Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ad7d350-34e3-4f44-858b-b36ac11a0165.roa
File:                     5ad7d350-34e3-4f44-858b-b36ac11a0165.roa (raw, json)
Hash identifier:          3WhAMa9HYiC2/dLxQlHfJB+TaGDs+AbpL0xzvhfM9c8=
Subject key identifier:   E8:1D:D0:67:22:C1:2C:5E:AD:09:58:71:35:A6:69:E4:76:C5:B1:F4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2EC8A7C611F734BEEBB9D121FF1AE3E14FAA5491
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ad7d350-34e3-4f44-858b-b36ac11a0165.roa
Signing time:             Wed 18 Feb 2026 00:31:28 +0000
ROA not before:           Wed 18 Feb 2026 00:31:28 +0000
ROA not after:            Tue 19 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        109.71.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c8:a7:c6:11:f7:34:be:eb:b9:d1:21:ff:1a:e3:e1:4f:aa:54:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 18 00:31:28 2026 GMT
            Not After : May 19 23:59:59 2026 GMT
        Subject: serialNumber=e3d6d814e3833cd443310012dbed098264c61d22777cffd959605b07b3425f6c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3d:3d:96:0d:a9:b0:fc:eb:ef:08:91:f9:96:
                    7c:0f:68:1a:a6:b6:cd:a3:ed:1b:7e:5d:9e:be:08:
                    18:c0:12:6b:b6:11:f5:58:30:43:f9:8a:9c:00:54:
                    37:2c:cc:0c:5f:0b:80:3c:dc:39:b1:76:63:31:9c:
                    6d:79:3f:46:7a:ce:dc:80:67:3f:6d:25:a5:89:a8:
                    99:44:59:9b:6a:dd:f9:4e:b4:96:ec:64:a2:29:9c:
                    15:78:78:3d:a6:58:81:cc:fd:7f:df:7a:eb:bc:e9:
                    b8:4b:7c:9f:0c:de:1f:44:99:e1:33:64:c1:84:15:
                    4c:25:dc:cf:10:e0:b6:44:86:0c:9d:af:5f:db:ae:
                    c0:19:74:11:cd:84:8b:42:83:cd:d5:15:eb:43:97:
                    63:89:bc:c4:eb:b0:09:bc:53:7f:e1:f7:61:ce:2e:
                    77:37:03:ec:e2:4f:3f:8b:d5:00:91:a6:e6:fe:fd:
                    0e:21:db:ab:ae:31:6f:32:67:07:1f:8b:26:b1:23:
                    c0:36:b3:29:58:38:7a:48:ce:cc:8d:f9:89:1d:9a:
                    05:4f:f4:6a:23:4a:42:8c:9e:19:65:79:e9:c5:1e:
                    95:38:ac:f1:e5:a0:4a:f6:98:e6:db:f9:a3:05:bf:
                    f5:02:5b:4a:91:db:9c:cf:4b:e3:de:36:02:75:dd:
                    da:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1D:D0:67:22:C1:2C:5E:AD:09:58:71:35:A6:69:E4:76:C5:B1:F4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ad7d350-34e3-4f44-858b-b36ac11a0165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.71.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:3d:25:b3:24:24:c0:6e:8b:6b:b0:9d:c3:19:98:b6:76:24:
         4f:c5:dd:a8:d7:86:0c:eb:26:07:2c:42:a1:c9:e8:8c:e6:ad:
         84:9d:a4:5c:4c:1e:9d:98:1b:ba:81:3e:67:e9:e5:64:70:78:
         94:c2:9d:5d:14:c3:f7:c9:e6:8b:d3:98:61:cf:09:27:42:ff:
         6c:57:6e:fe:5e:64:30:d4:5b:88:cd:16:e5:28:a2:2c:45:79:
         9b:8f:7a:50:33:0f:b9:f0:b3:c7:6f:36:70:d0:4c:06:a7:94:
         00:e6:92:b2:38:be:04:f6:06:e4:ce:8f:30:a0:5e:c8:1e:d2:
         f5:9b:4c:e9:6e:f8:5d:29:b2:e7:61:56:09:c6:02:cd:ab:91:
         05:c4:6e:a2:7d:4c:ca:dc:ed:b4:3b:42:9d:ef:3b:de:26:73:
         55:a0:e7:03:d0:aa:e8:92:54:41:a8:7c:ce:c9:dc:6c:5f:8a:
         a8:d4:b2:9c:7a:fd:44:c9:80:83:38:db:13:85:d2:be:89:be:
         bb:d7:af:31:1e:94:e8:5f:1c:88:ab:d6:17:65:6b:97:8a:1e:
         36:bf:5c:3a:5d:54:a7:24:e5:16:6e:12:4d:5e:f1:ba:d3:2c:
         c1:73:2f:f3:e2:d4:eb:b8:02:5a:37:a3:cd:8e:a6:1c:b3:1c:
         6d:5d:8f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:14 2026 by rpki-client