Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78dd12dd-970d-4fa6-87a0-5b7eea0423c9.roa
File:                     78dd12dd-970d-4fa6-87a0-5b7eea0423c9.roa (raw, json)
Hash identifier:          ypUDkvhMIKCRf+qKPEqkcfBW8CrvKRWFzTGye3aQDOE=
Subject key identifier:   93:7F:1C:4D:CE:04:97:F8:FC:F2:94:0B:29:58:E4:4D:CD:16:EA:3C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       55ED7E9B9EDF4D609BA26834A20D6506DC809555
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78dd12dd-970d-4fa6-87a0-5b7eea0423c9.roa
Signing time:             Wed 18 Feb 2026 00:31:58 +0000
ROA not before:           Wed 18 Feb 2026 00:31:58 +0000
ROA not after:            Tue 19 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        69.0.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ed:7e:9b:9e:df:4d:60:9b:a2:68:34:a2:0d:65:06:dc:80:95:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 18 00:31:58 2026 GMT
            Not After : May 19 23:59:59 2026 GMT
        Subject: serialNumber=dc31c7663dcb288bbcbf3a3a7c6709c485740914d43e233272705c5301132fb3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:91:3a:bf:95:cd:c2:53:5a:31:b7:3f:11:36:
                    29:49:65:25:f9:5d:64:a5:31:b8:b9:22:e8:94:a3:
                    d9:17:9e:44:67:86:d1:00:c0:ca:89:9e:50:2e:75:
                    ad:ef:aa:75:66:64:81:d8:d7:fb:36:68:cf:fc:0a:
                    2b:fd:81:b0:62:54:4b:66:fd:6a:bd:f6:63:ac:df:
                    1d:e3:3b:6b:f5:a7:2b:8e:be:95:ea:b3:29:dd:95:
                    a1:ed:76:02:59:bd:82:e5:6f:f8:f9:da:ac:8a:63:
                    7e:23:86:04:87:a4:9b:86:57:2a:2e:20:5e:16:4c:
                    0d:ed:f7:c3:f2:f7:d5:3e:04:5d:83:0f:82:51:8d:
                    c2:3a:4f:b5:29:74:f5:ad:16:86:90:fb:9b:b3:86:
                    42:69:47:6f:65:70:38:2f:cb:a2:a9:f8:b0:7b:97:
                    f8:4b:6c:d9:4c:83:75:0c:60:50:b3:6b:bb:43:2c:
                    9a:ce:1c:f3:10:4e:6c:86:32:fe:1d:6b:cc:5c:ae:
                    26:f1:a8:21:ea:5f:25:34:ec:aa:72:86:4e:05:d1:
                    c4:94:be:e9:1f:df:d5:ad:51:ce:4c:78:c5:ee:63:
                    2a:22:27:bb:48:8b:da:e1:54:7b:81:03:57:dc:78:
                    68:e3:94:92:d6:97:3d:6e:7c:d9:be:f1:c0:e5:99:
                    f8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7F:1C:4D:CE:04:97:F8:FC:F2:94:0B:29:58:E4:4D:CD:16:EA:3C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78dd12dd-970d-4fa6-87a0-5b7eea0423c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.0.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:31:1e:4f:d2:0a:77:c8:d7:32:f3:d4:3b:05:d8:5d:09:60:
         bb:fc:b0:b1:5c:fb:f9:aa:2e:9b:4a:5d:09:a8:1c:29:fb:dd:
         77:5a:2f:fd:6b:c8:b0:ac:a7:24:bf:69:dc:96:2b:b3:cb:69:
         38:60:0d:3d:d0:92:7f:84:f3:4a:8b:c9:26:4c:76:49:6f:e6:
         93:8d:57:68:b1:c5:dd:b0:4d:aa:39:67:bc:14:9d:95:d4:7b:
         2f:e9:00:7a:8a:ba:e2:42:b3:0e:0c:82:89:32:5d:e9:67:34:
         12:af:3c:c6:b9:41:bc:77:44:5e:5e:4e:7a:68:88:66:aa:95:
         2b:65:8c:d8:74:43:02:8f:2c:25:d6:5f:58:58:8d:ca:7b:5c:
         f1:9c:53:32:92:6a:5c:88:50:23:71:74:36:fe:33:4e:25:93:
         0a:a7:dc:4d:78:2a:4a:1d:ad:64:2b:85:9d:8a:f9:ce:ba:36:
         07:0a:f6:2c:79:fb:21:9c:95:33:60:3a:f6:c3:f2:b1:ee:31:
         dd:90:fd:e3:f0:a5:89:96:d8:fd:d0:43:b8:63:c8:81:6c:66:
         44:0b:92:9a:5c:78:f6:87:51:e0:a5:85:15:24:c0:6f:01:4e:
         32:e6:02:47:73:06:d2:6f:c4:49:65:35:ad:16:f5:16:97:29:
         5e:a0:d8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:06:43 2026 by rpki-client