Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f0b048d-2305-43d3-a474-0e095ab7e09b.roa
File:                     4f0b048d-2305-43d3-a474-0e095ab7e09b.roa (raw, json)
Hash identifier:          uUgHqUss46ss1areAdQqPS1LGts0i6yWriuLcro2z9E=
Subject key identifier:   C5:9A:B4:BA:61:72:19:13:5F:CF:13:25:60:B6:76:7A:D0:66:2F:BD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       46AA7FCF5BEB7710960FEDA2B93E17ABDB75D77A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f0b048d-2305-43d3-a474-0e095ab7e09b.roa
Signing time:             Sun 15 Feb 2026 00:31:17 +0000
ROA not before:           Sun 15 Feb 2026 00:31:17 +0000
ROA not after:            Sat 16 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        69.53.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:aa:7f:cf:5b:eb:77:10:96:0f:ed:a2:b9:3e:17:ab:db:75:d7:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 15 00:31:17 2026 GMT
            Not After : May 16 23:59:59 2026 GMT
        Subject: serialNumber=4097297a5af93e935b68610a8e6d17763e97513662bcbfacb4f41428c7763f0e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5c:7d:c6:47:89:95:ad:9a:34:5b:05:08:bd:
                    39:58:be:e6:5c:73:be:41:a8:27:cf:1e:c3:6b:89:
                    48:1d:63:d2:b1:b0:df:02:cc:24:a3:ff:c9:5d:93:
                    a6:34:0c:82:51:8b:ff:7c:fb:df:41:fd:b6:44:8c:
                    0a:4c:d4:50:b7:b3:68:58:25:99:b0:ba:98:51:45:
                    27:79:51:38:17:d8:26:16:2e:f4:c5:c2:ee:ce:db:
                    46:9b:aa:fc:48:ab:c4:66:d6:a0:aa:3c:f6:74:c9:
                    b9:94:0a:ac:b7:c2:00:89:8b:2e:f4:c0:da:88:db:
                    c6:a4:81:a2:86:52:ad:ba:43:58:87:37:77:a7:b8:
                    de:f6:88:1e:0c:6c:e9:39:d8:bf:9a:bd:19:c3:de:
                    0e:ee:18:dd:09:7f:98:4d:86:01:30:ac:00:d0:cc:
                    12:29:3f:22:34:9f:da:81:fb:c8:0d:35:9c:9d:ed:
                    a3:9c:11:63:37:64:71:fc:e3:ee:46:8b:b0:7b:57:
                    bd:e5:0c:0e:6d:ba:08:58:70:38:98:09:30:a7:8b:
                    44:21:4a:3c:cd:a6:5c:ba:16:33:2f:e6:40:f7:cd:
                    e9:17:93:36:83:83:d8:58:90:3a:ba:dc:d6:50:fd:
                    90:f6:0d:77:ff:95:a6:c2:fa:65:0d:4e:bc:96:b5:
                    37:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9A:B4:BA:61:72:19:13:5F:CF:13:25:60:B6:76:7A:D0:66:2F:BD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f0b048d-2305-43d3-a474-0e095ab7e09b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.53.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b3:19:87:83:72:90:fc:b1:27:39:b6:0b:4b:b5:b9:04:a1:98:
         eb:f4:b1:07:6e:82:e7:d0:a0:a4:12:78:6a:ff:ac:e1:5d:04:
         56:2d:2c:c9:41:2a:ed:66:45:ba:94:09:2a:ba:3b:64:ca:0a:
         70:69:21:92:9f:7e:fc:3f:69:a2:52:61:f3:81:40:44:f4:03:
         49:e9:1c:d0:f1:f0:4a:cb:e9:d5:ba:07:9b:1d:99:3f:f8:d1:
         00:37:f2:6f:e3:9e:4a:f2:e2:bd:44:43:e7:5d:a6:6e:3c:6d:
         f5:df:5e:95:81:58:d9:e3:8c:78:f2:f3:0d:55:05:06:5e:83:
         c7:19:f6:64:b3:bc:94:e9:77:44:74:26:77:fb:8f:cb:0f:fa:
         5b:e3:0b:67:ad:f5:72:a6:c0:a6:40:b4:4e:03:1a:d1:59:f5:
         f2:09:80:8e:9e:8b:a0:53:a7:08:93:0a:85:f6:97:ae:b6:5f:
         56:95:31:6b:d8:a6:b0:aa:1e:f5:12:ab:3a:b3:8a:55:14:47:
         8f:03:7f:4b:eb:08:e9:4c:5f:78:24:9b:ab:6f:b0:23:40:48:
         22:8a:92:d5:b2:b4:d5:7b:67:49:f2:e9:44:03:7b:4a:7b:a1:
         68:08:14:8a:53:04:cd:9e:b5:e4:72:e4:80:cd:2d:1b:06:db:
         d5:f0:e0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:08:43 2026 by rpki-client