Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42e80cfb-6694-44ed-8b7d-4f7bcc286fe7.roa
File:                     42e80cfb-6694-44ed-8b7d-4f7bcc286fe7.roa (raw, json)
Hash identifier:          K30p6A3t792c9Hhm1xbKcVik3BHcGANsJM7LuK3G6pM=
Subject key identifier:   D9:17:FA:38:A8:DC:5E:09:5F:B8:5F:4B:2E:6C:11:B7:0E:54:2C:37
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4BA2F1EBA474FD8FFE81D6FDA85AC56262B9B4AE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42e80cfb-6694-44ed-8b7d-4f7bcc286fe7.roa
Signing time:             Sun 08 Feb 2026 00:10:28 +0000
ROA not before:           Sun 08 Feb 2026 00:10:28 +0000
ROA not after:            Sat 09 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        56.187.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a2:f1:eb:a4:74:fd:8f:fe:81:d6:fd:a8:5a:c5:62:62:b9:b4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb  8 00:10:28 2026 GMT
            Not After : May  9 23:59:59 2026 GMT
        Subject: serialNumber=6dae6751de31dcca5dfd7cb06d5bf34b8ccc9a70f670d1c46d60e45e18980283, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:73:f1:48:e0:35:ba:ba:9e:b3:c8:aa:3b:45:
                    2b:9c:61:d7:09:0a:4d:b4:43:e9:3f:b5:b0:7c:c7:
                    41:e0:4d:a4:c5:06:75:37:1b:59:aa:09:ce:9e:5d:
                    1e:e1:71:29:74:0d:23:a6:cd:ff:5d:90:d4:2b:af:
                    14:62:6d:3b:8b:e7:57:c3:b7:ad:37:ff:7a:7f:8b:
                    df:c2:17:cb:4c:f8:70:f0:19:47:f0:fa:51:39:97:
                    f0:b1:64:ec:58:a9:fc:01:f5:93:8a:82:83:51:2b:
                    0d:ee:13:fd:4b:23:0f:8a:ec:83:29:bf:0d:6a:c2:
                    e7:38:c0:ad:03:bb:5b:c4:16:e1:1f:07:15:fc:84:
                    57:5e:e8:ca:17:e1:f8:60:23:a0:e2:8d:9c:b2:6c:
                    cf:b2:eb:0b:a6:9e:f0:71:41:d7:af:2d:24:f8:26:
                    d7:21:a9:07:fd:d6:a7:c9:12:27:f6:54:0f:9b:09:
                    1c:57:f4:dc:da:85:ff:f8:a9:fb:69:e4:bf:b4:c4:
                    b1:c6:f7:85:09:5d:4d:ec:7d:79:52:39:63:48:c5:
                    07:a4:cf:36:3d:2a:17:fe:cb:13:00:cc:b4:f4:20:
                    9f:2a:69:cf:eb:3a:8d:41:18:2d:f3:04:95:8a:59:
                    c2:de:10:c1:e8:66:2d:08:72:ad:24:5d:50:11:2e:
                    fd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:17:FA:38:A8:DC:5E:09:5F:B8:5F:4B:2E:6C:11:B7:0E:54:2C:37
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42e80cfb-6694-44ed-8b7d-4f7bcc286fe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.187.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         41:a0:93:7e:7d:3a:77:de:7a:ea:c1:01:bb:67:da:af:db:21:
         a6:74:0e:f7:92:9a:67:6d:b1:fe:8f:61:34:14:55:1d:b5:33:
         b0:e2:57:fe:00:81:4c:1e:44:95:db:59:88:b2:37:22:3a:df:
         f0:63:44:52:28:8c:e8:55:6e:45:89:98:da:9a:8c:64:5d:81:
         aa:32:00:b3:98:b3:32:54:6b:da:ac:3b:b3:d5:5f:a0:94:44:
         ad:b3:33:78:7a:dd:25:1c:50:c6:fe:3d:2e:c5:39:71:8f:bb:
         17:0d:a6:0c:6d:89:a9:3f:9f:b1:de:25:71:c0:1f:2e:6b:87:
         1b:ff:02:5a:95:93:b2:86:9f:ff:b7:c3:c9:f5:c2:28:ca:d8:
         3c:15:c9:6c:12:be:6e:09:0b:44:46:98:5e:a5:e5:1f:b4:4f:
         6a:6a:84:40:9b:7a:49:d0:a5:f3:b3:9f:a4:7b:92:a6:c1:8a:
         0c:99:8c:11:9a:d5:cb:59:13:9a:6c:8b:b7:d6:77:38:2b:1c:
         d2:35:b8:64:b6:0f:ed:08:b3:72:20:3c:d3:88:52:d7:1a:56:
         15:8d:8f:c3:24:e9:f8:5b:30:99:b4:25:77:99:c5:16:57:e9:
         2c:5c:8d:25:a6:60:62:1b:8a:17:9f:1c:00:40:d2:72:9d:7a:
         b6:d9:d0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:06:25 2026 by rpki-client