Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6994578-2d48-4426-8ebb-7657049c78ef.roa
File:                     a6994578-2d48-4426-8ebb-7657049c78ef.roa (raw, json)
Hash identifier:          eGcmyx1zN5rPz6cigcpS3xiFvtMDizW3BGqb4FMnktU=
Subject key identifier:   4E:39:20:36:50:22:73:26:C3:2E:0E:6A:27:D8:43:9A:BA:2C:D5:A7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0529C43EF40161C0A22CFF5C07F0A99DA76BA27A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6994578-2d48-4426-8ebb-7657049c78ef.roa
Signing time:             Wed 18 Feb 2026 00:11:14 +0000
ROA not before:           Wed 18 Feb 2026 00:11:14 +0000
ROA not after:            Tue 19 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        69.0.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:29:c4:3e:f4:01:61:c0:a2:2c:ff:5c:07:f0:a9:9d:a7:6b:a2:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 18 00:11:14 2026 GMT
            Not After : May 19 23:59:59 2026 GMT
        Subject: serialNumber=09d7d4b669c0d874a6ea279b77f9052c3e0255bf87ae61abdf72ddfe1e40a0d2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a5:37:87:9e:f1:92:58:76:8f:ca:f6:7f:60:
                    9c:b1:a5:49:da:2e:f8:84:d2:72:3a:ec:e5:04:37:
                    51:d1:ec:db:8d:aa:34:df:6e:9c:91:96:cb:75:89:
                    3d:66:d6:6e:18:f0:1e:9a:c7:88:89:3d:a2:1a:34:
                    f0:ae:85:0a:21:57:8f:2c:5b:9c:2f:9b:f4:bd:2a:
                    d0:df:1e:21:7e:87:94:b9:2b:2c:6b:d4:06:ba:86:
                    a3:e9:69:39:0c:79:f3:3f:c6:db:99:99:88:14:81:
                    93:9f:a4:32:72:91:3c:97:f1:58:98:e4:02:cc:a9:
                    e3:31:09:1b:8f:fa:0d:7d:d3:44:1c:ca:40:9e:8a:
                    25:6a:88:93:7b:21:d0:48:67:30:0f:2c:e4:c0:36:
                    3c:54:bd:5a:07:83:57:62:a9:83:ed:1d:3a:24:22:
                    b7:50:40:38:01:9a:87:b8:3b:37:91:d2:44:fc:e8:
                    36:1c:49:35:00:fb:f5:bd:10:74:db:8a:1c:cf:76:
                    cd:af:85:ef:4b:54:2e:95:fa:68:0b:a8:ba:ac:c3:
                    cb:86:47:7c:2c:04:bb:01:2d:3b:5b:06:c7:77:cf:
                    bc:e3:8d:ad:df:f4:a4:9f:bd:3b:6f:9c:55:a6:bf:
                    58:4d:15:b4:ee:64:ef:4f:36:c1:bd:c3:50:5f:46:
                    20:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:39:20:36:50:22:73:26:C3:2E:0E:6A:27:D8:43:9A:BA:2C:D5:A7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6994578-2d48-4426-8ebb-7657049c78ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.0.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:f4:d4:1b:d5:76:1e:06:92:9e:ae:af:a2:dd:e4:5f:8f:c6:
         a9:15:e8:6c:76:08:7f:a8:e8:3d:7e:2f:08:c2:79:97:88:05:
         6c:49:77:56:ba:b3:64:69:7a:7b:d6:fc:93:4f:31:81:14:99:
         dd:e4:98:56:02:18:63:8a:4a:ab:7c:60:c8:4f:84:99:6f:63:
         34:61:23:b7:d9:73:5f:38:59:ff:20:73:36:32:a2:2a:92:5a:
         58:91:e5:83:27:6d:f3:5c:f4:94:30:f8:99:ea:39:a2:a8:67:
         a6:cc:82:55:60:4f:36:44:ad:8a:57:12:dc:81:e5:82:82:e7:
         e5:0a:00:8d:13:2d:bf:2e:57:63:f7:f7:f5:3c:17:f2:66:ce:
         53:70:de:a8:50:3f:cb:67:0c:f4:8c:d6:05:5d:ed:56:ed:e8:
         dd:ef:74:18:a6:25:11:96:55:e5:ad:8f:07:c3:aa:cc:5a:35:
         9d:6f:89:66:0c:3f:ed:ed:d5:01:ca:ea:90:e6:af:40:f1:d5:
         01:e8:26:a4:55:6f:0d:5b:7e:98:89:93:2d:2f:f8:ba:9c:b8:
         ed:cb:9f:2d:1e:73:4d:f9:41:f7:ab:d1:df:4c:ad:20:59:17:
         b9:dc:b7:b0:19:63:57:69:6f:c7:a9:4f:d7:1b:5b:72:b3:1d:
         bd:df:f0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:34:47 2026 by rpki-client