Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f47c629-dd2e-4cd5-8214-20dc4b58dbfd.roa
File:                     4f47c629-dd2e-4cd5-8214-20dc4b58dbfd.roa (raw, json)
Hash identifier:          SRD7S5XpejuwP4tmC8jg07odBOXX3gmv4Z3jp98dWIQ=
Subject key identifier:   11:54:2E:60:78:73:24:60:0F:59:4D:96:39:81:30:9D:0C:1E:2D:F7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6A2C5AC9CE2F7BD80B9F5C05AF7EDCC62E2B92AE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f47c629-dd2e-4cd5-8214-20dc4b58dbfd.roa
Signing time:             Tue 10 Feb 2026 00:41:45 +0000
ROA not before:           Tue 10 Feb 2026 00:41:45 +0000
ROA not after:            Mon 11 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2c:5a:c9:ce:2f:7b:d8:0b:9f:5c:05:af:7e:dc:c6:2e:2b:92:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 10 00:41:45 2026 GMT
            Not After : May 11 23:59:59 2026 GMT
        Subject: serialNumber=71cdc7a0bfe290bedc8e616ed8a62a9a392f4f6e8e735773485ed4125145fd44, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cd:39:58:6f:9b:78:5c:8c:47:77:27:4f:f6:
                    d9:2f:3e:01:1e:52:1e:bf:b6:ff:e7:87:b7:69:68:
                    92:42:94:cc:d5:d0:d3:f3:d7:07:ea:59:4a:98:ea:
                    20:0c:3d:c1:dc:8e:cf:2a:2d:38:92:e7:19:71:7b:
                    8e:83:b3:08:62:5a:ff:b0:5d:cd:d1:c2:90:e0:53:
                    0d:ed:29:75:ef:8a:d7:78:9b:52:50:65:ac:18:f7:
                    bc:af:24:88:a2:8d:90:f0:ce:5e:37:4d:b5:03:75:
                    25:8a:59:13:20:40:a8:60:4d:1e:12:10:cc:98:12:
                    4f:c8:fd:f4:cb:ce:de:02:c6:15:0d:b7:6f:aa:66:
                    93:e2:98:c8:38:80:a2:30:73:9a:a4:2f:31:3f:dc:
                    ee:a7:b8:38:d8:4c:86:23:28:e3:e7:54:f1:1c:77:
                    f2:36:6c:a8:82:41:28:3f:09:a1:15:38:d7:bc:29:
                    fd:e7:5f:41:e9:ec:b1:7d:79:d1:48:6d:13:36:c1:
                    4e:51:c6:f8:cb:96:a4:aa:ce:fb:3a:83:81:00:2d:
                    5e:1e:25:5f:a1:3e:74:a1:71:34:69:37:78:23:33:
                    b6:ae:83:1b:ea:17:17:7c:90:13:7e:ce:85:06:dc:
                    c3:c9:92:a9:4c:ee:9e:5d:5a:15:60:0a:58:13:42:
                    e8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:54:2E:60:78:73:24:60:0F:59:4D:96:39:81:30:9D:0C:1E:2D:F7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f47c629-dd2e-4cd5-8214-20dc4b58dbfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:10:35:49:62:d7:f3:bc:e6:49:72:ca:78:45:d8:db:06:19:
         f9:e8:c5:e8:f8:3e:ce:c4:cd:76:97:91:e6:4d:09:b6:39:ae:
         13:e2:03:b6:4f:6e:61:d3:ab:60:7c:79:4b:70:b7:a5:61:19:
         9f:2a:b4:c7:2b:d3:68:ba:0a:98:36:87:c4:80:00:79:49:34:
         c4:f4:cd:e7:5a:7c:54:53:c3:23:63:c1:fa:99:bd:a3:cd:85:
         98:76:b3:9a:36:1d:ef:6a:b6:34:d5:04:0d:4c:45:ac:36:7a:
         d6:2d:19:17:80:46:f2:b8:ed:ec:85:dc:d8:26:a7:7f:cf:89:
         b4:a5:68:69:a1:f4:7c:48:46:39:7c:de:d8:a5:0b:95:89:7d:
         92:35:a3:ae:09:85:ac:09:c9:8a:a7:49:9b:73:72:11:cd:c0:
         66:b4:e0:6a:aa:78:99:a2:ee:b7:df:94:34:67:5c:40:78:0f:
         06:9c:df:a0:fb:94:66:04:b6:e4:a5:ad:14:17:02:34:eb:01:
         c8:5e:7f:38:d7:40:a4:a2:03:3f:27:e0:f9:bf:62:15:9a:9f:
         c9:46:68:4b:dc:18:53:ab:7e:ae:6d:da:e4:e3:65:d7:ae:d7:
         44:08:85:d0:8a:4a:c6:0c:e3:7e:c4:08:31:ef:dc:58:32:a5:
         d6:92:9f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:19:15 2026 by rpki-client