Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c78c70f-fea0-4a67-8233-6cfe2555d21e.roa
File:                     9c78c70f-fea0-4a67-8233-6cfe2555d21e.roa (raw, json)
Hash identifier:          FAhoKyeajyfbyKOQaX2fPkbHMCjeZb8eju9u4WS+vfg=
Subject key identifier:   3C:21:10:8B:E4:20:F0:BC:5F:54:56:5C:08:DE:8C:17:A8:F6:CF:9B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3087FA21F50560F8AF6066A598998C6B8CA5B2A9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c78c70f-fea0-4a67-8233-6cfe2555d21e.roa
Signing time:             Wed 18 Feb 2026 00:30:17 +0000
ROA not before:           Wed 18 Feb 2026 00:30:17 +0000
ROA not after:            Tue 19 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        209.179.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:87:fa:21:f5:05:60:f8:af:60:66:a5:98:99:8c:6b:8c:a5:b2:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 18 00:30:17 2026 GMT
            Not After : May 19 23:59:59 2026 GMT
        Subject: serialNumber=d8842af364ed3e19ef157b0c1002f558e3f2f2d67e771a78edb27c08ed840fb7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a7:6a:6e:27:bf:82:9b:e5:9a:54:c9:f5:02:
                    84:3c:d4:1e:6f:98:9a:57:01:6f:c1:b5:74:6c:30:
                    9d:8c:f6:be:37:e5:81:69:ca:93:15:a5:fd:27:e1:
                    ef:87:9c:1d:13:2a:89:21:b9:fe:8e:c6:78:5a:5f:
                    0a:b1:d7:9b:79:4a:e7:b2:36:c4:ae:42:04:1c:01:
                    35:f7:75:cf:46:62:56:0e:55:02:64:69:0b:c7:4f:
                    08:37:41:39:07:c2:05:94:3f:42:8f:5e:23:fd:a8:
                    e5:91:d4:f0:dc:20:cf:13:44:6e:21:94:e3:ac:b6:
                    93:bd:05:5f:bb:15:d7:9b:cd:ba:f2:dd:b3:7b:68:
                    0f:70:2b:8c:95:fd:f8:ea:68:ba:ba:27:69:c0:f9:
                    e2:44:58:bf:04:84:47:54:1c:d8:be:55:46:84:a6:
                    1b:91:a6:f7:92:49:38:cc:9d:a1:50:64:56:fc:cf:
                    91:1b:d2:79:05:fd:79:17:e8:98:1d:86:90:d2:b5:
                    f3:4d:55:94:1d:ca:ab:2a:95:9e:39:ad:d4:49:9d:
                    af:20:ff:6e:c7:5f:00:13:72:49:68:ff:d2:95:79:
                    9a:2b:76:a2:33:32:0e:ca:9f:e3:60:7c:71:e8:47:
                    88:63:f2:04:2d:8e:78:36:6e:e8:38:87:4b:dd:17:
                    c3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:21:10:8B:E4:20:F0:BC:5F:54:56:5C:08:DE:8C:17:A8:F6:CF:9B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c78c70f-fea0-4a67-8233-6cfe2555d21e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.179.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3a:34:f4:c4:42:2e:82:c3:ba:24:c8:24:e7:64:34:a0:ea:01:
         de:03:56:91:57:9b:e0:8b:88:f0:71:91:e6:99:c1:1d:00:be:
         43:29:33:24:b7:58:84:5c:20:c9:2b:c1:77:c8:c0:e7:95:0f:
         68:aa:0a:13:71:fb:8a:9b:8d:f9:8b:c6:de:ed:fa:4a:3a:11:
         32:17:aa:38:40:29:4c:51:27:16:36:8a:00:c8:9d:e0:e6:be:
         d8:43:51:24:3a:29:18:ae:37:1e:82:12:6d:da:aa:a7:2b:9c:
         c9:c4:48:5e:bf:58:3c:54:21:cd:78:2c:d3:bd:09:67:d8:b7:
         be:53:48:6f:fb:09:ea:52:71:ce:03:82:a1:3f:38:74:7a:a7:
         54:f0:56:2d:9c:52:d3:58:fa:df:6e:9e:b4:ba:98:be:19:42:
         bb:fa:7b:8e:4b:17:8a:c2:ce:05:9d:5b:c3:81:50:58:21:30:
         97:a3:b4:2f:4c:94:fb:76:5c:e7:48:30:3e:c2:41:bb:ef:2d:
         e5:be:fb:dc:44:a1:a3:5b:45:22:1f:cf:9c:01:8c:07:3b:5e:
         fa:ff:14:61:0e:24:16:1e:47:cc:8a:21:a8:13:de:6c:4f:bc:
         c4:7a:7b:5f:6e:3e:a0:f2:df:ef:98:d1:72:6a:8d:a4:e8:3b:
         bd:1a:7b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:56:35 2026 by rpki-client