Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50466e65-74b4-4aa4-a0c0-7f36d17182b7.roa
File:                     50466e65-74b4-4aa4-a0c0-7f36d17182b7.roa (raw, json)
Hash identifier:          WQ80FK6N/ZMb1gZfgaFtEXijHmTS+/xElpPkLJfUNHg=
Subject key identifier:   1A:B6:4A:BE:C2:66:19:60:E2:8B:C8:96:C8:0E:48:4C:6C:84:6B:4D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       155048D80CF422BF0ADBDBDFCAEFBA7F00DA6A40
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50466e65-74b4-4aa4-a0c0-7f36d17182b7.roa
Signing time:             Sat 14 Feb 2026 00:41:15 +0000
ROA not before:           Sat 14 Feb 2026 00:41:15 +0000
ROA not after:            Fri 15 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        209.110.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:50:48:d8:0c:f4:22:bf:0a:db:db:df:ca:ef:ba:7f:00:da:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 14 00:41:15 2026 GMT
            Not After : May 15 23:59:59 2026 GMT
        Subject: serialNumber=0f0b8bed38b92942d0e8a9045091b76d5164b907327dce1662fc7784c330953d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:45:19:3b:2a:1f:58:8c:8a:06:a6:83:64:a5:
                    bc:9e:ca:66:2c:71:47:1b:2f:3d:4a:09:3f:07:14:
                    7a:80:e3:0a:b5:11:4e:48:e8:76:35:40:23:06:24:
                    e3:f8:5d:f5:9e:5d:8c:6e:51:33:e0:c9:0b:fd:5b:
                    8f:d2:ab:49:d6:1b:c7:50:52:65:fd:8c:51:8b:73:
                    45:a0:46:aa:36:5f:7c:17:e9:dd:49:cb:31:fb:84:
                    49:70:21:4f:fa:e9:b4:42:85:3d:8f:4a:2d:30:2d:
                    10:73:c7:ff:3c:6f:89:87:11:1f:d4:d8:ff:0d:49:
                    59:d5:a0:a0:8c:8f:c9:7d:96:3f:54:3d:3c:a3:5a:
                    38:9b:ab:65:56:7e:1e:e8:ae:ae:9c:c8:ad:26:92:
                    c8:df:e0:61:68:ae:d2:4e:33:a6:eb:3f:48:00:7e:
                    5f:95:4e:39:b9:3d:98:19:be:20:50:92:e4:b0:42:
                    74:ad:c0:fd:48:9a:3f:d1:50:b6:52:f3:18:ec:a5:
                    6e:5d:f7:eb:32:21:f6:d7:bc:c1:74:1e:cd:7e:ae:
                    ea:6b:5e:b5:ba:78:0f:31:62:be:b5:5f:7c:7c:9b:
                    8e:09:e5:43:96:36:26:85:2f:88:34:37:59:37:f5:
                    e4:73:24:d6:fe:15:5f:e6:3b:54:74:bc:41:0f:8e:
                    db:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B6:4A:BE:C2:66:19:60:E2:8B:C8:96:C8:0E:48:4C:6C:84:6B:4D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50466e65-74b4-4aa4-a0c0-7f36d17182b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.110.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         13:f9:a6:7b:42:06:d6:a7:6e:67:ad:38:63:9f:30:7f:db:2c:
         93:0f:fc:d7:c5:1e:d1:6f:8a:20:b0:88:54:76:e6:1c:55:37:
         62:6f:37:1e:60:86:8b:b2:32:6b:aa:66:77:fa:76:46:f9:76:
         e1:f1:f1:88:a3:b9:9d:74:d9:83:e5:f0:fd:b3:a0:43:ef:46:
         20:d1:11:6c:59:eb:f5:ac:80:42:9e:3e:ab:08:f6:eb:4c:c5:
         7e:53:78:01:75:99:17:01:d9:60:f2:9d:cb:a7:19:cc:16:37:
         8e:00:3c:f0:56:67:b5:99:eb:67:e9:b5:8f:be:b1:40:87:f2:
         4a:69:3e:db:9d:7a:14:4a:b3:fe:39:3f:6e:6a:24:07:bb:12:
         50:4b:cd:59:23:3d:5e:92:9f:e7:63:2e:4e:69:63:80:2e:ed:
         1e:6a:ea:16:88:73:cb:07:a8:47:de:93:55:6f:61:e1:cd:4a:
         4c:c3:e0:f6:14:45:68:5c:6a:a9:21:07:79:f1:ca:64:59:54:
         95:d1:89:fd:71:c7:f4:fc:57:14:9d:e4:34:b8:51:7c:8b:f1:
         2c:00:56:b5:97:dc:8f:92:d0:90:30:f0:20:70:ce:d6:84:aa:
         31:9e:0e:7a:3f:f0:7e:f4:65:29:65:77:3c:36:fc:51:52:a4:
         83:c5:ac:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:45 2026 by rpki-client