Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a7938ef-40d0-49c4-aa4e-862db8f8341f.roa
File:                     5a7938ef-40d0-49c4-aa4e-862db8f8341f.roa (raw, json)
Hash identifier:          HsjP3fFIDwdADluIgdBN410tB7ZteD7UwLyXB/UMVWk=
Subject key identifier:   30:40:37:0B:F8:1C:A6:CF:88:78:0A:9D:FE:76:77:4E:B5:6A:B8:4C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       587CC2A2C2153FBB4383767B30D8D2EDA9E6D4F9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a7938ef-40d0-49c4-aa4e-862db8f8341f.roa
Signing time:             Sat 14 Feb 2026 00:11:36 +0000
ROA not before:           Sat 14 Feb 2026 00:11:36 +0000
ROA not after:            Fri 15 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        50.16.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7c:c2:a2:c2:15:3f:bb:43:83:76:7b:30:d8:d2:ed:a9:e6:d4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 14 00:11:36 2026 GMT
            Not After : May 15 23:59:59 2026 GMT
        Subject: serialNumber=a45f8e377fba4cf2ceb51401a2b6428d72555c9cd4ed4226114ca208ccf1fa5f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:62:b0:62:e5:bf:0d:08:ba:11:f3:63:d9:2c:
                    d0:e5:24:2a:ba:0e:20:b5:b6:43:37:04:7e:30:91:
                    6e:86:14:65:69:a1:7f:72:bf:d6:d7:b6:d8:fb:10:
                    89:14:9c:21:49:62:ad:19:de:90:38:69:47:1f:44:
                    fe:d4:b5:55:47:da:b7:84:bb:04:bd:18:2b:8e:76:
                    c8:12:25:a1:16:a1:68:01:3f:e2:45:a3:f0:54:3b:
                    23:77:d2:52:9e:19:ec:cc:1a:31:d5:02:0f:84:a8:
                    48:cf:d4:04:00:7e:17:97:4c:e4:44:ef:f8:0f:11:
                    24:f6:77:c2:ea:d7:22:1d:ad:94:0e:c7:36:04:51:
                    7d:d3:66:d2:71:f6:ab:de:88:d6:f5:f0:af:c8:01:
                    a7:24:4f:2d:68:70:c4:53:da:53:f7:6c:96:99:b8:
                    4d:2d:34:2f:57:4f:23:eb:af:bb:d5:0b:75:05:0d:
                    4c:37:48:b0:c5:2f:f1:c3:41:39:1d:52:d7:5e:fa:
                    7c:61:47:5e:e0:ce:65:dc:b5:0d:78:8a:93:27:ce:
                    a2:7d:41:72:d9:cd:c5:02:7a:d1:3b:27:b6:ba:8a:
                    df:24:a7:45:ea:27:92:e9:7d:9e:1f:ca:3d:cb:02:
                    62:92:9f:80:f6:a6:68:2c:d0:83:36:9e:3f:c2:48:
                    01:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:40:37:0B:F8:1C:A6:CF:88:78:0A:9D:FE:76:77:4E:B5:6A:B8:4C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a7938ef-40d0-49c4-aa4e-862db8f8341f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.16.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         38:48:74:54:8b:cb:be:38:29:37:ae:6c:87:24:20:47:c7:d2:
         06:0d:63:2b:08:12:19:9b:83:47:b7:f4:05:5d:ab:d5:ea:09:
         7f:9f:74:51:9a:e0:f5:a8:12:36:a3:b5:73:e6:b8:aa:ea:c0:
         15:6c:1b:d2:ff:51:d9:33:26:fd:75:c2:d8:1b:a9:6b:ac:e5:
         e4:d1:94:d5:55:17:e5:20:ee:4e:05:56:9d:5c:3b:3c:a1:0d:
         d8:7e:c5:e0:5d:cf:56:aa:ea:08:75:c2:d4:e3:c4:e2:2a:22:
         94:af:b4:30:3e:b7:8a:ec:d4:56:dd:e0:95:88:4e:05:ff:44:
         eb:66:e5:d9:23:dd:e9:e3:f0:cb:b9:e8:cd:4d:e6:ca:35:58:
         13:77:c9:cb:c8:e1:e1:d0:49:8d:de:36:16:05:eb:de:93:fa:
         4c:0b:fe:fd:1b:7d:78:d8:34:dc:91:37:6f:e3:39:0e:f4:f6:
         dd:92:b9:e0:ee:34:82:88:f9:fe:16:e4:19:9b:3f:9c:61:ff:
         11:f0:2d:88:fc:5a:da:31:aa:ca:ca:c9:d0:ee:cc:2a:52:6f:
         8e:18:44:bb:6e:eb:b1:eb:ba:3f:2b:82:dd:64:e2:f9:bd:3b:
         06:eb:a7:57:eb:65:5a:dc:a2:33:28:19:ec:f0:cf:a5:c4:bb:
         2a:ff:e9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:07:56 2026 by rpki-client