Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c682c81f-6a33-446c-bc7b-043a53185457.roa
File:                     c682c81f-6a33-446c-bc7b-043a53185457.roa (raw, json)
Hash identifier:          QWV/P5JToc0lTCRlSVIRlEPgNxj81A6RNijm7YPywCc=
Subject key identifier:   68:71:7E:E3:DD:D1:37:C9:2F:0F:03:53:FD:1B:16:0C:5C:D5:61:C8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2EE913B15A36FC3666D0665809DB1B195976BC5F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c682c81f-6a33-446c-bc7b-043a53185457.roa
Signing time:             Tue 17 Feb 2026 08:06:37 +0000
ROA not before:           Tue 17 Feb 2026 08:06:37 +0000
ROA not after:            Mon 18 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.52.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e9:13:b1:5a:36:fc:36:66:d0:66:58:09:db:1b:19:59:76:bc:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 17 08:06:37 2026 GMT
            Not After : May 18 23:59:59 2026 GMT
        Subject: serialNumber=1121a8d8e53b9b3175a21af480d2633dc54fb6eba9aa77b53232aa81fa4e6cca, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d0:98:c3:b8:b9:8d:af:b3:b8:4e:83:63:e9:
                    45:dd:1d:8b:f0:27:b1:2b:da:33:28:67:80:c2:0c:
                    21:80:9f:47:dd:b2:21:0d:a1:28:5c:87:e6:fd:a0:
                    52:2f:a0:03:ed:25:60:b6:c5:40:d0:f7:7d:b9:0e:
                    96:ec:c1:41:7b:48:0a:97:b0:56:52:f7:1d:d6:05:
                    4e:22:dd:07:75:29:38:60:7d:2d:89:8a:4c:fd:a0:
                    9e:09:be:51:af:e4:1a:5b:d3:f7:76:74:38:e4:43:
                    41:8d:0d:aa:39:ae:e2:8d:62:89:ca:ed:14:c9:9e:
                    e3:4b:85:15:e4:32:6e:4a:d0:84:6d:22:28:1e:fa:
                    ff:2e:2d:32:49:fe:d2:e8:52:75:99:bf:f3:eb:7c:
                    9a:d3:61:ae:30:75:d0:35:e0:d6:1f:a1:2b:fd:2c:
                    9d:92:cb:64:70:5e:57:8c:00:91:c9:9d:3b:22:be:
                    bd:3b:dd:e1:28:09:09:1b:26:56:0f:8d:64:09:45:
                    d4:15:c6:f5:ed:14:ca:49:01:7c:ab:a4:a9:cd:92:
                    d2:74:57:b7:af:b6:49:96:37:d9:5e:a4:5d:e7:f7:
                    16:a0:b6:e3:67:f1:cf:55:97:8b:0a:a4:58:70:b4:
                    77:89:bd:f6:87:50:e3:c5:47:8d:93:0f:ec:84:02:
                    aa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:71:7E:E3:DD:D1:37:C9:2F:0F:03:53:FD:1B:16:0C:5C:D5:61:C8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c682c81f-6a33-446c-bc7b-043a53185457.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.52.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:96:27:2b:f6:e4:99:bb:0b:c6:c6:8f:8f:00:00:fd:fa:d0:
         0d:5e:ca:13:42:85:28:b0:8c:41:14:5a:0d:66:b5:cc:c3:28:
         c1:b0:d9:5d:c0:ce:40:4e:29:d3:d5:be:65:26:a5:df:2b:03:
         3f:21:2e:f1:a7:ad:d3:9c:da:3b:13:2a:cb:53:d1:b7:ef:10:
         bc:10:5d:81:a7:c0:e9:3e:95:b9:06:be:bb:c1:85:43:bc:84:
         b6:b8:c0:55:f8:e1:3e:76:d4:c4:54:89:59:6b:e7:13:24:4e:
         4b:2e:90:f0:56:63:c0:4f:22:75:0f:c5:6e:70:72:9f:d8:17:
         b7:46:c0:a4:d7:2f:7b:55:3f:5c:6d:65:76:59:ca:e7:be:2c:
         b3:b2:d7:70:29:9b:96:12:8c:39:b7:52:cb:e9:77:4d:2d:f7:
         c8:4b:ae:70:fa:c3:38:85:08:54:78:d3:b5:c9:25:1d:24:23:
         7f:9a:75:2b:39:e8:81:f0:e8:42:00:86:c8:4c:3c:da:39:ac:
         05:70:49:0e:47:14:78:05:f0:3e:1c:1f:a6:1e:8f:e3:0b:06:
         68:bf:a0:87:78:fc:fd:3a:b0:88:cc:01:d5:7e:1e:c1:de:12:
         85:1d:7e:2f:ae:4b:2f:a2:39:9e:14:63:f6:9d:75:c2:2e:e6:
         4e:09:c8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:01:18 2026 by rpki-client