Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e214b9c9-8b1e-436f-a485-5479e119eac5.roa
File:                     e214b9c9-8b1e-436f-a485-5479e119eac5.roa (raw, json)
Hash identifier:          yo3pZ7zPlQmmc9xsJfBiUA7JIJIUaQqgXAw15gVuiks=
Subject key identifier:   7A:9D:FE:FB:88:CB:79:F7:D6:79:37:51:42:96:EC:B9:22:7B:6C:76
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       282D1603660D47AFD18B1E7BD50E2CA4C9178992
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e214b9c9-8b1e-436f-a485-5479e119eac5.roa
Signing time:             Sat 14 Feb 2026 00:11:36 +0000
ROA not before:           Sat 14 Feb 2026 00:11:36 +0000
ROA not after:            Fri 15 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        184.73.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2d:16:03:66:0d:47:af:d1:8b:1e:7b:d5:0e:2c:a4:c9:17:89:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 14 00:11:36 2026 GMT
            Not After : May 15 23:59:59 2026 GMT
        Subject: serialNumber=32d051cb703db17d710afc932be61bd62852b4b9a8c6968494c5d357a18e787c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7e:2a:91:93:47:e2:e5:45:82:71:9c:6e:45:
                    96:fb:9e:37:45:c7:dd:47:99:a7:18:53:bd:27:c0:
                    b5:57:ff:89:3f:b9:db:ed:52:51:c7:46:83:ba:bc:
                    d0:73:6b:dc:b8:45:02:86:aa:a2:22:ad:ad:97:70:
                    70:1d:1e:d7:2b:69:48:e8:93:52:9f:3e:1c:c3:9f:
                    9b:a4:5f:eb:e5:20:dd:91:f0:73:39:69:10:d9:fd:
                    68:ca:3b:3d:d7:c8:ba:da:6e:8d:64:d4:a6:73:57:
                    16:27:9b:7a:4a:e5:69:1b:c0:2a:47:40:52:72:68:
                    b2:37:aa:65:88:95:ba:e2:ca:f4:10:51:e2:64:31:
                    be:e9:dc:7e:db:06:e7:e5:bc:09:88:8b:cc:b3:9b:
                    1b:f6:bb:1d:fb:40:45:c1:89:0c:6d:ff:0e:83:a8:
                    21:aa:da:cd:b4:d5:35:7a:4b:c9:de:f6:34:2e:a4:
                    31:fc:1b:07:23:dc:fb:34:5d:bd:22:21:ed:cf:cf:
                    b3:55:ec:d2:6b:2f:1d:1e:93:59:7c:ba:a9:d0:9a:
                    a6:58:74:35:2f:99:fc:48:86:7d:2f:a7:b9:33:71:
                    f8:c4:00:f2:2a:a4:d9:c4:23:00:5a:8d:df:c9:a4:
                    99:bb:1d:29:93:b9:07:03:4c:dc:a5:d0:b2:12:5b:
                    c8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9D:FE:FB:88:CB:79:F7:D6:79:37:51:42:96:EC:B9:22:7B:6C:76
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e214b9c9-8b1e-436f-a485-5479e119eac5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.73.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0b:2f:9b:e2:cf:c9:0c:e2:19:af:5a:da:3b:ed:c9:eb:c0:06:
         71:12:a3:66:e4:ad:55:8e:c4:ce:63:a5:65:73:bb:2b:95:1d:
         8d:db:26:26:b7:23:55:21:b3:7a:4b:bf:53:aa:4e:63:19:82:
         2c:d6:41:bc:ea:1a:7e:7b:88:69:a8:96:22:5d:9f:ec:8f:68:
         fd:9a:e1:19:a3:e2:43:c8:04:fb:be:3a:f3:b9:ba:e8:75:c3:
         f7:87:53:42:a0:68:9f:fb:a1:c2:fa:e6:b4:30:2e:37:6f:ae:
         55:93:25:ad:fb:8a:30:b3:88:8d:f5:c1:88:ff:f4:4a:ee:bf:
         de:33:fe:f3:e9:b4:1d:02:c3:4c:c6:4b:9d:ad:c8:ab:d4:74:
         05:65:ea:f1:0c:1f:10:f9:cf:b1:00:57:ed:cd:aa:fb:18:0b:
         2d:8e:cf:5f:8e:c1:35:92:0d:b1:da:f0:b0:6d:cd:a1:9c:66:
         1c:4f:33:e1:08:99:28:a9:0c:02:70:01:3f:0d:99:b5:72:f4:
         bb:20:c2:ac:f3:6e:fc:a4:26:28:8d:d0:4c:57:cf:4a:18:8e:
         91:d7:cf:ce:87:9b:fa:3a:87:59:46:c9:91:9d:fd:38:1f:9d:
         4e:20:c7:b1:4f:ae:d2:87:68:26:66:6a:50:d3:c7:a4:d0:ea:
         5b:25:88:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:08 2026 by rpki-client