Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b4fab25-7784-4b8c-ae9b-bab51faa4834.roa
File:                     7b4fab25-7784-4b8c-ae9b-bab51faa4834.roa (raw, json)
Hash identifier:          uMhwtXoa+DMP6E/otY+bUyTimQnECbdQ5ihSpJvOVTs=
Subject key identifier:   69:D0:F0:A9:D9:57:11:92:C9:06:72:D6:AD:D7:96:10:28:EE:38:6D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5246D3B56060DE291E955A078ED17180ACABB0E3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b4fab25-7784-4b8c-ae9b-bab51faa4834.roa
Signing time:             Tue 17 Feb 2026 00:21:16 +0000
ROA not before:           Tue 17 Feb 2026 00:21:16 +0000
ROA not after:            Mon 18 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        93.77.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:46:d3:b5:60:60:de:29:1e:95:5a:07:8e:d1:71:80:ac:ab:b0:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 17 00:21:16 2026 GMT
            Not After : May 18 23:59:59 2026 GMT
        Subject: serialNumber=441a0a9a37acec20338dc00ffe698c6f09831e82faa97cbba3cf6fcd16a8130d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d9:1b:85:03:c1:0b:ac:9d:83:7d:cc:68:62:
                    4e:0f:0b:4a:8c:e5:18:09:71:31:7b:f3:66:7e:07:
                    9f:b8:0e:9c:4c:52:19:cf:74:93:91:a4:41:24:1b:
                    c9:d5:80:c5:45:84:25:c9:a1:c6:cd:27:5a:0c:e1:
                    be:6c:d3:07:76:7c:fb:24:78:66:a4:92:33:3a:f2:
                    48:64:9e:bc:99:18:7c:e7:14:57:55:d6:a4:db:45:
                    ca:64:11:2a:93:1a:89:24:19:4f:56:7a:84:c1:b6:
                    99:58:f6:06:1a:cf:40:d0:de:84:e1:8d:92:26:c6:
                    73:85:38:2e:b7:03:26:9e:9f:6c:5b:1a:60:78:e8:
                    bc:da:c2:47:94:cf:40:5d:26:0f:db:ae:f7:8b:db:
                    a3:ce:57:9d:e3:af:f9:72:c8:a4:6c:ba:55:94:2c:
                    0f:3f:56:0d:4e:85:be:95:be:06:1f:0b:3d:32:28:
                    ec:fa:62:64:e9:b2:54:40:9d:bc:08:30:88:40:72:
                    6a:28:a1:e9:3f:15:65:cc:96:8d:2c:05:58:83:f4:
                    68:4e:46:20:b2:f5:d0:5f:ec:e4:01:77:1f:a6:70:
                    4e:16:90:1f:96:aa:e5:8b:48:8f:96:00:b3:49:3c:
                    45:5b:fc:2e:90:02:52:2a:4d:ed:03:fa:05:6a:19:
                    96:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D0:F0:A9:D9:57:11:92:C9:06:72:D6:AD:D7:96:10:28:EE:38:6D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b4fab25-7784-4b8c-ae9b-bab51faa4834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.77.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         77:4b:02:3d:b8:78:62:c7:83:ad:57:36:20:ea:5e:b3:a3:2a:
         77:ef:8f:e9:b1:63:f7:27:88:e1:b7:92:84:ec:d7:1a:e7:75:
         09:50:c1:0a:3c:f0:97:c8:02:26:6b:65:39:5f:6e:eb:b7:3f:
         9f:aa:0b:65:b7:56:90:cf:4c:80:75:cf:98:83:6b:3b:24:36:
         6f:19:0c:3b:f5:b2:93:22:56:fb:a4:db:31:12:9a:db:81:30:
         db:b1:78:21:5c:a0:d9:f0:24:ef:7a:7e:39:4d:6f:7b:67:49:
         81:be:66:ff:31:7d:50:dc:4e:7f:0c:25:a6:bf:93:00:b6:74:
         51:2b:59:9f:ed:c8:b5:3e:db:2f:15:9e:20:52:ab:2f:7c:30:
         2f:e7:45:32:1f:e0:10:a8:6d:88:e5:61:ca:f4:cf:41:a8:c6:
         6c:a6:2d:ff:67:db:58:7d:b1:07:27:5e:a9:11:79:ea:ee:23:
         08:0c:23:39:28:37:de:65:c0:89:aa:b9:b8:b4:8d:6a:47:e8:
         54:c2:7b:f8:98:11:3f:ae:4d:d3:e9:f1:bb:ce:be:38:6b:3d:
         a8:6f:cc:b4:87:92:8e:8d:db:3e:80:a9:3c:e7:29:d3:1a:c5:
         21:8c:ad:df:7d:ea:8e:d9:5e:ba:3f:0e:e6:51:07:04:21:ff:
         88:3c:a3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:06:40 2026 by rpki-client