Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61630a45-5ce6-4aaa-ba3b-b4682bc87ede.roa
File:                     61630a45-5ce6-4aaa-ba3b-b4682bc87ede.roa (raw, json)
Hash identifier:          hJ/gWit/nYhBdU7VgUZ944cxKl8CcLYBSa7M+/hUDTE=
Subject key identifier:   42:49:54:3F:E5:A6:2D:BA:F9:37:D4:73:4F:95:5C:6D:A5:F0:BD:7A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6A1EBC408955AA1E7F1E797CBFEFE912291FB7E3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61630a45-5ce6-4aaa-ba3b-b4682bc87ede.roa
Signing time:             Tue 17 Feb 2026 00:10:33 +0000
ROA not before:           Tue 17 Feb 2026 00:10:33 +0000
ROA not after:            Mon 18 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        64.131.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1e:bc:40:89:55:aa:1e:7f:1e:79:7c:bf:ef:e9:12:29:1f:b7:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 17 00:10:33 2026 GMT
            Not After : May 18 23:59:59 2026 GMT
        Subject: serialNumber=e4f3ad4d07cfd0c154a058015a7cd9d80f009981b91cb7c8f7a6885be40932cc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9e:37:75:24:9b:ee:11:6b:2d:5c:d0:fe:c6:
                    2c:c6:51:6b:26:13:e6:a2:84:65:7e:7d:7a:37:27:
                    a0:f0:01:88:cc:8d:2c:d5:2e:4d:ab:24:fb:bb:95:
                    1e:58:71:28:c2:f1:ab:2b:15:60:ce:25:38:08:9c:
                    c1:be:b1:e0:d8:06:16:2c:9e:52:7b:ef:98:32:9a:
                    7b:21:70:cb:d8:59:fe:8d:c1:f7:d7:7c:a0:c0:5a:
                    38:2d:9d:b7:48:a5:86:a1:3c:f7:ea:d6:7b:df:87:
                    6f:3f:ee:65:0e:c0:53:79:40:7e:46:1e:1a:a1:b7:
                    1c:b8:db:1d:1d:32:6c:32:3d:53:7e:43:b3:c2:42:
                    49:7d:0f:43:5f:fd:dc:f7:8c:1d:37:6c:be:2b:8a:
                    2a:8a:4e:d6:08:9a:f0:7b:83:a1:4b:24:c4:6e:60:
                    49:0a:36:f4:cf:8e:82:b7:80:47:38:fa:a7:b5:48:
                    0b:b6:88:d5:f3:a9:b8:8a:9b:a2:e3:d5:2d:8b:77:
                    b9:0d:25:ed:af:ce:7c:24:1f:a0:2c:fe:43:fa:c6:
                    bf:93:28:9b:09:5e:7d:91:ea:5d:e6:a1:59:66:63:
                    b1:41:ce:c0:1e:7c:b3:7a:f9:ff:e5:6e:1b:21:ff:
                    39:70:9a:6d:e7:a1:41:17:bf:f0:92:79:75:37:e9:
                    97:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:49:54:3F:E5:A6:2D:BA:F9:37:D4:73:4F:95:5C:6D:A5:F0:BD:7A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61630a45-5ce6-4aaa-ba3b-b4682bc87ede.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.131.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8e:e7:30:71:15:4a:89:34:86:eb:4a:b1:9b:68:2c:71:69:f6:
         9c:8e:f3:69:d0:41:94:8d:19:74:48:da:e7:4b:25:63:aa:56:
         99:86:72:e2:71:79:21:65:1d:01:d6:70:47:8b:e7:66:bd:19:
         32:3c:a5:3c:a4:b8:35:1a:b0:dd:0e:f7:fa:0f:7d:7e:a6:d7:
         68:2c:f6:82:70:4d:b9:a6:5a:33:e8:e9:c6:da:88:44:50:09:
         b2:0a:10:1a:1a:cd:ee:7f:4b:ff:65:26:e8:c8:70:96:d7:d7:
         bb:82:b3:5c:68:3e:be:b7:1b:10:1e:5b:83:82:99:01:52:d0:
         ff:83:9c:dc:2d:d8:a7:ae:a9:f3:1a:a7:f2:2f:71:b1:63:e8:
         9c:41:f6:97:eb:ca:15:9b:d0:76:f0:8c:a8:97:f5:e8:ca:75:
         31:39:5b:53:a2:4a:9d:66:bd:3e:28:25:cb:02:3d:d5:c9:e3:
         c4:1e:d3:42:91:ac:c7:2d:7c:fd:fc:1a:d7:c3:c2:dc:6e:62:
         8f:46:35:12:b1:32:f0:98:c8:aa:e7:e9:f5:f1:20:1d:c3:2a:
         2d:d7:df:80:ef:2f:42:03:9b:6d:e5:30:e8:eb:28:8e:a4:35:
         08:da:02:f8:2c:07:e6:10:a3:44:52:6a:c4:d7:7c:e2:8b:3f:
         64:39:78:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:07:18 2026 by rpki-client