Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b092f99-d054-4a4a-b25f-bbffd89c8b6b.roa
File:                     2b092f99-d054-4a4a-b25f-bbffd89c8b6b.roa (raw, json)
Hash identifier:          1SbDscBV/mgolhVWk3E732MpSiVjLfy9mdbdQNW/VVE=
Subject key identifier:   95:F0:A7:40:29:D6:4F:BA:2A:DB:87:43:B9:05:A5:0E:F8:8B:68:FF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       26D383F66F64D5B67247BBF912D0C3FB4CB38A7F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b092f99-d054-4a4a-b25f-bbffd89c8b6b.roa
Signing time:             Wed 25 Feb 2026 02:31:13 +0000
ROA not before:           Wed 25 Feb 2026 02:31:13 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        1.178.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d3:83:f6:6f:64:d5:b6:72:47:bb:f9:12:d0:c3:fb:4c:b3:8a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 25 02:31:13 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=fe17b874bcbb9025ddc3a9517a6a38c63b57a25d40619379da09580ff56dae55, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ae:4a:e9:68:40:c6:f3:73:66:c2:d2:b9:da:
                    88:1e:5c:08:86:6e:6c:2d:c5:67:9e:ac:84:ef:2b:
                    fa:d3:92:3e:00:01:f5:9d:cc:f4:46:ef:11:62:45:
                    98:13:7c:19:03:a2:e1:a8:b8:3d:39:3a:15:a7:90:
                    18:b4:7d:29:e0:16:01:06:7b:76:7a:48:cf:42:8b:
                    a0:70:4d:26:84:67:fd:2c:7a:29:ee:99:22:bb:9e:
                    17:25:6c:05:3e:2e:30:18:64:34:67:b9:56:e8:f5:
                    7c:44:34:66:2d:ae:fe:97:4e:0c:ed:1d:c7:cb:10:
                    a7:90:f8:20:ea:73:2a:7b:8a:a8:15:eb:ea:30:0b:
                    a6:e7:b5:a3:46:cb:bf:fe:4f:74:ef:83:80:0a:16:
                    0f:e2:a9:54:ac:c8:fe:fa:c8:6e:53:49:fd:79:3b:
                    39:86:61:98:5b:1b:dc:0b:43:01:1c:39:c3:30:6d:
                    46:9e:3e:dd:5d:d2:39:10:1a:ab:33:23:51:ed:45:
                    3b:85:15:d5:3c:df:c5:08:db:0d:f6:e3:e9:fb:96:
                    1d:ed:83:a4:04:78:66:3b:0d:5f:fa:78:d9:36:0e:
                    ad:3a:1b:40:f5:9f:25:95:5a:ca:91:29:a6:a0:39:
                    8b:0e:19:d4:c4:d8:44:d0:c6:7f:fa:86:73:24:60:
                    00:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F0:A7:40:29:D6:4F:BA:2A:DB:87:43:B9:05:A5:0E:F8:8B:68:FF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b092f99-d054-4a4a-b25f-bbffd89c8b6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.178.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:50:24:c7:f2:c4:3c:b9:6a:a4:c6:bc:69:c7:7d:83:21:fc:
         c2:99:e1:4c:ef:a3:a0:ba:30:0d:71:2c:80:c5:78:42:9a:f8:
         42:d1:1e:ca:c7:c0:ac:52:7c:52:85:3b:97:2c:b4:98:4c:fa:
         74:ce:71:f4:be:b1:6d:b5:78:38:c9:b3:4b:b4:2e:7f:17:ea:
         35:4f:e6:6b:3a:02:f3:03:5b:80:82:fc:61:df:f5:78:56:a5:
         9a:4d:63:05:e0:d1:f4:c5:d0:18:5f:b1:ae:a5:91:03:78:9d:
         6c:ef:db:6b:64:00:83:77:98:8c:d5:b2:5f:e8:60:4f:dd:5b:
         34:a1:3a:2c:56:8b:b6:6b:a9:cf:b0:33:90:2c:dc:f1:25:b2:
         5e:86:7c:d6:22:1a:fb:ad:82:2a:b5:9b:e8:62:27:56:67:f4:
         77:b4:d9:fd:c5:74:30:6d:98:d0:e1:08:8f:14:f8:d0:06:17:
         ca:6b:6d:ca:b5:56:7a:01:de:f7:e4:14:1e:8e:df:ef:39:2b:
         2d:c7:e6:8c:c3:cf:c2:d4:e3:b1:c5:34:dd:b4:d8:a9:72:65:
         a2:bc:85:6c:46:ae:9c:53:5c:98:8f:c8:3b:36:11:d2:b1:49:
         67:03:bd:45:1f:0b:9d:d8:b9:58:4f:d9:10:bd:40:f1:ae:14:
         08:bc:d4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:30:54 2026 by rpki-client