Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75348837-a3af-4496-a175-7de8cd226873.roa
File:                     75348837-a3af-4496-a175-7de8cd226873.roa (raw, json)
Hash identifier:          iB31EmSQidXlleDd2hInEels0g6ZMOI/hlJlsUUn9K8=
Subject key identifier:   9B:7D:FC:FE:92:8E:23:EE:6F:F0:91:E1:5E:5A:68:B2:DA:53:A8:E0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6EB26C305D0D1C02081A7CEC82E03C1D83064F52
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75348837-a3af-4496-a175-7de8cd226873.roa
Signing time:             Wed 18 Feb 2026 21:36:51 +0000
ROA not before:           Wed 18 Feb 2026 21:36:51 +0000
ROA not after:            Tue 19 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        32.196.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b2:6c:30:5d:0d:1c:02:08:1a:7c:ec:82:e0:3c:1d:83:06:4f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 18 21:36:51 2026 GMT
            Not After : May 19 23:59:59 2026 GMT
        Subject: serialNumber=2097c76db93b2a04c29005ddc7237763ebeeabdd33fb034b3410f104436ee894, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9a:99:ba:c0:fd:e8:1b:32:bd:9c:47:39:e6:
                    62:64:3e:5c:61:b8:14:4e:a6:ff:a4:99:aa:8b:f8:
                    ea:99:07:f8:77:1b:52:9d:81:d3:73:fc:af:3c:7a:
                    5b:14:ad:4f:ad:34:48:13:8d:78:6f:dc:a7:72:08:
                    fe:c7:58:4c:b9:c0:fa:88:25:28:76:fb:72:99:e8:
                    3e:68:d4:32:23:67:69:54:f2:70:2f:13:ba:5c:ab:
                    00:b4:a2:fc:5e:47:9e:a3:17:64:16:18:d7:39:62:
                    e0:7b:27:22:64:53:1a:4f:99:3e:52:b6:b3:32:18:
                    eb:b5:5d:99:7f:4a:2a:a6:bc:50:f3:8c:5d:63:91:
                    8c:ee:e7:87:3f:1c:7e:7c:1e:ad:8b:4e:1d:85:4c:
                    72:98:3b:6d:32:25:a8:12:f2:a5:9b:6c:5e:31:19:
                    8d:06:1f:40:e4:f7:ed:10:f0:b6:1d:e6:62:14:37:
                    f4:36:8b:06:f3:1a:ef:cc:d5:71:1c:34:5a:8c:01:
                    2d:24:53:d2:7f:56:6a:3c:bd:b8:e3:b9:9b:69:75:
                    86:8d:80:93:ee:ea:28:75:fd:9b:5e:ff:4a:62:f7:
                    1f:95:9a:83:e0:09:e8:a9:d3:ae:b2:14:e1:ea:70:
                    2b:f5:98:6d:5f:c6:46:d4:68:18:a8:47:f4:ce:53:
                    24:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7D:FC:FE:92:8E:23:EE:6F:F0:91:E1:5E:5A:68:B2:DA:53:A8:E0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75348837-a3af-4496-a175-7de8cd226873.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  32.196.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         52:0b:92:19:30:da:dc:c6:ab:5f:71:6a:37:eb:5d:a9:31:48:
         dc:65:a5:c5:ef:1e:c9:27:15:01:60:63:75:ee:c6:b8:f5:c2:
         a3:31:e8:9d:05:94:26:15:83:d1:63:9b:66:84:54:45:e6:b1:
         a4:02:95:70:0b:f6:b6:36:20:47:9e:a5:f3:db:78:e8:4c:cf:
         90:c4:95:e1:d8:16:d0:fe:38:25:21:d5:d6:c2:c6:db:0a:bb:
         a2:db:5c:57:8d:32:9e:fe:46:71:77:66:73:c9:50:25:32:14:
         98:5e:84:b5:80:d7:e3:4f:49:c9:8e:85:19:22:c6:ed:4c:a3:
         ef:af:6c:9f:fe:9c:3f:23:12:8d:ed:ce:dd:d2:5c:67:36:1c:
         b9:50:f2:ab:70:df:da:38:56:50:bb:76:8f:ca:50:2f:ed:ee:
         c6:a7:87:a3:92:bf:2f:05:04:59:59:c2:cd:aa:44:62:40:55:
         77:57:4c:46:5f:8e:b9:d3:74:5f:5f:c0:0f:37:cf:a6:ab:7a:
         51:bc:26:b2:89:72:0b:63:83:8f:c9:fa:94:03:de:65:29:88:
         73:05:3e:78:ea:da:f5:6a:ad:41:15:c6:c8:ad:90:d1:bb:48:
         8a:27:32:5b:5d:05:72:7f:ef:b5:7f:2c:fa:d9:99:02:91:23:
         c8:4b:28:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:25 2026 by rpki-client