Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d514f93c-3d1e-4f12-90bf-7988de3178c5.roa
File:                     d514f93c-3d1e-4f12-90bf-7988de3178c5.roa (raw, json)
Hash identifier:          c+kl80L+5NUjMnVdwbfk4eJptEPuu+fmTLbet13F9Nw=
Subject key identifier:   BF:03:56:4D:5D:4E:08:E2:01:84:E3:35:C7:A5:0E:04:74:E0:7D:23
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7F72269A95F6E5E547134B014813034EED8A8D10
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d514f93c-3d1e-4f12-90bf-7988de3178c5.roa
Signing time:             Fri 13 Feb 2026 00:30:51 +0000
ROA not before:           Fri 13 Feb 2026 00:30:51 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        24.110.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:72:26:9a:95:f6:e5:e5:47:13:4b:01:48:13:03:4e:ed:8a:8d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 13 00:30:51 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=d598f2f530f63593b89a8e75c76606d62ae19c49d0cfbe7159a07b2234a1f07d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e8:31:6a:47:d0:8a:ba:71:7b:61:85:fc:96:
                    cf:d8:70:ee:97:5d:fb:fc:2c:d8:fc:04:59:21:a7:
                    c5:28:fc:bf:46:77:1f:87:5c:54:aa:0f:b0:1e:76:
                    d1:dc:97:45:d7:ae:5e:30:d9:8f:e8:23:87:8d:ce:
                    6a:8b:89:3e:37:93:a3:21:dc:c0:4b:62:5c:99:50:
                    b6:f4:98:8a:b7:74:c4:71:f1:23:e9:87:74:d9:07:
                    ec:f0:7f:08:02:eb:f2:ae:55:fe:d2:b6:c8:33:b1:
                    8b:05:31:93:75:01:63:17:1c:6a:df:2a:a6:03:a3:
                    4d:0a:dd:e4:2d:ce:04:6e:8a:4b:38:29:13:e9:a9:
                    06:f9:a9:12:44:c3:20:75:3a:ac:25:2e:b3:1b:64:
                    aa:bc:81:ad:f9:39:e5:84:4b:bd:6f:3a:69:ba:e9:
                    f5:81:4a:c7:38:81:4b:a5:92:72:bf:72:9d:62:9a:
                    7c:9d:b5:d7:df:3a:5b:53:7d:bd:05:27:93:fe:02:
                    e2:73:dc:8d:ff:c4:9c:af:49:b9:31:16:de:8c:a7:
                    a4:9c:91:7c:db:77:e2:bb:d3:29:9c:4f:ba:1b:0c:
                    c7:77:65:8c:5b:1b:66:14:48:66:79:5e:c1:65:10:
                    a9:ca:55:77:0d:3e:96:11:5d:2e:86:58:34:20:06:
                    d2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:03:56:4D:5D:4E:08:E2:01:84:E3:35:C7:A5:0E:04:74:E0:7D:23
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d514f93c-3d1e-4f12-90bf-7988de3178c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.110.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         85:de:2b:b2:47:38:18:c4:98:a5:70:f1:bd:f5:a4:48:ef:e6:
         0b:d7:29:af:e3:68:e6:8f:5b:3f:5d:d1:cb:e9:8e:99:d4:41:
         d3:13:6e:4e:a4:b5:45:52:be:37:f6:4c:4d:08:7e:05:54:17:
         29:c6:6a:8c:7c:a2:9c:75:76:12:32:b9:23:a1:e8:d2:d3:2e:
         5a:22:7f:5d:07:80:ed:9c:32:58:fc:b0:4a:ab:be:ec:3e:31:
         7a:dc:e8:8a:0f:2f:85:b4:6a:06:20:70:09:64:68:44:fc:46:
         eb:07:a3:84:ee:07:ad:c8:c8:c6:11:62:9a:0c:00:e8:3c:1d:
         c9:d1:e6:86:08:56:74:62:cb:18:ac:77:98:95:62:a9:69:ca:
         73:92:8c:65:ff:00:b2:db:9d:44:fb:bb:68:5f:bb:7e:c8:13:
         25:96:39:6f:b3:65:ee:73:ee:86:fa:3e:86:44:8f:35:20:bf:
         ea:16:6f:c9:d8:2e:fb:15:51:46:2b:68:c8:fd:eb:d1:7e:4b:
         6f:41:bb:fc:c9:bd:06:06:bc:9c:15:9a:3e:3d:dd:87:64:45:
         91:db:53:22:b1:28:6f:e9:46:9e:f4:e7:a9:8d:2d:7a:38:e5:
         08:ec:f7:3d:f6:e7:2a:5f:4a:58:10:7a:7e:e5:45:56:52:4b:
         f2:3e:dc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:32 2026 by rpki-client