Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36aa37a5-85a5-4267-a40d-909515892745.roa
File:                     36aa37a5-85a5-4267-a40d-909515892745.roa (raw, json)
Hash identifier:          pvxG8mjjy9ovM8oMkfz+aDcZ6sMEgMZ86IxT2lwXd44=
Subject key identifier:   4D:C9:B6:CA:DB:AD:A9:A1:1F:03:37:2C:E2:2E:F6:E2:0F:25:D7:32
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       067D06F3329D371D484546B873B17B1D2F614581
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36aa37a5-85a5-4267-a40d-909515892745.roa
Signing time:             Sun 22 Feb 2026 00:40:10 +0000
ROA not before:           Sun 22 Feb 2026 00:40:10 +0000
ROA not after:            Sat 23 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        205.184.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7d:06:f3:32:9d:37:1d:48:45:46:b8:73:b1:7b:1d:2f:61:45:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 22 00:40:10 2026 GMT
            Not After : May 23 23:59:59 2026 GMT
        Subject: serialNumber=4ac4b925704798f7c28620de2e4d05447a24908897b60baf4b9313e345488005, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2b:a5:76:fc:20:4f:a3:43:be:10:e8:ce:f5:
                    c2:5a:2d:d3:81:90:74:c8:f9:2e:c7:37:fb:d3:5f:
                    ad:d2:8a:a6:8d:c8:a0:70:0d:d4:0a:d2:1c:8d:1d:
                    63:2a:2a:df:5f:8f:ec:04:55:c7:11:c7:49:cd:0f:
                    1d:9c:ec:a1:1a:99:87:ce:e4:82:1d:76:78:00:f3:
                    16:8c:53:ea:78:f3:16:81:35:57:52:57:3d:78:79:
                    6c:f6:a2:ea:37:68:21:d2:ac:a1:63:10:80:a1:31:
                    c2:16:21:ed:f2:3f:8c:a6:93:05:56:27:af:4f:8a:
                    58:3b:9e:54:68:58:35:83:8e:4c:45:ca:6f:af:0d:
                    dc:1e:49:f1:1c:f7:e5:6e:f1:be:4b:e0:d1:ab:a9:
                    da:0b:30:63:09:0b:9c:dc:44:5f:3f:e6:34:3d:fb:
                    b8:9e:97:48:af:83:9f:3b:6f:af:e7:79:a5:45:26:
                    d8:b1:72:2e:c2:f9:40:fb:96:16:66:26:47:bf:74:
                    ed:c6:08:30:66:ed:c7:16:ce:1e:c9:2a:96:a8:17:
                    50:88:55:7a:60:7c:d6:d8:7f:e7:cc:e3:52:0a:27:
                    3b:fc:c8:b8:16:cd:59:da:be:53:7d:48:e9:85:e1:
                    ef:77:03:e4:73:c3:e3:67:3b:a6:68:e1:64:f7:59:
                    06:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C9:B6:CA:DB:AD:A9:A1:1F:03:37:2C:E2:2E:F6:E2:0F:25:D7:32
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36aa37a5-85a5-4267-a40d-909515892745.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.184.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bf:ca:76:71:a6:33:60:57:e6:f3:f2:89:b4:8d:d7:a4:63:14:
         e1:91:a4:cb:f4:15:29:97:96:85:59:c8:b3:f1:b7:be:f4:20:
         fd:d6:b1:32:34:8a:1a:1f:6c:3b:da:ce:aa:ac:5c:0f:b4:c3:
         51:9a:7f:3f:7b:b6:04:54:34:1d:a0:b3:5b:94:02:30:d7:e0:
         d8:0c:60:31:42:91:ad:85:fd:d6:e5:fc:e9:0e:9b:e8:30:b8:
         a6:25:ca:1e:aa:26:ed:c1:65:6a:ea:0f:4a:ee:d4:47:d5:b1:
         cd:e6:47:0c:8c:ea:50:47:c0:e0:2a:b2:32:c7:7a:2f:ea:8f:
         b8:b0:fb:98:14:69:8a:45:43:99:fe:c1:99:8b:f7:dc:00:90:
         72:4f:e3:35:ba:6c:ba:0b:ac:78:99:f7:d8:dc:f1:08:26:6b:
         43:64:e1:b5:75:58:11:48:af:1e:5f:f7:f7:12:89:18:d2:45:
         24:c5:8b:6e:71:33:1b:8f:c9:cb:ec:48:a2:e7:25:d4:7b:85:
         e2:0c:c0:6f:30:1b:08:1a:9f:7a:1e:fa:9d:ed:d3:8e:2a:d8:
         f7:a7:db:f7:6d:99:37:bf:74:5d:9e:2e:57:83:f9:c5:53:aa:
         86:07:cd:cd:45:b1:93:75:d8:7c:d7:fe:68:11:13:b9:17:c3:
         8b:0d:d9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:34:43 2026 by rpki-client