Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4ba4487-895e-4189-99e6-4440d5b19295.roa
File:                     e4ba4487-895e-4189-99e6-4440d5b19295.roa (raw, json)
Hash identifier:          NNHRp9TyWucIw4Ldc6ydC2fo6HvyM5x42k7VlUujK20=
Subject key identifier:   5E:23:70:FD:A0:34:C2:FC:02:C1:2B:C6:B6:4A:12:DD:91:FB:1C:CA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       272DF6E4C8D2EB5CB81F619F6C231B9167BFF404
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4ba4487-895e-4189-99e6-4440d5b19295.roa
Signing time:             Fri 13 Feb 2026 01:00:08 +0000
ROA not before:           Fri 13 Feb 2026 01:00:08 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        40.143.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:2d:f6:e4:c8:d2:eb:5c:b8:1f:61:9f:6c:23:1b:91:67:bf:f4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 13 01:00:08 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=68f7467176ababec3849900c1d49e65df8ae5fa04e1b8addf381140c6e6aad21, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1b:38:e7:69:d7:64:50:15:40:b3:61:bb:db:
                    cc:6b:d9:16:de:bc:ad:69:a2:39:cc:4f:4c:38:b5:
                    d9:5a:c8:f2:57:69:3a:17:2b:ae:ba:39:0b:0c:5b:
                    15:01:8a:d7:c7:a6:aa:68:20:f2:02:94:bb:16:f6:
                    41:17:a1:49:a2:20:2e:3f:27:38:73:88:fa:86:6e:
                    37:2e:5e:86:a7:54:69:91:f4:8e:a1:f3:27:b4:d5:
                    34:db:f8:bf:5d:01:2b:5f:ce:1c:b5:fe:25:eb:82:
                    b4:8c:cd:a1:6d:0c:fc:e2:b6:94:9a:ca:47:69:c7:
                    1b:b3:6d:84:61:72:d7:0e:89:da:91:b4:d2:e9:21:
                    cc:5a:aa:b0:76:59:bc:45:ca:d9:88:db:2f:27:8b:
                    5f:ca:42:80:bb:8c:b8:49:3b:c3:f1:46:00:27:88:
                    d7:0a:0f:6d:a2:77:27:15:fb:78:ce:74:e0:e8:be:
                    a2:e1:36:39:04:8e:d6:cc:91:53:42:8c:a4:2d:48:
                    98:be:83:28:e5:45:21:0f:fd:0c:6d:72:31:6c:10:
                    be:bf:de:c4:be:73:38:e1:4c:b5:cd:ab:06:94:15:
                    52:56:3f:3b:e5:0c:2c:7f:f6:bc:4e:cf:57:06:1a:
                    95:70:41:d7:01:c6:e6:a8:22:3e:18:3d:19:14:29:
                    ae:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:23:70:FD:A0:34:C2:FC:02:C1:2B:C6:B6:4A:12:DD:91:FB:1C:CA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4ba4487-895e-4189-99e6-4440d5b19295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.143.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c8:ba:ce:21:99:84:01:46:d1:24:b2:71:5a:81:9f:9a:68:7f:
         20:e3:b3:65:a4:ba:dc:99:b2:c0:eb:09:95:5b:01:5e:d7:f7:
         e7:18:f6:3b:30:34:18:9f:00:5f:93:90:4e:ef:1b:19:28:c3:
         fb:99:09:b2:4e:63:95:70:be:d8:26:f3:1c:05:f0:1d:75:2c:
         e7:d4:f2:5f:d9:81:ac:ab:3a:47:cc:f0:bb:8f:99:4b:7b:5e:
         f8:67:38:26:45:3d:2a:27:0c:eb:c7:56:e3:13:0e:38:63:f9:
         23:23:a9:2f:44:ad:b2:05:67:bc:eb:10:a0:73:7d:e7:b0:21:
         8a:ac:03:47:75:bd:44:cd:7a:d2:4d:3a:c8:73:49:7e:e3:20:
         9d:2d:4a:b3:52:99:53:55:29:5c:6e:37:74:d8:ce:21:41:2d:
         c8:44:13:58:8c:09:15:a6:4b:a6:ce:b4:c9:2d:21:6d:9a:7b:
         fc:aa:4a:e9:6c:53:e6:f2:b0:0d:6a:93:db:2a:fe:a2:20:32:
         cf:a1:23:a6:1f:c7:c8:3e:f6:70:72:89:08:ba:14:bf:ad:a2:
         bc:4d:56:32:df:62:e6:a3:1c:ba:7b:4e:9e:ef:f9:1b:64:07:
         cf:08:73:84:c0:56:2c:86:ff:6e:1f:95:14:b0:11:f5:78:bb:
         7c:1c:95:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:12:35 2026 by rpki-client