Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c00ee110-9782-449a-a4e0-6b2a6ceffa21.roa
File:                     c00ee110-9782-449a-a4e0-6b2a6ceffa21.roa (raw, json)
Hash identifier:          YheW9Ev4rJGXhR0526kC7fSU+sc6RPmw72Z/ERcuSRI=
Subject key identifier:   31:79:B9:D8:88:0B:69:E6:A1:01:F4:F7:3D:76:DE:10:FE:EF:E6:B4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       08B58D438A146DC66FB0459E5B97FE5582AE7013
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c00ee110-9782-449a-a4e0-6b2a6ceffa21.roa
Signing time:             Sat 28 Feb 2026 00:20:09 +0000
ROA not before:           Sat 28 Feb 2026 00:20:09 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        182.28.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b5:8d:43:8a:14:6d:c6:6f:b0:45:9e:5b:97:fe:55:82:ae:70:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 28 00:20:09 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=2464612a78e734f84fdaecb721812cac3996fb593b65aa7a13df5b405d42ea5f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:be:b3:f5:f6:30:df:01:75:0b:b1:73:c7:11:
                    fd:0c:54:24:5e:93:73:1d:41:dd:3f:69:c8:d4:f2:
                    19:03:f9:d7:d0:27:fd:c0:63:d1:1b:5a:68:28:97:
                    f0:18:7e:b1:0a:9f:9d:74:0e:d3:a6:74:f1:18:0f:
                    fa:df:25:a0:fa:af:53:0f:2c:69:fc:d9:56:b9:c8:
                    95:f5:f5:7e:c9:c8:06:f6:87:1d:67:3b:a5:52:cf:
                    f7:2e:55:e6:4a:32:45:1b:fd:06:fd:47:56:3d:1a:
                    cc:5b:55:55:44:05:f0:75:84:c7:cb:e3:07:ec:71:
                    e0:79:02:e3:ed:b1:ad:12:56:95:1f:b2:5d:12:82:
                    fd:c4:f8:b3:eb:47:b9:d8:68:8b:51:8f:db:5a:00:
                    62:fe:02:55:e7:2b:b1:4f:10:39:78:d7:b1:3c:fb:
                    1b:b8:f8:75:fb:04:13:9f:b3:92:b2:81:05:96:85:
                    8f:99:c9:71:2c:a8:d5:9e:46:26:73:8b:77:06:32:
                    b7:82:0f:de:e8:43:c5:97:20:dc:eb:1d:37:e3:28:
                    56:b7:51:ff:34:e0:ec:35:ae:64:c0:cd:0a:2c:8b:
                    58:4d:80:bd:e0:98:f9:78:19:02:65:59:3c:ea:ec:
                    a0:5a:51:59:0b:da:49:e2:88:68:84:b3:34:e6:9a:
                    fa:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:79:B9:D8:88:0B:69:E6:A1:01:F4:F7:3D:76:DE:10:FE:EF:E6:B4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c00ee110-9782-449a-a4e0-6b2a6ceffa21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.28.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         43:ed:a5:6b:3a:11:87:9f:a2:ba:18:a8:e6:bb:f0:d1:d2:ad:
         a8:b9:87:4d:9c:1e:41:bf:f5:d6:cc:69:d4:07:ee:1e:5f:3e:
         92:9a:41:04:29:75:dc:40:d9:25:37:f0:5a:63:63:f7:d8:fa:
         d5:da:0e:f1:50:7f:f4:0d:1c:81:27:6e:07:ed:4b:df:a6:fc:
         a2:87:7f:85:0a:f6:ae:b1:4e:fc:cf:33:3f:a5:de:2b:16:ea:
         c5:ca:6c:96:19:03:39:3b:d0:fa:33:98:89:f8:65:cf:99:42:
         48:ed:ce:a6:17:1b:e0:4b:2c:ee:9c:63:71:73:5a:29:20:b7:
         71:25:b2:1f:b8:51:92:6a:b2:67:40:8c:f1:40:3f:cc:9e:2b:
         7a:c1:aa:4e:16:60:9d:16:8e:96:33:4a:96:5a:2b:c0:a6:a9:
         bd:a1:29:f9:8b:ce:b3:01:e7:e5:8e:a5:ba:27:76:49:10:76:
         34:0e:25:43:02:1d:df:46:84:d0:20:d7:ee:43:ba:55:e1:a8:
         a7:7e:99:24:13:9f:13:77:9e:e1:ad:87:27:e4:17:70:cb:be:
         2d:fc:47:d6:66:9e:58:d3:e3:7e:67:5a:df:c2:60:f1:16:05:
         2e:39:e9:e0:b6:01:12:99:30:46:76:14:9c:32:8d:1d:86:d1:
         6b:db:53:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:51:44 2026 by rpki-client