Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bdc14e2-5fcd-4e8d-8933-81a7e8b30216.roa
File:                     9bdc14e2-5fcd-4e8d-8933-81a7e8b30216.roa (raw, json)
Hash identifier:          6Q6OX2DCfZBzFPjwuyiUJUywue7VfauwH432RCGO118=
Subject key identifier:   9E:39:DF:84:80:9E:33:FD:6A:F8:D0:9B:5F:30:92:39:93:B4:A0:11
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       05FEBF8FA6FA42EC8CB9A6DC297FA3E915A29AAC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bdc14e2-5fcd-4e8d-8933-81a7e8b30216.roa
Signing time:             Wed 25 Feb 2026 00:21:24 +0000
ROA not before:           Wed 25 Feb 2026 00:21:24 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:fe:bf:8f:a6:fa:42:ec:8c:b9:a6:dc:29:7f:a3:e9:15:a2:9a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 25 00:21:24 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=27f00efd8452a77384baf707bb85320c307bd88a354bfe6982cf9f399329dfee, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:52:7d:3f:65:76:fe:bf:3d:96:d4:c9:ff:88:
                    16:85:b2:82:3b:a7:62:08:a6:85:ae:45:5d:4d:a7:
                    c9:b4:98:52:f8:e9:b6:82:4b:0b:29:ed:38:c3:c8:
                    5a:b2:0a:3e:0a:f1:0d:6c:10:04:c2:b4:fd:fc:b6:
                    e2:ca:aa:06:39:dc:5c:61:ef:28:6c:83:48:41:31:
                    ae:eb:4f:be:49:73:ea:15:80:99:ac:df:b9:c4:bd:
                    d1:27:54:7f:fd:d3:00:02:75:92:53:f6:44:25:34:
                    74:9f:c7:90:7c:05:bf:ad:63:19:ff:82:ca:c2:d1:
                    87:ef:c3:68:af:6b:8f:78:c3:0f:42:8b:41:69:ee:
                    41:4d:ec:69:95:ff:29:a6:34:19:29:ce:0a:27:c8:
                    b0:5e:64:17:12:6f:fa:76:ce:90:ab:34:c0:70:e7:
                    77:94:5f:46:f5:a1:7d:2c:8b:92:98:f4:3a:5e:7d:
                    a4:c8:f1:c4:2f:6b:a6:44:11:f9:74:27:2e:28:b4:
                    f3:2e:db:2b:00:48:e9:19:8a:df:85:bc:18:83:50:
                    00:8c:a7:d0:5c:57:9f:46:80:b7:9e:e7:28:c6:9b:
                    fc:c6:d9:05:73:69:b1:82:b9:51:9f:19:18:23:78:
                    38:36:b2:bd:0f:a5:c9:fc:a7:8c:79:70:d4:2b:d1:
                    23:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:39:DF:84:80:9E:33:FD:6A:F8:D0:9B:5F:30:92:39:93:B4:A0:11
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bdc14e2-5fcd-4e8d-8933-81a7e8b30216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9b:12:b3:b6:40:1f:18:0c:d4:ed:ce:ff:ea:b2:92:3a:24:c4:
         9e:e0:1d:17:ad:a4:79:5f:41:db:2d:d5:da:d5:15:53:79:60:
         3b:be:7f:7a:58:b7:ea:31:c3:31:92:56:db:d4:54:d2:2a:b4:
         5b:b2:67:3a:25:4a:ca:49:f7:fc:f5:ac:4d:e5:1e:f2:40:cb:
         80:55:69:72:ed:7a:82:92:5d:41:97:40:e1:81:0d:ad:e8:8c:
         be:b5:12:d3:5b:d7:8f:53:d7:88:88:ca:95:26:0b:b6:3e:9d:
         d8:83:32:3d:32:1d:6f:14:cf:e2:30:c6:a1:8a:91:de:6c:e5:
         ea:c5:38:b3:9e:19:fb:a8:11:14:a9:5e:54:b9:4f:c8:6c:e1:
         ad:06:22:27:92:a9:b2:d8:41:ab:fe:7e:1f:b3:fc:85:22:29:
         c7:41:ff:17:4c:37:d2:0d:ce:ff:ee:3a:3e:41:ed:f1:8d:a0:
         52:c9:8c:dc:2d:65:1a:10:9e:df:2a:0e:18:e7:8e:e1:2b:95:
         84:91:44:1e:27:7d:c8:e7:13:79:e4:48:61:e1:32:2b:58:36:
         4f:e4:17:cf:44:cb:69:3a:f9:f9:c5:23:c1:80:c4:90:af:95:
         48:43:70:a1:48:6f:8b:31:a6:45:c7:db:08:ad:51:9a:e3:d6:
         2a:b8:a3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:53:18 2026 by rpki-client