Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43533d1b-8728-48fc-8c27-57ef981e8c1a.roa
File:                     43533d1b-8728-48fc-8c27-57ef981e8c1a.roa (raw, json)
Hash identifier:          /5rAOC3fVIbyCUD4qP8d2vPLuhAlropKjy1hO5jku90=
Subject key identifier:   AC:56:A5:4B:79:99:78:3C:9F:0D:FB:F6:86:DF:88:45:6A:9E:C8:A1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       57514C2927C55A2BDB0475A9CFA1CA71B579D14B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43533d1b-8728-48fc-8c27-57ef981e8c1a.roa
Signing time:             Thu 26 Feb 2026 00:30:45 +0000
ROA not before:           Thu 26 Feb 2026 00:30:45 +0000
ROA not after:            Wed 27 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.177.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:51:4c:29:27:c5:5a:2b:db:04:75:a9:cf:a1:ca:71:b5:79:d1:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 26 00:30:45 2026 GMT
            Not After : May 27 23:59:59 2026 GMT
        Subject: serialNumber=c68fe6850f96615e521e97a997dd84938eb63339b1f08e1dbbea8d737461979c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:82:03:0e:12:95:68:f8:61:8b:46:ee:ae:8d:
                    e9:29:69:ec:5a:60:5f:dd:f6:b4:f9:36:39:bd:ab:
                    f5:dd:8e:7a:77:15:21:7f:db:d7:24:2d:f7:37:b2:
                    7d:28:e6:ab:9b:6d:5d:24:ca:a5:76:43:04:8d:7d:
                    7c:a4:b9:78:1f:88:2b:50:ef:d1:67:bd:12:50:4a:
                    81:b2:ca:90:1c:e3:fd:f5:82:4c:c7:dd:e3:15:d7:
                    06:ed:71:24:e7:3c:74:99:cb:22:cf:96:e2:27:2d:
                    d5:f4:6c:9f:dc:ca:43:44:13:1e:f4:3d:5b:7b:c5:
                    8c:2b:5f:3e:d3:0e:ee:3b:4c:e7:c1:9d:5c:3c:44:
                    88:dc:9d:fb:5a:6e:09:fa:d0:5d:06:cf:80:53:6e:
                    1a:43:33:1c:67:93:04:fa:72:3c:97:94:47:5e:c3:
                    5e:73:a0:5f:e2:8e:7f:ac:37:78:85:73:19:ab:6c:
                    4d:7d:48:2c:3f:fb:60:e7:3f:09:48:d5:bd:34:4c:
                    02:cf:7c:d4:66:c7:8c:83:17:18:9a:c9:42:cd:7b:
                    56:9d:64:51:7f:1d:31:92:5a:1a:f3:ab:94:5a:50:
                    b3:d0:32:70:79:07:2f:33:9f:fc:2c:a4:86:eb:bb:
                    3b:15:bd:d7:78:3f:cb:88:07:c6:7f:34:28:0c:93:
                    3c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:56:A5:4B:79:99:78:3C:9F:0D:FB:F6:86:DF:88:45:6A:9E:C8:A1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43533d1b-8728-48fc-8c27-57ef981e8c1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.177.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ab:a0:9b:f7:c5:cc:a2:e3:4c:00:60:ae:5c:bb:8e:bd:01:27:
         c4:16:9a:cc:d1:d8:09:b7:1a:ec:c6:d6:83:4a:0f:a3:ce:ca:
         aa:6e:bb:d8:32:f2:54:6d:cb:58:2a:c2:ab:11:b4:9c:8a:08:
         87:73:0a:f8:f3:07:7f:1c:f8:b3:dd:e2:3f:6b:2e:c5:fd:7c:
         b0:e3:5f:23:d2:cd:f2:74:08:5b:b3:cf:49:33:ef:8a:96:af:
         e3:8c:6a:73:8e:b3:13:14:3b:2f:09:bb:37:11:5f:ed:75:b1:
         63:05:33:40:5c:32:cb:23:5b:bf:42:52:93:e0:79:35:f3:01:
         3e:97:75:c0:70:e7:a0:f7:c3:73:0d:f7:0d:56:d3:22:1a:60:
         48:cc:38:c6:60:5b:76:09:3a:2c:fb:00:e9:0b:7b:40:28:19:
         79:97:d7:25:1b:a1:d0:1a:16:2c:61:ee:aa:ff:f9:ce:cc:04:
         fd:6a:0e:6c:db:f1:44:28:17:07:45:f0:48:be:20:44:0d:11:
         ca:e8:10:fe:18:8b:d2:0e:fe:1a:30:82:f6:76:9f:17:56:8b:
         79:e2:a0:7a:44:fe:17:d2:58:ac:af:e8:1d:0a:ba:58:68:6e:
         08:05:45:e7:11:fa:b1:75:f4:35:96:b2:a0:8d:40:6b:ef:17:
         2c:ce:5a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:15:46 2026 by rpki-client