Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/565bd2b5-79dd-4341-a5bc-d68981cd9648.roa
File:                     565bd2b5-79dd-4341-a5bc-d68981cd9648.roa (raw, json)
Hash identifier:          KpK0b6/cKK814MHA6QCda8EmYKBtshE/OIBcdhjTceA=
Subject key identifier:   D9:EB:B3:54:64:BB:5F:64:5D:5A:BA:5E:E9:21:F4:A3:38:A1:03:C2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       45512E94DF25637878FF0BF63228A744B738D4F3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/565bd2b5-79dd-4341-a5bc-d68981cd9648.roa
Signing time:             Sat 14 Feb 2026 00:30:12 +0000
ROA not before:           Sat 14 Feb 2026 00:30:12 +0000
ROA not after:            Fri 15 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.119.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:51:2e:94:df:25:63:78:78:ff:0b:f6:32:28:a7:44:b7:38:d4:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 14 00:30:12 2026 GMT
            Not After : May 15 23:59:59 2026 GMT
        Subject: serialNumber=954456ee12bdb8dfb6eb340a3b5c4782664a7f78c77b17c64af2b47953b323f6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:18:e2:f2:21:ba:8f:83:ab:35:5e:dc:e5:5e:
                    91:54:97:b8:51:2b:36:d6:44:02:bd:cb:a0:ee:f6:
                    49:5e:5e:da:01:7d:25:d7:88:56:e8:68:5c:22:01:
                    70:ba:81:1f:5b:88:8e:b9:85:3c:c7:19:52:41:13:
                    ab:40:bc:50:26:64:82:5b:97:1d:66:dd:13:f3:d3:
                    4a:9f:b3:35:66:11:60:4b:dc:74:7c:db:78:2c:67:
                    f5:4a:1f:e0:87:ee:e3:9e:33:4f:a1:1d:cc:68:a9:
                    3d:af:c8:fa:0a:0d:9c:7a:7f:03:ff:53:c0:01:29:
                    bd:af:22:73:4f:8b:bb:80:83:bc:c9:c5:cf:be:28:
                    fa:77:19:a4:a8:e9:26:81:e0:92:11:40:9b:fc:a7:
                    0c:10:e8:bf:22:04:2c:a4:e3:73:24:1d:8a:ee:87:
                    b9:c8:d9:6d:ec:9a:26:9b:41:1a:30:a1:fb:e4:b2:
                    dd:b3:74:a6:21:99:c7:01:0f:e2:4d:61:93:30:8f:
                    40:25:08:c5:8b:85:0d:ca:26:23:df:ec:f6:fa:e4:
                    b8:65:90:e5:b9:be:83:da:a8:82:8e:75:e1:84:eb:
                    bf:a5:7e:74:60:e0:10:25:69:81:3a:c4:85:b2:07:
                    8b:04:bb:42:5d:4a:31:69:6f:7e:5b:89:33:b1:2e:
                    ca:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EB:B3:54:64:BB:5F:64:5D:5A:BA:5E:E9:21:F4:A3:38:A1:03:C2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/565bd2b5-79dd-4341-a5bc-d68981cd9648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.119.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d8:d8:a6:fa:b6:34:60:ca:09:3d:cb:f1:c1:ea:d5:16:ae:e1:
         97:93:77:5e:4f:4a:b8:ea:8d:0b:52:2b:4b:fc:d5:6f:81:62:
         db:5b:d8:f2:00:e5:c6:d0:7a:46:ce:04:e7:74:9c:54:fd:69:
         32:9f:9c:6a:a6:9d:b3:27:d0:eb:9d:16:76:02:b3:37:51:4d:
         a3:38:1e:e8:0d:e5:fa:ed:57:dd:3e:86:69:91:b0:81:0c:e6:
         b1:d3:ea:58:3e:4b:8f:47:c2:55:99:af:61:ed:cf:a1:17:ae:
         11:4c:35:c4:73:ac:69:3b:fc:b9:27:b1:65:8a:72:87:5c:71:
         6f:d3:69:c0:0f:18:15:14:76:20:f7:17:f4:62:90:de:36:32:
         a9:91:f7:a9:f5:1f:f3:ec:1f:c0:57:25:ba:c4:50:ec:3d:ad:
         f9:47:0f:b9:a8:7e:65:c7:61:f7:09:35:a4:8a:00:7d:2b:ca:
         79:22:91:9e:fb:be:76:67:03:69:67:db:45:ba:1f:55:4c:c7:
         de:f0:f8:03:a0:43:65:61:dd:5a:81:94:5e:76:98:11:e4:54:
         c6:5f:39:24:8c:f6:a4:c8:0c:c2:9e:98:f3:49:27:0e:32:25:
         00:99:16:87:83:27:81:75:40:1e:9f:4e:d0:dd:e3:db:ae:e1:
         b7:33:fb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:06:59 2026 by rpki-client