Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d9d5bd7-2808-4dcf-96a8-29fc3a603307.roa
File:                     8d9d5bd7-2808-4dcf-96a8-29fc3a603307.roa (raw, json)
Hash identifier:          rVlXs+dnFOeRJfbQtrLdRSwuD/Aq0VWIlmbKmJIpffo=
Subject key identifier:   33:01:13:DA:39:80:3F:0E:55:AF:93:4B:A8:14:56:07:E7:00:0B:6E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7CFFAF2BFE8D4E8336AC0608DB41AF2F0FF15DC6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d9d5bd7-2808-4dcf-96a8-29fc3a603307.roa
Signing time:             Wed 25 Feb 2026 02:31:17 +0000
ROA not before:           Wed 25 Feb 2026 02:31:17 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        174.129.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ff:af:2b:fe:8d:4e:83:36:ac:06:08:db:41:af:2f:0f:f1:5d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 25 02:31:17 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=3df5bc75bb11d719f59ad227fc4ed9b015be03982929cd3729a78b9186a58641, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c0:19:0d:f7:be:c8:32:e1:9a:ab:13:00:b0:
                    c1:9f:75:59:21:61:5f:7c:c6:e4:b9:60:f2:6c:4e:
                    5c:20:5e:3f:62:f2:d3:64:dc:1d:11:0a:d1:9a:71:
                    60:f1:01:65:d6:3e:62:1d:b9:05:a1:a2:6b:fd:dd:
                    3b:15:70:cb:e5:f1:da:00:bc:65:77:c5:71:05:09:
                    e1:83:7d:ea:f8:5b:39:73:46:09:46:9b:a7:75:88:
                    51:b4:b4:43:04:b6:1e:d3:e5:59:60:28:d5:ac:35:
                    52:70:3a:1c:2b:02:68:9d:18:36:79:14:66:1d:65:
                    03:70:94:cd:46:94:9f:5d:cd:4b:24:fc:4b:6c:67:
                    66:4d:99:14:07:d0:3b:23:d3:41:a9:ee:a2:33:36:
                    2c:3d:a7:d1:a8:14:48:53:ae:41:b0:4a:68:f6:91:
                    fe:f3:3b:1c:42:49:3c:d6:f8:57:89:96:13:68:ea:
                    25:69:89:45:9c:78:7e:3e:16:5e:f7:85:1e:9a:22:
                    b1:c8:42:94:51:6e:79:4c:a8:b9:0c:4d:4c:1a:db:
                    78:68:e8:8c:13:bd:22:d5:fd:28:9d:bc:0a:ce:3f:
                    6d:a0:1d:99:18:79:1a:cc:68:10:b3:98:60:6f:7f:
                    98:7a:50:34:a0:5f:a9:71:b6:ee:ae:94:16:21:12:
                    e6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:01:13:DA:39:80:3F:0E:55:AF:93:4B:A8:14:56:07:E7:00:0B:6E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d9d5bd7-2808-4dcf-96a8-29fc3a603307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.129.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:f4:ff:92:8f:2d:43:92:c1:17:8a:49:62:8a:1a:f5:93:7c:
         7a:9a:85:49:1f:e8:8d:c0:0f:0c:6f:95:8a:70:6c:02:cf:71:
         f9:5a:e2:1b:fe:a3:7a:39:00:5c:b6:f9:11:43:ba:5c:71:f0:
         4e:a1:2d:f2:cd:d6:79:76:9d:ab:a3:02:9c:cf:df:3c:20:93:
         f3:85:6a:47:33:93:5f:7c:29:bb:09:2a:ee:9e:65:a8:a0:bb:
         14:87:59:6c:89:ac:8b:94:00:46:75:17:ac:ef:5c:8a:db:75:
         e9:14:d7:db:72:85:3e:bc:90:ea:59:82:ee:86:38:78:ef:e5:
         38:f6:a0:7a:ea:e4:07:fa:78:5a:d9:54:9b:21:65:17:ac:0a:
         3f:91:3e:99:f5:a9:c4:db:15:f7:b7:95:9f:c9:bd:61:4b:7f:
         ac:aa:50:3b:da:b6:da:a5:d1:67:38:40:87:e9:6d:25:b0:87:
         2c:ee:0c:f2:19:d2:d4:3f:86:41:a1:88:bd:72:5e:55:44:df:
         e5:24:4d:ce:c6:28:3f:bc:22:0e:aa:3b:2a:74:ad:b3:2e:ad:
         60:2a:69:f3:ed:02:55:26:9c:da:8c:b7:da:b6:37:17:bb:b2:
         51:3c:be:c7:e7:80:d1:40:b1:31:8a:ef:7a:c6:0a:4b:74:1e:
         fa:b0:89:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:11:29 2026 by rpki-client