Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3c7f799-6c54-4ca8-97cc-3e7125ce4e58.roa
File:                     a3c7f799-6c54-4ca8-97cc-3e7125ce4e58.roa (raw, json)
Hash identifier:          BwwfrI1KiQl8g+HTBCyAcQj04UuTuvgFGMb6JPD0b5I=
Subject key identifier:   72:7A:F0:C1:7D:09:F2:20:8B:05:67:C6:8D:BF:12:CE:C5:4A:C9:E5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       75C74C77971AB32B776100F72233ECED0C76E616
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3c7f799-6c54-4ca8-97cc-3e7125ce4e58.roa
Signing time:             Fri 13 Feb 2026 01:21:00 +0000
ROA not before:           Fri 13 Feb 2026 01:21:00 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        209.162.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c7:4c:77:97:1a:b3:2b:77:61:00:f7:22:33:ec:ed:0c:76:e6:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 13 01:21:00 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=2ef2d91789e8bdf17cca59c08aa8f76ef0829f4a4433f6d0bb52794236ba16c7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:da:ec:be:1f:6d:0c:d1:6d:56:d9:c7:a9:df:
                    c1:f3:cd:a3:97:33:7d:9c:5b:5f:fe:1f:2b:35:54:
                    1b:ea:04:32:74:57:ec:22:5e:94:91:4e:c6:41:3c:
                    df:6a:e2:a2:29:25:52:78:75:84:5d:65:f2:44:c8:
                    47:87:94:77:2c:b2:2b:49:08:59:5e:48:f6:92:75:
                    51:b3:e8:9d:10:59:1a:0a:66:fe:9f:a4:2f:c9:1e:
                    8d:b3:d9:73:f9:9a:5c:f2:bd:d8:b4:58:78:ae:b9:
                    15:8c:57:c4:c0:df:3c:ec:09:21:25:b5:2f:99:86:
                    b1:00:d7:c1:2a:ef:0c:2c:90:ba:f0:5e:ed:11:a9:
                    1e:10:89:b7:c7:56:5a:7d:d2:ae:46:34:23:75:15:
                    bf:1f:d2:1f:1f:e2:95:29:2e:e2:bf:53:f6:ce:7c:
                    98:1d:f3:92:23:c0:9f:90:dc:21:02:72:5f:eb:fc:
                    2c:1b:ee:6d:a4:28:46:74:f3:40:11:30:62:26:91:
                    51:6e:7e:bc:ce:19:df:04:f0:51:ba:e8:6b:62:c2:
                    f8:d1:8d:3e:3e:e1:b6:e3:64:33:88:5e:3d:22:5c:
                    b0:c1:08:06:69:5f:6b:d4:88:c8:dc:58:65:42:98:
                    d3:d3:dc:eb:bb:0e:67:11:e7:4c:ee:b5:ed:88:38:
                    7e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7A:F0:C1:7D:09:F2:20:8B:05:67:C6:8D:BF:12:CE:C5:4A:C9:E5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3c7f799-6c54-4ca8-97cc-3e7125ce4e58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.162.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a4:1b:fc:b2:28:66:95:7f:77:84:b8:1d:23:9f:4e:96:cc:f5:
         8d:f6:6e:5d:9a:e2:8b:58:2f:b2:f7:c7:6e:59:51:9c:3b:b6:
         cc:d6:c5:2d:9f:ea:be:49:15:e0:f1:2a:ce:3f:66:2d:8c:a2:
         d0:ba:63:58:7e:3a:8f:87:1a:5e:e4:43:a2:dc:0d:15:5f:29:
         0a:85:80:fb:72:52:1f:ab:d4:7e:f7:d1:ee:09:ea:e3:0d:10:
         41:71:59:2d:2a:d1:67:10:c0:f3:9a:c8:cd:8a:99:b3:55:0a:
         27:35:b6:db:95:50:bb:f2:81:0a:8f:cf:85:9b:9e:e8:61:9e:
         8d:e0:cd:e3:e3:4e:92:22:56:d3:09:78:0d:7c:59:de:63:93:
         86:e2:65:d8:95:3e:56:c1:4c:4a:89:89:96:37:f4:6d:30:00:
         c4:3d:79:4a:3d:10:c2:8d:37:86:95:2e:5a:22:96:2c:93:cc:
         cd:8b:27:99:27:f0:35:86:89:32:27:de:97:06:70:3a:0b:37:
         5f:3d:e2:dd:04:bc:ff:1d:a5:e5:83:32:8d:62:a4:ca:9c:96:
         08:37:4a:09:4c:5e:fe:6c:04:88:d6:42:7e:d7:ce:92:2a:f6:
         d0:98:67:5c:56:de:97:41:4a:24:a1:4c:c2:97:9e:73:8d:66:
         18:cf:7c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:05:32 2026 by rpki-client