Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/591acf32-d365-4f92-a730-b14202d5b086.roa
File:                     591acf32-d365-4f92-a730-b14202d5b086.roa (raw, json)
Hash identifier:          rrzzSZuhuOwT1Soeg8GmbqkvRk3KJpYonGWOX8pWvMQ=
Subject key identifier:   40:FC:68:4A:60:9E:AB:F1:51:38:10:A5:F5:22:14:B8:68:42:C0:C1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       49D5379963F776778F20ED2424E22F5447B07B7B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/591acf32-d365-4f92-a730-b14202d5b086.roa
Signing time:             Sat 28 Feb 2026 00:21:04 +0000
ROA not before:           Sat 28 Feb 2026 00:21:04 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        129.224.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d5:37:99:63:f7:76:77:8f:20:ed:24:24:e2:2f:54:47:b0:7b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 28 00:21:04 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=825304579ec88a5a5580bacfbc999c5310a2b5a3a789f6ed28c54af2b264a73d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f1:4c:0e:8b:d6:f9:f7:bc:dd:72:ff:e9:e3:
                    19:ba:2f:e7:cf:fc:f3:2a:26:01:18:a4:aa:a1:6d:
                    31:5c:47:5c:39:16:68:b8:34:60:74:c0:42:f3:11:
                    c1:2d:c0:6c:b0:45:3f:3b:19:fb:54:d1:d3:e1:53:
                    30:fc:b9:f7:42:70:0e:35:c9:e7:d6:55:78:41:51:
                    a2:5a:df:e3:b7:15:9f:e6:15:c2:b4:2d:a9:4a:a6:
                    2a:c7:13:0e:68:ed:0b:af:97:31:87:60:25:ea:ac:
                    65:15:46:25:c6:72:98:d3:7b:9c:31:82:69:37:b9:
                    d0:4f:ec:d9:06:08:c2:3d:34:7f:3b:3a:1a:15:62:
                    26:26:97:03:5b:11:17:76:06:bc:c9:e7:fa:f3:df:
                    a1:b0:2b:5f:9d:6e:51:47:51:54:5c:c6:8a:24:64:
                    ba:4e:a4:82:a4:6c:9e:72:0f:5b:f3:94:19:5f:3b:
                    41:79:ec:04:e8:3a:2d:dd:87:61:4f:d2:c5:fb:c3:
                    54:c0:a8:e8:1b:7b:35:4d:fb:b1:c2:e7:d7:b3:bb:
                    60:bb:65:ef:c6:bb:ca:88:3f:e2:b5:eb:95:45:8d:
                    23:a6:9d:df:e3:ab:4e:13:af:2b:43:68:b4:81:ef:
                    36:e7:98:b1:f6:22:71:54:91:c8:71:47:36:c3:a0:
                    3e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FC:68:4A:60:9E:AB:F1:51:38:10:A5:F5:22:14:B8:68:42:C0:C1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/591acf32-d365-4f92-a730-b14202d5b086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.224.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         66:23:63:08:3f:76:db:82:44:98:43:19:45:a6:d4:c9:48:ee:
         a5:6d:3e:94:96:f8:9b:f5:93:b8:ab:4b:c5:70:31:bd:05:8d:
         26:2f:ad:dc:ec:5e:ce:a9:bf:a1:a0:ae:31:ea:55:c3:7f:6b:
         cc:c4:3e:15:e6:08:e1:84:bf:6a:68:f7:d0:98:48:1d:58:58:
         de:7d:9a:9d:91:bb:d7:66:53:d5:a0:53:52:43:b7:87:55:53:
         88:0a:0f:38:d6:3b:a6:bf:37:15:93:2d:0e:be:b0:75:0f:c8:
         d2:2a:13:7f:63:b1:b5:6f:f7:41:f8:c9:ba:bf:56:8b:fb:62:
         64:63:ce:b4:88:13:08:e9:fe:c0:5f:57:cd:3f:1d:c9:fa:88:
         c7:ba:bc:e2:4e:27:54:08:23:6a:2c:9d:28:13:f4:5b:1f:cd:
         8a:88:0d:fe:cf:25:27:70:b2:67:10:7c:45:21:70:75:26:65:
         f1:fa:4a:c5:1b:84:66:68:35:b8:75:ce:5e:2b:01:f9:c9:d3:
         c5:c9:39:2a:e3:21:f6:bb:d1:b3:c7:e3:67:44:9a:4f:95:4c:
         99:6d:34:ca:17:1b:4c:14:1b:59:f1:c7:93:af:14:d0:dc:44:
         e7:05:d7:34:e4:90:84:28:e0:73:71:44:b1:f8:76:b0:20:95:
         06:98:f0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:41 2026 by rpki-client