Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d2fe7a4-4293-4ba7-90d9-e9550e1bf0ee.roa
File:                     9d2fe7a4-4293-4ba7-90d9-e9550e1bf0ee.roa (raw, json)
Hash identifier:          QIr0doniK1dqzQ8pGIkn3/k8bs5lRSYwNBtr2ipOY7Y=
Subject key identifier:   17:CF:19:D8:5E:DF:5B:A4:22:DE:11:4B:B8:0B:F2:78:DB:4E:AE:B3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       64F6C8F4BFBFA4124B4E57305DB5B986667A2EBD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d2fe7a4-4293-4ba7-90d9-e9550e1bf0ee.roa
Signing time:             Mon 23 Feb 2026 00:00:47 +0000
ROA not before:           Mon 23 Feb 2026 00:00:47 +0000
ROA not after:            Sun 24 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        24.110.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f6:c8:f4:bf:bf:a4:12:4b:4e:57:30:5d:b5:b9:86:66:7a:2e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 23 00:00:47 2026 GMT
            Not After : May 24 23:59:59 2026 GMT
        Subject: serialNumber=92617c847f798a98e2d1c143a64eee2871fee875c2e08df51bca28300af6b900, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e2:ee:8a:bb:8a:7d:a3:1c:ed:b8:b0:12:9b:
                    24:da:47:c0:5b:60:8e:4a:3f:6f:c4:70:54:d0:9c:
                    c4:00:00:ad:23:a4:cc:da:56:03:5e:42:fc:64:17:
                    c3:b9:e0:68:d0:a8:5c:7a:f3:10:5f:06:53:f2:8b:
                    3f:37:ce:cc:90:12:3e:12:c0:84:95:ad:01:e1:ec:
                    b0:a5:4f:70:9d:51:c6:e9:c0:6d:62:27:cd:fd:6b:
                    6f:b9:9e:26:ef:af:68:90:9f:a4:03:12:9e:e6:8a:
                    f6:37:94:a1:07:ba:de:56:ba:cc:42:55:4a:b0:34:
                    1e:7e:ca:f4:7c:76:0e:bb:a4:35:2b:6e:64:26:81:
                    c1:f2:6f:59:dc:77:30:c2:fd:53:56:bd:f0:da:e0:
                    4d:95:53:b6:76:5c:ce:60:bf:57:12:73:87:3e:4e:
                    31:6b:a1:70:da:5e:8e:df:ba:f3:69:43:63:7b:14:
                    7d:59:60:45:06:b4:01:fa:b4:36:87:e4:7d:7f:b2:
                    0c:45:6c:a1:33:e7:75:ee:34:a9:92:e1:b1:7a:56:
                    fc:74:c1:71:2e:26:d4:3c:3a:ad:2e:96:5a:d8:30:
                    43:50:37:fb:45:03:68:38:b5:3e:79:bd:e0:c6:ef:
                    26:42:a2:2a:3c:d7:de:22:49:d4:16:35:40:c7:ed:
                    21:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:CF:19:D8:5E:DF:5B:A4:22:DE:11:4B:B8:0B:F2:78:DB:4E:AE:B3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d2fe7a4-4293-4ba7-90d9-e9550e1bf0ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.110.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:6a:b2:33:ad:84:0b:96:4f:a5:a7:e0:24:f5:15:ba:df:66:
         15:93:40:e6:51:7a:fa:91:36:da:50:d7:22:e4:ae:4d:ff:f7:
         cd:97:e6:d4:a1:66:7e:69:74:a3:1c:a5:e2:00:dc:d8:f8:73:
         25:0a:e3:c3:b3:e8:80:16:93:39:9d:12:40:8a:a9:bb:29:24:
         3f:59:84:bc:10:ac:f2:03:06:5e:2d:f9:7d:2d:43:9f:79:a9:
         d0:ef:b1:c6:fb:a3:c2:b2:60:6e:5f:92:8c:d0:6c:d3:bb:56:
         1e:b0:86:44:4b:11:fe:e5:ff:a1:72:e2:61:69:64:f3:f4:2d:
         ee:fc:ff:8c:bb:d6:43:4c:2d:6f:14:49:31:6c:40:38:6b:f0:
         7a:b9:e3:84:d6:21:cf:b1:e1:14:9f:07:01:91:b8:df:7b:bb:
         e9:8b:66:8e:ad:ba:c5:51:09:59:6d:6e:54:ae:d4:a4:63:f6:
         de:a2:cb:b4:de:7f:d9:dd:73:d7:d9:45:dc:2a:14:a7:10:ba:
         00:18:f7:72:14:e1:46:0b:11:21:96:47:67:55:b1:1c:01:18:
         40:df:78:da:e9:34:1c:43:51:87:08:e3:ad:4c:a5:3d:7d:7e:
         ae:18:a5:6d:d4:3d:b8:3a:63:f9:d5:77:41:68:6b:c2:3d:71:
         35:07:0c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:50:55 2026 by rpki-client