Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3259b213-f7c1-41ae-bac6-e8c5fb358f08.roa
File:                     3259b213-f7c1-41ae-bac6-e8c5fb358f08.roa (raw, json)
Hash identifier:          FdZKB/53+xjlUZwFneEcVP4YIHfels4vUS88P6XIe6s=
Subject key identifier:   42:AE:A2:94:EC:CE:AC:49:26:B2:CD:13:97:F2:83:0D:E9:02:35:F6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4EC4840664E26C328E1E73A4E7CF0FFF7F59AA58
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3259b213-f7c1-41ae-bac6-e8c5fb358f08.roa
Signing time:             Thu 26 Feb 2026 00:11:11 +0000
ROA not before:           Thu 26 Feb 2026 00:11:11 +0000
ROA not after:            Wed 27 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        69.107.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c4:84:06:64:e2:6c:32:8e:1e:73:a4:e7:cf:0f:ff:7f:59:aa:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 26 00:11:11 2026 GMT
            Not After : May 27 23:59:59 2026 GMT
        Subject: serialNumber=96c24a8ce32444bc9d639f9a8618b01366dca5ed548b9fcafe5ec5416d13d889, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:51:46:6c:35:99:e5:c0:66:d2:96:75:eb:
                    ae:1e:e1:72:cc:ab:64:ff:d7:f0:84:a9:85:fc:72:
                    b2:12:05:5d:7d:b8:aa:09:42:9c:78:2c:00:6e:7a:
                    3b:73:f4:bc:35:8d:e9:fa:f0:3f:6f:db:4b:ad:96:
                    20:bd:73:c9:49:11:99:dd:70:42:e3:f5:0d:84:89:
                    6c:ea:18:f3:e3:59:b3:66:e3:28:21:6a:16:de:ab:
                    96:ff:5c:8b:b6:ae:79:9f:b1:70:53:e9:3b:ab:3d:
                    e8:89:8b:e9:c3:8b:bb:b1:5c:59:f1:6c:d4:93:b9:
                    18:7b:2c:78:1e:eb:0c:8a:16:71:c7:91:fe:1f:97:
                    51:ce:3c:47:46:4a:93:fa:42:63:96:6c:c8:86:12:
                    a7:7d:9a:a0:73:ab:90:bd:b5:03:5a:01:c7:2e:a8:
                    cb:d1:3d:04:b8:5e:6d:ae:2c:9a:b9:a8:dd:76:49:
                    ea:67:f2:14:db:ce:95:cf:d6:28:b0:0a:c6:7a:c4:
                    5b:d1:d0:b8:f8:63:ed:e8:51:c9:2b:63:1b:ee:83:
                    55:64:16:94:68:99:de:c8:a2:55:33:50:e3:e8:fb:
                    ee:0e:12:7c:0c:28:c9:5c:87:03:de:98:a6:85:4c:
                    d6:e3:d1:ad:31:f6:4f:9d:3c:f3:76:f3:cc:d3:cd:
                    ba:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AE:A2:94:EC:CE:AC:49:26:B2:CD:13:97:F2:83:0D:E9:02:35:F6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3259b213-f7c1-41ae-bac6-e8c5fb358f08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.107.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ce:89:5e:9d:7d:79:7d:a6:f1:8f:7a:c2:d5:e6:4c:35:e6:5b:
         ef:5b:3c:2c:02:a6:69:ba:5e:eb:8e:70:df:ba:d8:b8:63:7e:
         1b:6d:91:a6:c3:66:d4:36:18:d1:bc:73:14:18:96:83:a3:6c:
         51:94:bd:73:ab:9e:35:70:4a:b4:c0:ce:2a:60:55:00:ea:4f:
         80:4a:f0:f2:ec:3d:b8:d6:0c:c8:f1:db:4f:4a:77:f7:4b:f0:
         1e:b4:72:b3:dc:85:0b:a3:71:36:42:1e:50:3e:1e:43:2d:66:
         fe:20:35:e7:8e:62:de:f3:7e:70:b1:af:2a:52:05:b7:0f:5e:
         15:34:09:47:71:f5:13:35:6d:15:1c:46:58:6e:1f:91:c5:96:
         53:ff:96:34:b8:37:4a:61:45:d4:4f:e3:3c:e1:b7:66:f5:0e:
         4e:56:53:44:a0:c7:10:42:52:c5:e3:a7:37:4d:ac:5f:83:97:
         d3:e3:ee:4e:d3:4c:88:28:1c:9f:d2:43:6c:83:c2:e6:1c:dc:
         f0:ff:57:38:29:4a:3f:6c:0c:e2:04:ce:71:97:a4:1a:45:ea:
         80:54:37:ad:14:ba:dc:79:96:09:5f:8b:c5:51:5a:89:7d:33:
         a3:23:6b:f7:ed:66:30:34:21:99:55:b8:df:82:98:d3:94:8c:
         7d:fb:9d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:15:29 2026 by rpki-client