Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5928830b-bdc0-40c2-82a8-029c15dbefb1.roa
File:                     5928830b-bdc0-40c2-82a8-029c15dbefb1.roa (raw, json)
Hash identifier:          s8sM6np4ft0m3N57Z5dLVtbKwvyLRzp6J2gzs8NPYEU=
Subject key identifier:   CA:2B:92:7B:16:41:C4:BB:19:85:1C:4B:7A:18:F4:04:29:18:7F:E8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       18AFD84B0F246D29F364D9C31582F87F81F5096C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5928830b-bdc0-40c2-82a8-029c15dbefb1.roa
Signing time:             Tue 17 Feb 2026 00:21:50 +0000
ROA not before:           Tue 17 Feb 2026 00:21:50 +0000
ROA not after:            Mon 18 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        93.76.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:af:d8:4b:0f:24:6d:29:f3:64:d9:c3:15:82:f8:7f:81:f5:09:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 17 00:21:50 2026 GMT
            Not After : May 18 23:59:59 2026 GMT
        Subject: serialNumber=7abaf0306241940afdc01445cafc286e8a4f9852c2e4913cd12003eb0c976e96, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:56:48:79:0e:50:77:48:57:10:27:25:93:
                    56:73:85:92:1f:da:76:af:8a:9b:aa:98:be:17:e6:
                    80:bc:6f:f4:ea:78:b8:81:3d:1d:a7:a3:a5:8a:01:
                    6d:63:73:99:3c:d0:58:df:f2:ab:cc:c3:19:f2:90:
                    76:aa:1d:5e:62:c2:d2:46:0d:9a:53:87:75:fe:6f:
                    e8:92:12:30:1c:f3:4c:e4:7f:70:3a:38:7b:6d:65:
                    cc:a4:bd:9f:0f:17:6a:e3:b6:06:f9:ca:a8:fb:82:
                    08:ea:70:a4:3a:5d:25:af:62:34:2e:38:f2:48:50:
                    bd:cc:77:22:a8:41:ed:0e:49:1a:21:ae:7c:0d:76:
                    08:86:cb:3c:68:c6:35:5c:19:fb:78:84:82:85:e3:
                    ca:30:0d:a3:13:27:9b:cf:7a:50:9a:8c:4e:cb:ac:
                    ef:7a:f8:69:37:75:22:e8:09:c7:94:51:6f:31:4f:
                    f1:8b:e2:65:a7:7c:03:4b:db:a4:dc:80:16:8f:5d:
                    aa:33:e7:ea:90:cb:be:25:d0:78:82:3b:26:84:18:
                    f3:00:fa:4b:69:61:7b:85:f1:03:e5:68:af:39:97:
                    e2:c3:ef:c6:b9:4b:59:26:ab:2a:ff:e5:09:30:e6:
                    b3:0f:ab:ed:42:6c:fd:1a:ca:eb:00:01:92:40:67:
                    44:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2B:92:7B:16:41:C4:BB:19:85:1C:4B:7A:18:F4:04:29:18:7F:E8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5928830b-bdc0-40c2-82a8-029c15dbefb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.76.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         79:2d:ab:9f:72:81:c5:56:35:8d:7b:af:5a:d0:e8:7c:ec:bd:
         4d:36:09:9e:de:fa:87:a7:fa:7e:1d:c3:d9:f7:45:fa:14:bb:
         4b:17:f6:30:90:a6:7e:36:a6:49:00:0a:7c:ae:58:99:dc:9a:
         60:92:05:5a:d7:93:b8:a3:f9:0e:f7:88:e4:08:43:27:3d:b3:
         a8:99:cb:59:c2:1d:e6:27:ce:c8:76:66:b5:d1:4b:d2:7b:f4:
         c6:84:a6:97:91:ce:80:74:cb:e6:80:d2:81:7a:98:29:25:c0:
         46:a7:b0:4d:e0:60:84:bc:f8:ae:c9:7c:c8:cf:91:b2:be:22:
         86:5d:7d:72:db:2e:69:f2:5c:02:ab:fa:dd:5d:3d:f5:cc:6e:
         b2:80:0c:1f:5e:e8:59:cc:ef:de:fa:d0:75:c4:91:65:5a:a4:
         fc:e5:c3:48:35:27:e7:cb:fc:eb:1e:f1:d1:aa:b2:d2:6a:fd:
         f2:7f:60:69:bd:82:de:41:49:4f:0f:c9:92:27:bc:fb:c7:12:
         97:e1:c2:d7:32:10:8e:01:02:61:ed:cb:ad:55:a2:91:f0:bb:
         dc:72:de:04:02:02:47:90:a5:bc:d9:ee:45:27:7e:f1:a9:46:
         92:7b:92:3f:a7:f1:a7:98:d4:41:fe:8f:95:17:b9:96:88:aa:
         81:11:76:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:41 2026 by rpki-client