Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/320ca148-446a-4e39-8e3e-d5083b594410.roa
File:                     320ca148-446a-4e39-8e3e-d5083b594410.roa (raw, json)
Hash identifier:          i75/yWVSy9ubfZ7K+NopeJGC8/423N1IgZAuvilZzL0=
Subject key identifier:   B2:9C:74:67:1F:A7:F8:8F:4E:88:51:24:F2:15:9C:1A:6F:7F:75:7B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       465141E4921A3936E5C4A89204178538AFEE0D0F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/320ca148-446a-4e39-8e3e-d5083b594410.roa
Signing time:             Sun 22 Feb 2026 00:50:04 +0000
ROA not before:           Sun 22 Feb 2026 00:50:04 +0000
ROA not after:            Sat 23 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        205.185.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:51:41:e4:92:1a:39:36:e5:c4:a8:92:04:17:85:38:af:ee:0d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 22 00:50:04 2026 GMT
            Not After : May 23 23:59:59 2026 GMT
        Subject: serialNumber=7ead4ab64caf50e1123143d72c612aa33d799cfcf5dbb4cc85c9259178bffb67, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a8:30:35:a8:44:fb:eb:02:b8:5a:cd:28:6b:
                    1d:db:b4:d3:ad:46:3d:d0:06:3d:81:c2:6f:17:c1:
                    70:79:9e:a0:30:ee:ff:63:bc:2b:24:c2:f3:59:46:
                    9c:0a:1f:76:ba:98:20:20:7e:03:13:6a:7d:e3:5b:
                    6b:5c:87:26:60:4b:53:44:39:23:d3:bd:34:b4:52:
                    d9:f7:82:13:4f:cb:0e:89:65:6f:37:53:c8:5c:0c:
                    c7:e2:6e:67:ad:5c:e5:c2:16:57:db:71:83:35:c0:
                    14:e3:03:42:40:81:fe:9a:f0:bf:64:c2:f1:8b:d6:
                    d2:e7:3e:48:49:e5:33:b5:54:76:98:7f:0b:ad:7f:
                    4f:06:32:2a:7c:a6:ff:89:3b:57:a0:82:0c:a3:be:
                    26:f9:b4:d1:dc:27:7f:58:38:c5:98:e0:f4:e1:d8:
                    8a:d5:a8:9f:fd:b2:da:a0:51:69:eb:8f:4d:38:0b:
                    b3:92:72:c4:69:be:bc:b2:5e:95:fd:71:f0:9d:fc:
                    2a:d7:4c:18:c5:9b:77:e2:06:df:83:94:0c:10:90:
                    1a:be:57:19:46:b6:1e:62:c7:70:da:d7:ef:75:3e:
                    29:56:26:69:98:f4:b8:fe:f1:34:ec:e9:b6:8f:af:
                    bf:cc:67:8e:14:14:8f:46:d3:46:c8:b2:1b:cc:c7:
                    90:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9C:74:67:1F:A7:F8:8F:4E:88:51:24:F2:15:9C:1A:6F:7F:75:7B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/320ca148-446a-4e39-8e3e-d5083b594410.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.185.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:56:1c:62:49:fc:32:6b:f7:bc:67:82:82:d4:eb:86:20:64:
         01:6e:69:71:d3:be:18:1c:a4:da:d3:60:5e:98:4c:12:b1:b0:
         96:0e:a3:33:dc:8c:66:68:cd:cb:0b:b8:70:3a:c6:89:14:b6:
         ec:9c:bc:cd:60:ab:11:cd:45:79:61:5b:9f:87:79:f5:44:19:
         eb:ab:7a:bd:41:27:51:75:de:01:23:2e:1d:e1:e4:c4:b0:6b:
         1b:95:55:3c:4d:67:02:fe:a3:d2:ff:15:03:ef:01:6e:bb:dc:
         03:eb:28:f7:68:62:6f:36:7e:e3:71:ff:ad:c4:12:e6:ec:d4:
         9a:ad:7d:3d:4d:3b:ba:19:a0:45:67:09:e3:ff:e5:4d:99:ee:
         b1:9d:6c:39:44:77:11:d1:ee:fa:39:68:59:e7:5a:86:d9:2d:
         ec:b9:f5:39:20:9f:19:79:3e:c4:c3:28:82:c7:1e:0d:4c:1f:
         62:2f:ee:81:d8:70:fe:94:3d:fa:01:69:a5:1e:e6:fd:5c:3e:
         84:4c:bb:3d:8f:00:ba:6b:a1:29:51:5e:6e:18:a7:85:45:17:
         03:67:64:de:f9:a1:bf:48:14:e2:ec:28:f8:95:f8:56:fd:29:
         ff:87:10:4a:73:d8:8a:d1:c7:7e:ec:09:83:a8:4d:f6:eb:10:
         ae:e9:eb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:18:18 2026 by rpki-client