Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94513e26-aa15-4586-bd55-6b68d61713d8.roa
File:                     94513e26-aa15-4586-bd55-6b68d61713d8.roa (raw, json)
Hash identifier:          y+Ti7TCUN/KJiIuiiMU3ThxxbVdBoJ70oLYFTyM7/AY=
Subject key identifier:   53:6B:19:9C:4E:DA:C2:4C:11:D4:BE:B7:7A:27:67:CD:18:43:FC:57
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       66BDC93919C29A48F23B4FB81950F6A00D542B0D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94513e26-aa15-4586-bd55-6b68d61713d8.roa
Signing time:             Wed 25 Feb 2026 01:40:58 +0000
ROA not before:           Wed 25 Feb 2026 01:40:58 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        162.222.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:bd:c9:39:19:c2:9a:48:f2:3b:4f:b8:19:50:f6:a0:0d:54:2b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 25 01:40:58 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=3ce367d57988fc03177b9d215f6700fa38f76609c85bec51685138239cefe8d7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f6:9e:ea:29:fa:8c:3c:4f:83:64:1d:4c:b4:
                    49:c9:1f:35:84:63:05:a6:e9:35:f7:92:6d:fb:43:
                    87:27:ba:9b:30:9d:e5:95:c7:0b:ff:63:f9:bd:ff:
                    41:10:8c:65:1c:db:0e:ba:50:5d:8c:9f:48:99:5d:
                    1a:ba:47:73:8b:96:e5:3a:81:c1:f9:84:6d:10:80:
                    85:2f:b5:b8:d5:b4:d6:25:a5:4b:0e:0d:dc:e4:a4:
                    9c:be:27:05:fe:45:b1:26:94:1e:a4:b9:87:3d:1b:
                    2c:bf:01:0b:7b:98:1f:b2:72:fa:12:49:fa:e5:07:
                    89:79:20:df:33:72:a1:19:f0:fe:6e:37:b9:f2:a1:
                    a4:a3:37:97:d1:cf:4a:48:5e:da:e2:55:2d:86:89:
                    bd:25:28:dc:11:21:f3:4d:c1:1f:86:bc:3e:5f:77:
                    7a:f0:b5:a2:21:eb:5b:a1:55:a8:61:95:73:77:af:
                    ae:b9:03:d4:6e:72:5a:86:d0:08:52:6e:f3:00:49:
                    6e:b4:b0:83:b7:2b:9e:dc:e2:a8:86:8e:d7:6c:93:
                    26:0a:9c:75:67:c4:44:d4:db:59:eb:37:9f:e3:1d:
                    08:11:ed:ed:c5:c6:27:83:99:a8:97:5b:47:a9:81:
                    31:87:b5:ad:5c:67:5c:93:44:b1:0d:53:9d:8e:9c:
                    d7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6B:19:9C:4E:DA:C2:4C:11:D4:BE:B7:7A:27:67:CD:18:43:FC:57
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94513e26-aa15-4586-bd55-6b68d61713d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:54:81:ae:fa:bf:1d:bf:6a:e9:48:17:ac:8a:c6:4c:23:46:
         ac:e3:ee:d3:2d:b4:15:c5:33:30:0e:28:06:42:d0:2b:cf:ca:
         9c:f3:e5:5c:37:b6:c0:e5:9c:c6:0b:f9:26:46:5a:27:27:0a:
         ee:08:f3:5b:6f:c2:cb:5a:ca:dc:0d:13:92:36:eb:50:e4:6d:
         52:a0:5a:c2:a9:6d:54:e5:a9:73:b8:58:70:aa:b2:bf:bf:5b:
         0d:ab:e3:4e:1a:ef:db:d9:d6:00:79:79:e8:c9:02:c9:b2:4d:
         89:d9:9d:2f:ea:03:7d:10:83:e4:74:88:cb:f6:57:dc:01:07:
         39:5a:5a:e2:ec:66:b1:70:60:da:53:57:b4:b1:83:44:5a:bf:
         97:ad:bd:1b:e8:39:c0:31:11:e9:d4:e4:86:80:99:3e:86:6a:
         9e:74:17:68:2a:39:d7:8e:b4:a5:fe:6d:7a:37:80:6b:06:9a:
         a6:86:da:d8:2b:39:8c:3c:b5:57:8f:53:44:6c:c2:03:3d:2c:
         83:92:b9:3d:ae:16:fa:de:7f:f2:76:89:25:b0:83:ac:c3:21:
         36:ad:94:e7:a3:c7:52:70:a4:da:cc:ca:17:66:4b:84:0b:4f:
         7a:8b:e2:b4:3a:cc:50:d6:aa:95:92:64:2a:e9:40:22:7e:38:
         f9:15:39:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:58 2026 by rpki-client