Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97f5c8a5-a13a-4184-ad59-ad948ef2fade.roa
File:                     97f5c8a5-a13a-4184-ad59-ad948ef2fade.roa (raw, json)
Hash identifier:          0aajKRPXKyQZoBGWxwp5XD2pG5Mep8VsZNFvgIWt7lA=
Subject key identifier:   B8:F0:88:B3:A8:3C:B4:65:C2:72:D3:B4:63:13:2B:27:57:36:E2:29
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6C5C2FB14F84E91F61C241DB61E3266295DB4234
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97f5c8a5-a13a-4184-ad59-ad948ef2fade.roa
Signing time:             Fri 06 Feb 2026 00:20:25 +0000
ROA not before:           Fri 06 Feb 2026 00:20:25 +0000
ROA not after:            Thu 07 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        74.186.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:5c:2f:b1:4f:84:e9:1f:61:c2:41:db:61:e3:26:62:95:db:42:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb  6 00:20:25 2026 GMT
            Not After : May  7 23:59:59 2026 GMT
        Subject: serialNumber=118fb3d6fe6dbca81a62123f63cbdc7e6b43af937368a7d4dddfce083ca67f7e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:78:92:4c:34:ad:cf:8d:ec:de:5b:b9:82:78:
                    84:af:ee:e9:4d:69:eb:6d:7a:e0:e6:5a:fd:6b:94:
                    a3:44:f7:61:73:e6:06:19:30:05:69:cf:cc:11:e4:
                    59:66:8b:31:e2:29:c7:40:8f:27:02:79:86:ab:8f:
                    8c:ab:02:9d:a6:8e:06:ea:d9:e3:66:48:a0:3d:60:
                    76:9f:7b:74:b4:d0:8d:12:e6:60:1e:94:bb:5a:9b:
                    a7:e1:ef:6a:c2:35:bb:6d:d4:83:a2:92:43:d5:08:
                    47:89:d1:90:a4:65:f9:ad:be:d0:16:6a:c8:3c:d9:
                    c8:b1:9b:5e:86:14:66:8b:30:f3:67:c0:8e:b5:b8:
                    3e:28:1d:f0:a2:9f:d0:94:5e:92:61:28:6d:46:5e:
                    ff:65:03:a4:be:a0:cc:d3:c1:54:c0:a0:5e:83:86:
                    8d:17:a2:ff:31:07:c2:a9:70:60:83:cb:29:58:6e:
                    d6:04:2b:b1:30:da:b3:9d:18:ca:cf:67:eb:4a:33:
                    05:6a:63:3f:b2:50:ba:e9:98:43:c1:05:d7:55:a6:
                    65:93:4b:ed:23:99:6d:20:44:6f:40:48:7d:27:2b:
                    8d:49:d9:a0:66:04:f5:94:95:36:6e:b6:fd:c7:73:
                    da:25:7f:14:35:5c:2e:76:6f:c8:46:eb:4d:2b:fb:
                    9d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F0:88:B3:A8:3C:B4:65:C2:72:D3:B4:63:13:2B:27:57:36:E2:29
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97f5c8a5-a13a-4184-ad59-ad948ef2fade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.186.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5e:a1:d3:0f:32:9f:1d:4a:8b:53:0c:da:24:ae:b7:0f:ad:14:
         49:b5:81:9d:5f:5e:41:bd:8a:aa:58:48:f0:3a:35:26:1b:b6:
         96:3a:1a:ef:2b:c8:d3:d8:45:54:5e:9c:24:40:dc:c2:08:08:
         b0:e5:d5:ef:65:c8:89:5f:8a:9f:dc:a8:90:ec:d0:e3:00:38:
         d2:91:dc:d9:9e:06:c7:e6:40:08:99:24:71:d1:53:18:de:b8:
         0d:95:eb:f2:80:3e:a4:5a:a3:7f:67:21:73:b4:d6:de:30:ce:
         9e:90:26:32:c3:90:41:68:33:9f:ce:61:de:1b:52:0d:fc:18:
         94:ef:6b:4b:ce:b7:7f:ab:3e:69:9e:25:e7:d8:e3:f6:78:67:
         77:82:c9:61:fa:55:86:68:ba:ce:13:bb:74:77:21:f6:18:79:
         f3:b2:6f:85:3c:cf:22:d4:d5:22:fe:92:72:a5:e8:75:c2:8b:
         5f:9b:48:44:a0:8a:c1:5c:3c:08:25:9c:02:67:d2:10:9f:99:
         ba:71:e5:20:af:ad:e0:c6:f5:f2:88:4e:1e:62:ac:d4:16:5a:
         0a:47:80:5f:60:fa:10:7c:f1:77:79:a1:81:60:f8:7e:51:ee:
         44:c2:64:65:e7:22:33:03:f1:d0:f2:b0:c2:1f:c3:ac:25:d2:
         79:96:65:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:07:15 2026 by rpki-client