Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abfa8cec-4fb4-41fa-9101-2f83a4c46bbe.roa
File:                     abfa8cec-4fb4-41fa-9101-2f83a4c46bbe.roa (raw, json)
Hash identifier:          DvCd6R6vFhBlN/KQV75ZPpfHy/RN4UK2wJ8n1xqf4JQ=
Subject key identifier:   72:0B:CB:FB:A8:DC:56:73:31:F8:5E:56:2C:14:B2:DA:44:42:1D:73
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       104D2167153E0A0F059542097CE322B977400DDB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abfa8cec-4fb4-41fa-9101-2f83a4c46bbe.roa
Signing time:             Wed 25 Feb 2026 02:31:15 +0000
ROA not before:           Wed 25 Feb 2026 02:31:15 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        40.35.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:4d:21:67:15:3e:0a:0f:05:95:42:09:7c:e3:22:b9:77:40:0d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 25 02:31:15 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=bd41fd0137439b5da94d0c5c0883c599e107e800af4ea53b3f9caec836562792, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c4:6c:d1:c6:0e:87:e6:38:2d:8a:28:5b:4f:
                    66:91:25:16:68:ab:e8:b9:35:5f:6d:76:20:d9:62:
                    ee:df:ac:2f:29:76:b4:8c:14:d9:c3:c7:bc:2c:61:
                    5f:a0:c7:ab:f7:12:97:70:88:49:c4:33:71:3e:c0:
                    95:66:ac:2a:97:82:b3:9b:61:02:e9:fe:26:1d:b3:
                    7c:73:d9:5a:06:aa:84:76:7a:82:38:63:60:ca:d4:
                    d7:37:a0:3f:74:02:46:a1:15:b8:3e:61:16:8f:88:
                    d7:f4:53:75:80:8b:c7:0e:19:87:af:6e:98:91:5c:
                    b7:e4:f3:b6:e7:0f:39:d9:31:9c:13:ca:ec:16:bf:
                    f7:e1:8d:34:05:04:1e:d2:bd:b8:b1:7b:4b:ef:fd:
                    68:ce:c6:a0:84:f9:e9:c7:79:0e:ed:9c:92:90:30:
                    96:78:8d:59:35:a9:c1:e3:21:c2:11:b3:e7:b5:bc:
                    e3:97:2d:2e:bc:d3:ca:a3:12:09:15:d7:d5:a8:0b:
                    97:05:84:5f:0f:f4:31:79:7f:d2:9f:86:c6:29:59:
                    c5:75:2d:cf:86:9a:3b:12:41:0f:75:4f:5a:04:f5:
                    a7:7a:84:97:bf:49:8e:c7:36:a4:3a:c1:35:59:3a:
                    3a:b5:a3:9b:f0:a0:e5:a3:cb:ff:d4:a2:9b:d3:1b:
                    c1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0B:CB:FB:A8:DC:56:73:31:F8:5E:56:2C:14:B2:DA:44:42:1D:73
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abfa8cec-4fb4-41fa-9101-2f83a4c46bbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.35.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a6:c1:03:de:d1:63:19:55:af:1b:e8:ca:4f:29:68:f6:15:25:
         59:c3:03:71:e9:70:09:47:72:3f:c6:d9:7b:8f:c1:58:fb:ea:
         9a:27:c3:aa:bd:aa:56:34:d8:78:f7:f9:45:06:09:16:3c:f9:
         de:7e:33:4b:72:f7:ff:b8:16:83:5a:e6:f5:f9:f0:04:9f:0b:
         26:5b:f9:b2:08:35:ab:e0:c4:97:9e:0c:c8:d2:89:02:f9:be:
         79:49:03:f0:d3:f0:45:ab:71:d2:9d:6b:7a:9c:e9:6a:6e:19:
         2d:aa:6c:14:22:ec:dc:98:13:04:f0:a8:db:0e:9d:e7:6e:e1:
         df:67:6a:b7:0c:90:ea:2e:77:f4:bc:5b:ff:72:b0:82:8e:e1:
         14:0f:56:e6:aa:f1:3b:83:3a:33:fa:f0:ba:50:31:79:64:5e:
         1f:e9:47:47:08:1a:4b:ad:cd:53:3f:65:e8:ba:bc:78:fa:8a:
         4f:39:f4:fc:34:7d:63:fe:7f:64:2c:bf:50:13:af:e2:7c:27:
         e0:82:d9:65:9e:02:5e:5e:2e:09:4b:05:56:6e:6f:03:4f:0d:
         1e:70:d0:25:45:4a:6a:9b:a9:ef:7d:79:2d:8a:bb:07:8e:ec:
         fd:81:81:94:35:b4:f5:15:34:e8:e8:44:4b:46:89:03:6b:72:
         7a:7a:48:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:52:21 2026 by rpki-client