:f3:2c:5d:8a:e8:1a:0b:89:9b:fb:
         77:6a:3a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:08 2026 by rpki-client