Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c3c97fa-c615-46e3-80f0-b7d0b8a094b5.roa
File:                     4c3c97fa-c615-46e3-80f0-b7d0b8a094b5.roa (raw, json)
Hash identifier:          n+YzoglKQZWYE/fyEKRgnZVvDSatLj6k5438tgKWmfA=
Subject key identifier:   AB:F9:E8:6C:E1:57:F8:F8:C1:D2:49:30:75:9D:38:64:CF:1E:59:CF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31C1542E68FE65EEA62DB62F50502F812FDA23ED
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c3c97fa-c615-46e3-80f0-b7d0b8a094b5.roa
Signing time:             Sun 01 Mar 2026 00:21:50 +0000
ROA not before:           Sun 01 Mar 2026 00:21:50 +0000
ROA not after:            Sat 30 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        77.112.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c1:54:2e:68:fe:65:ee:a6:2d:b6:2f:50:50:2f:81:2f:da:23:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar  1 00:21:50 2026 GMT
            Not After : May 30 23:59:59 2026 GMT
        Subject: serialNumber=f0797a0e66ad37a18054f49efcdc2b4b80e2ab0480319d027e99eb6f5c8f65c3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:27:6f:b2:ae:39:8a:1f:10:18:fd:64:7f:
                    e0:9f:a8:fd:75:0e:3f:0c:38:9e:e0:a5:c4:63:00:
                    30:5a:b3:be:19:bf:1d:a3:35:74:95:e5:67:fe:e6:
                    e4:48:69:24:f6:40:cf:69:2b:16:05:c0:da:84:07:
                    96:b8:48:3a:21:e5:cb:cb:70:6b:9a:09:81:cd:e6:
                    a6:82:d0:53:e9:73:bc:ed:f0:c6:cd:92:b1:57:7f:
                    17:64:94:99:91:bc:00:a0:76:e2:77:d2:ec:e4:5f:
                    cc:d5:35:86:0e:2c:53:55:34:a1:46:d8:c0:e6:d1:
                    c7:ac:82:1b:b5:67:89:d7:96:52:42:90:9a:d2:06:
                    08:24:16:30:18:79:2a:bc:77:b6:f8:ee:01:11:8b:
                    62:f0:90:6b:76:9e:28:d2:4c:88:79:8e:96:7f:d2:
                    88:b6:f0:70:3a:14:8c:cb:8b:ac:64:d6:a5:4f:52:
                    bd:dc:cb:30:ef:41:29:d7:b0:0a:e1:3b:55:7f:88:
                    77:de:f4:60:9c:00:6b:2b:03:7d:19:da:03:9d:ee:
                    2a:b0:30:95:a1:3c:39:47:f2:38:26:d0:77:0f:db:
                    61:f5:97:8e:e0:64:07:b3:e6:5c:18:30:b4:9c:c2:
                    5f:fa:b8:43:80:74:eb:d6:92:86:f2:32:57:44:c3:
                    fd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F9:E8:6C:E1:57:F8:F8:C1:D2:49:30:75:9D:38:64:CF:1E:59:CF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c3c97fa-c615-46e3-80f0-b7d0b8a094b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.112.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         d0:bb:c8:a5:38:c9:bb:11:40:47:96:fa:a6:89:a8:5f:d3:19:
         df:7a:fd:6e:d1:d6:3c:5e:47:c0:d6:cd:04:dd:68:d0:60:bb:
         cc:ed:02:28:91:1a:32:e3:52:88:7e:56:ae:6a:52:3c:4d:63:
         66:d0:5a:84:6a:38:81:73:41:13:59:e0:d9:25:66:78:e4:e2:
         85:14:09:1d:a7:73:2d:f8:03:65:20:37:e9:f4:d2:75:0e:16:
         e7:8b:27:0a:8e:96:ee:23:a0:ba:a6:57:3b:96:c9:51:3c:b6:
         d5:89:ed:39:14:4d:56:1d:1e:d7:23:a2:8e:e9:b2:95:0b:d1:
         2d:aa:e1:2e:a5:7c:70:77:0b:0a:d6:e6:9f:a4:ba:ff:83:e0:
         0c:20:6d:af:55:12:9c:c7:03:3b:01:1e:8a:75:bf:57:df:d8:
         24:05:8c:6a:87:af:e8:7e:df:aa:00:47:d0:00:df:da:93:1a:
         24:ce:d1:30:de:b1:3c:88:e0:e9:8c:8c:28:6e:4c:7d:93:06:
         eb:c6:f4:4e:18:2c:ef:47:e6:05:b0:9d:21:a1:05:32:45:da:
         9f:16:ca:89:ef:89:c4:c5:09:d0:ce:00:cf:67:ed:81:4d:52:
         ea:e8:dc:03:39:2a:67:9b:cb:4d:dc:7e:9d:e1:3d:93:6d:12:
         eb:5b:0b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:19:38 2026 by rpki-client