Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b397d45c-b1e5-4ff4-ba96-1f1c1039ca3b.roa
File:                     b397d45c-b1e5-4ff4-ba96-1f1c1039ca3b.roa (raw, json)
Hash identifier:          x1xIRMVKVy+c/iuG8TcgLr1IjTANBVYeLOtTFw3JmSE=
Subject key identifier:   79:D0:23:EC:0D:57:74:44:12:0C:6B:0A:BA:4C:6A:F2:BB:08:07:5D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7EB4A2B25B7FEDDFFD2EEEF01F8DE69DFD6DA4A4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b397d45c-b1e5-4ff4-ba96-1f1c1039ca3b.roa
Signing time:             Fri 13 Feb 2026 01:20:13 +0000
ROA not before:           Fri 13 Feb 2026 01:20:13 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        13.154.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b4:a2:b2:5b:7f:ed:df:fd:2e:ee:f0:1f:8d:e6:9d:fd:6d:a4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 13 01:20:13 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=d6d6e1aaeb219942981677c181322ece2ca35e25369f76009867ae9440a29f44, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2a:28:33:7b:f8:10:0d:38:38:8f:21:d1:fa:
                    a3:b4:00:28:cb:5a:97:07:f6:94:77:ae:40:b9:09:
                    02:0d:3e:2e:0c:be:2a:1e:1f:57:45:a5:74:78:32:
                    6e:bc:8e:cb:e1:d7:20:bc:72:35:79:eb:47:db:5a:
                    8e:81:36:79:6e:3a:ff:16:6d:91:8f:b8:f8:9c:07:
                    de:a5:ae:26:d2:7c:1a:09:a4:0f:14:bf:7c:c1:30:
                    dd:8d:43:e0:5f:cf:58:47:5d:bb:db:7e:f3:4d:99:
                    1b:df:be:8a:c4:22:a6:d9:b3:e8:b8:ec:46:cc:ea:
                    d4:fb:fa:76:a9:b5:13:30:50:77:ca:78:6c:33:50:
                    e0:e1:08:51:ca:25:28:cc:8b:fe:16:cf:3c:ac:05:
                    63:5c:30:e3:c5:92:c9:bd:fd:53:a1:2b:e4:3b:10:
                    66:4b:93:a5:dc:f3:26:02:98:e2:d3:e2:1c:7c:c0:
                    b4:a8:8e:b4:74:cf:9a:dc:43:2a:af:6b:78:74:48:
                    a9:67:17:fc:c3:c4:31:23:84:8e:cb:62:5c:49:f8:
                    e6:a2:0e:45:aa:30:72:7d:51:bf:79:1a:8e:d6:08:
                    0f:9b:3b:3e:e3:cd:ee:9e:f3:e4:09:43:bb:a6:0c:
                    61:e6:88:6c:5e:0d:b6:44:7b:24:3e:5f:db:b8:4d:
                    29:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D0:23:EC:0D:57:74:44:12:0C:6B:0A:BA:4C:6A:F2:BB:08:07:5D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b397d45c-b1e5-4ff4-ba96-1f1c1039ca3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.154.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         40:31:63:23:69:69:76:d1:89:b3:f4:28:d1:d3:9e:bf:ae:50:
         1e:4f:ec:29:61:51:01:0b:1a:50:6e:c9:ce:e1:30:2a:fe:5d:
         b5:df:d3:ba:77:aa:30:74:a8:bb:d5:2d:46:13:46:23:e6:15:
         08:b2:c0:c4:51:61:e5:2a:52:85:d0:b1:6d:7d:f1:0a:ad:8b:
         15:74:d3:a8:49:bc:d9:c3:58:85:51:b2:93:28:ed:32:fe:1f:
         67:0e:23:8a:45:b8:bc:d9:50:95:29:25:8d:d3:f0:8a:e8:cf:
         58:04:da:13:42:cc:b3:2c:21:fe:9a:8c:a9:6a:8b:28:a4:ee:
         f6:fe:94:28:8c:f5:23:ff:e6:34:8e:31:9e:22:fd:32:fd:07:
         7a:5b:cc:7f:78:c5:4b:e1:83:7c:39:f5:cc:37:55:00:90:f6:
         43:0e:94:30:87:89:e0:62:5f:8e:d3:bc:5e:aa:f1:6f:1c:15:
         3e:24:a7:2f:7f:8a:dd:10:c1:c2:b7:2f:48:de:46:76:76:ef:
         81:7a:7f:65:1c:90:99:39:2a:c5:c1:e0:62:37:1d:98:10:e3:
         75:e0:d9:14:31:04:48:79:66:4e:0e:52:74:3f:01:a8:86:74:
         ab:47:7e:e7:ae:36:de:9b:d0:2f:ea:39:30:91:ad:c1:32:21:
         1a:f2:a8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:06:28 2026 by rpki-client