Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2b618a0-430d-4d27-abca-4e06f4648926.roa
File:                     c2b618a0-430d-4d27-abca-4e06f4648926.roa (raw, json)
Hash identifier:          i1oc4I5t92f4eboPiITpsoOMM5Qhpug55jr5FZgFZEo=
Subject key identifier:   AF:D0:EB:9C:74:87:71:B7:E1:DD:F9:87:56:01:07:B8:8B:9D:50:F0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6D08DFBFA4EF679698EFD928697756D37DF2A36F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2b618a0-430d-4d27-abca-4e06f4648926.roa
Signing time:             Tue 10 Feb 2026 00:31:09 +0000
ROA not before:           Tue 10 Feb 2026 00:31:09 +0000
ROA not after:            Mon 11 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:08:df:bf:a4:ef:67:96:98:ef:d9:28:69:77:56:d3:7d:f2:a3:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 10 00:31:09 2026 GMT
            Not After : May 11 23:59:59 2026 GMT
        Subject: serialNumber=b7659ab43ac3ec94ea8952f80b8df63327cfc34b0bee2cda85734b343ebf46cf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f6:0f:80:ab:ac:e8:2a:fd:e1:f8:4b:35:05:
                    d2:0a:c1:3e:99:f6:2b:1d:90:36:0e:6c:4f:b0:68:
                    2d:41:4b:1f:58:ee:4a:ad:e5:86:77:a1:c8:26:76:
                    ed:eb:61:6c:ef:8e:1a:1a:58:ac:0f:99:4b:01:55:
                    40:1b:13:97:ad:b8:e5:37:74:37:b4:68:22:08:1c:
                    25:d1:93:d0:8e:17:7f:ac:12:6b:03:68:b7:2d:7e:
                    aa:11:2f:d6:8d:7c:10:5c:9f:04:d7:76:f3:49:9c:
                    69:33:de:d6:f2:5b:9b:04:91:8b:24:9e:0a:00:5d:
                    ef:20:28:6a:a0:91:70:d3:ac:1f:b1:24:7f:b9:5e:
                    98:6f:2a:d6:e7:1a:7a:b6:db:e9:fc:b1:bc:1b:e7:
                    0a:2b:40:d9:a0:03:e2:05:92:2c:1a:c2:00:70:bd:
                    e4:bd:1f:5b:21:43:3b:3d:97:3f:52:d4:ae:9b:76:
                    a1:3c:45:f1:99:10:0d:2c:e9:5a:3c:1c:c7:4e:95:
                    b1:8d:40:35:e0:2f:4b:54:39:c5:74:da:aa:d0:13:
                    9b:6a:57:3c:88:6e:2f:0f:6d:96:ed:dd:c8:b0:6a:
                    97:15:a2:2e:2e:04:02:95:ce:ba:5a:c7:77:78:8a:
                    d5:58:29:b7:59:86:c0:dd:8c:27:9d:07:9c:6f:f9:
                    6f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D0:EB:9C:74:87:71:B7:E1:DD:F9:87:56:01:07:B8:8B:9D:50:F0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2b618a0-430d-4d27-abca-4e06f4648926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:9a:8d:4b:05:ea:2a:4e:5a:66:7d:09:20:7f:39:9f:cd:b7:
         5f:d0:06:7e:da:a9:88:81:34:59:83:29:4c:73:d0:56:f4:72:
         d3:7b:56:17:f2:32:e8:75:da:8b:cf:a5:d0:62:d8:9d:8c:d7:
         91:e0:b9:a5:35:ff:48:7c:d2:ca:39:78:eb:2c:74:5c:03:65:
         15:d4:05:71:8e:be:c5:25:28:d8:60:17:68:9a:f2:fa:41:69:
         85:e4:b5:0e:af:45:03:20:09:4d:2b:75:1b:f3:ff:e6:cb:47:
         bb:6e:a3:f2:e7:13:05:f1:38:87:dd:36:a5:39:f8:2f:c9:3e:
         f7:00:d3:63:94:29:9f:a9:9e:31:f5:9c:e8:5a:de:63:61:07:
         3d:b9:f4:f8:78:d0:a5:4e:d5:1a:c1:4d:89:5d:04:11:2c:f6:
         7e:42:bb:8a:ba:0c:ec:15:9f:86:15:d0:2e:1a:b9:cb:09:eb:
         8e:a5:86:01:14:74:5a:3c:1a:5d:33:e7:a4:94:c9:3b:95:59:
         b6:33:64:84:1d:e4:ba:32:66:77:26:a6:e6:eb:35:f8:61:4a:
         4f:51:95:c2:95:e6:16:d2:3a:55:f9:50:08:fa:74:ca:08:ea:
         c9:d3:e7:2f:6a:84:63:08:a1:21:24:f9:f0:97:ab:40:90:c9:
         54:0b:24:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:15:33 2026 by rpki-client