Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46dcc094-243f-4dae-b743-198aafddacb6.roa
File:                     46dcc094-243f-4dae-b743-198aafddacb6.roa (raw, json)
Hash identifier:          LbRaPcs8P6Nf0MrLa/ITTTqV6hyN5NF55BrRxm20hnc=
Subject key identifier:   0B:60:CA:94:BD:1A:B4:21:3F:F2:5F:CE:B5:6A:5F:AB:86:B7:40:3D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6FFA3F4C5A09E2ACC080ECBD3232F3C56319620F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46dcc094-243f-4dae-b743-198aafddacb6.roa
Signing time:             Fri 13 Feb 2026 00:50:38 +0000
ROA not before:           Fri 13 Feb 2026 00:50:38 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        44.216.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fa:3f:4c:5a:09:e2:ac:c0:80:ec:bd:32:32:f3:c5:63:19:62:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 13 00:50:38 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=53a06268732c8becc54cf3425e50f1e4108b0e2b6bcc27ec82a8b96725a11bc6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d4:a8:aa:c2:d8:b5:c7:7c:1c:eb:2c:af:09:
                    2d:49:ff:d8:d0:d6:ae:64:42:b8:e6:80:6a:99:29:
                    b7:cf:c7:e8:2e:38:23:a0:4a:0e:60:18:81:b9:b5:
                    77:d9:3c:b4:dc:60:b1:7d:f9:c2:ce:68:96:52:40:
                    89:c2:d8:01:11:a0:9e:e5:74:5c:08:20:5d:2e:f5:
                    ca:99:ff:02:42:5b:c1:78:71:51:53:43:58:15:10:
                    c0:dc:7c:69:a2:b1:f7:83:95:af:1e:99:30:1c:08:
                    c1:45:bb:2b:7e:2f:44:58:d9:41:95:d2:d9:4c:ae:
                    2c:88:88:b9:16:c3:93:2f:ab:20:24:54:49:ea:38:
                    db:51:4f:7a:ef:a8:88:6a:15:0d:17:18:4c:6c:d1:
                    db:ed:34:4a:da:ca:b6:60:d8:07:05:d1:80:1c:18:
                    fd:71:78:6d:eb:b7:06:b0:30:2f:75:9d:73:b2:dd:
                    e8:5d:96:9c:23:ec:b9:91:b4:04:20:42:b1:b8:8f:
                    f6:e3:2a:8e:81:ad:d9:e5:af:eb:14:2c:13:1b:b3:
                    c7:5d:8c:73:30:ac:6e:b5:17:8c:09:cc:41:b2:03:
                    06:0e:11:dd:6c:a3:2c:92:d2:10:f8:b9:8e:09:5a:
                    d2:d8:ee:29:35:f1:8c:8c:db:5e:1e:c7:f2:48:ce:
                    24:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:60:CA:94:BD:1A:B4:21:3F:F2:5F:CE:B5:6A:5F:AB:86:B7:40:3D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46dcc094-243f-4dae-b743-198aafddacb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  44.216.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:68:6c:1f:21:f7:c2:60:c0:98:bc:a1:53:2e:da:49:98:ce:
         42:9e:43:a0:9a:76:09:45:39:47:3a:4f:04:5e:1f:2c:a2:b6:
         56:03:41:5a:5a:36:78:98:21:15:9b:81:3c:bb:e2:c8:48:1f:
         25:25:b0:cb:82:8f:2c:f7:a3:43:69:dc:1f:d5:ee:3f:1c:ce:
         66:f2:c4:ff:07:27:9c:4c:db:ab:e7:42:cc:41:e8:90:bc:6e:
         92:8e:2b:1a:c1:6b:b4:d3:b6:03:b3:2f:19:7f:49:e7:ea:2c:
         dd:74:09:71:ed:59:0b:08:c7:c5:61:21:90:1e:ff:69:99:47:
         c2:0b:3e:2a:d5:03:06:ab:b4:23:36:da:89:e4:3a:55:53:e1:
         3b:7d:d2:0b:9b:76:1a:37:6a:f9:0b:8e:a0:33:cf:e8:8f:fd:
         16:2d:78:29:80:fa:f7:cd:84:1a:fc:f9:e4:92:26:52:67:44:
         bd:08:fc:03:25:6a:d9:e9:03:89:1f:f9:43:a1:3b:66:ff:73:
         49:85:c2:ab:8d:19:03:8e:53:71:74:c8:8b:24:28:10:93:3b:
         96:0f:e0:1f:72:93:a0:a2:ec:12:02:10:25:97:f0:f4:80:83:
         a1:77:dc:e9:23:3c:21:10:7b:a7:1f:36:01:18:f6:9a:0e:5e:
         fb:ba:d2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:56:43 2026 by rpki-client