Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb239fb4-7011-4c8a-a697-21a2fd2d9650.roa
File:                     eb239fb4-7011-4c8a-a697-21a2fd2d9650.roa (raw, json)
Hash identifier:          wjkuKXmeVZyLT2QIXINGKux6rLhqwvnFFsCxRxbnT2o=
Subject key identifier:   C3:0D:E3:FE:3E:3A:C8:E9:85:68:36:CD:06:64:BE:DA:D2:36:70:8C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7631E43DC25DEF2128FFACEC879C83CE925FE0CD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb239fb4-7011-4c8a-a697-21a2fd2d9650.roa
Signing time:             Thu 26 Feb 2026 00:10:48 +0000
ROA not before:           Thu 26 Feb 2026 00:10:48 +0000
ROA not after:            Wed 27 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        69.0.212.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:31:e4:3d:c2:5d:ef:21:28:ff:ac:ec:87:9c:83:ce:92:5f:e0:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 26 00:10:48 2026 GMT
            Not After : May 27 23:59:59 2026 GMT
        Subject: serialNumber=a4d28f4794b44f963cb517efdb42b19066740ac02c5833b6922294b4f0c0f498, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:27:e9:a2:c4:a8:d4:9b:f1:94:07:a4:36:bb:
                    ca:39:86:43:34:e3:be:8b:35:80:94:17:1b:d9:04:
                    95:68:14:8e:9e:af:d2:f5:e3:81:44:2b:85:89:ed:
                    2f:4c:30:4e:33:ec:21:e4:92:c0:bb:59:7c:67:54:
                    2b:97:f0:7e:2a:f2:49:5f:27:2d:7a:98:89:39:a9:
                    c7:c1:01:ac:72:db:4b:e5:f1:50:57:ab:c6:9d:f0:
                    cd:a1:f4:13:a5:77:76:ed:9b:e6:44:0d:cb:f3:3b:
                    2a:c0:06:6c:f6:df:69:ea:12:6c:a0:6a:4d:22:ec:
                    30:f2:74:dd:1d:72:3a:79:78:ff:df:c3:02:34:e7:
                    5b:9c:22:a7:d6:49:6c:3a:d0:b5:3d:77:db:c4:ea:
                    7f:3c:81:4e:4a:28:6d:98:c2:62:c6:15:6e:89:6f:
                    7a:6a:bb:b6:2a:d2:64:08:fe:74:0b:83:ef:c6:dc:
                    a7:75:31:a5:06:fc:3f:75:67:55:25:ab:a1:6b:34:
                    4c:dd:48:e4:27:da:23:45:21:01:64:c7:ae:0e:ca:
                    88:cc:4f:ed:83:1e:9b:66:d4:ac:b1:66:0b:42:74:
                    25:44:af:64:59:4d:47:3f:8a:b8:e5:79:34:99:27:
                    42:7c:e9:3c:26:5b:9e:50:a7:e7:67:83:18:de:1a:
                    60:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0D:E3:FE:3E:3A:C8:E9:85:68:36:CD:06:64:BE:DA:D2:36:70:8C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb239fb4-7011-4c8a-a697-21a2fd2d9650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.0.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:05:f4:51:c0:ab:33:84:74:ce:0a:b7:61:d2:ba:44:93:d8:
         91:36:89:5f:34:df:6d:77:10:42:54:8b:2b:57:8e:cc:b5:d5:
         81:e0:43:50:31:99:c4:6a:1e:e0:87:b8:9b:55:46:8d:69:34:
         4d:7a:51:4f:90:15:35:bd:6e:87:b0:96:a1:77:18:35:35:86:
         71:eb:40:c6:58:ec:94:15:e9:e4:09:7a:66:5c:46:a8:7d:21:
         5d:21:23:03:1b:c6:6b:65:7e:59:ca:52:01:55:34:7d:04:66:
         8a:03:27:7d:3f:27:6b:ff:f2:e0:45:cc:b5:e8:00:19:b1:1d:
         8c:b2:57:06:90:c9:2e:90:d7:8c:19:eb:34:12:02:de:55:fc:
         d6:a6:a1:eb:74:cb:15:dd:34:79:af:ec:71:fb:fc:3d:1d:0e:
         ea:df:3e:67:f1:25:ab:8d:ff:c3:46:81:31:f1:af:e2:0d:13:
         5c:1d:b6:bb:8e:1e:fb:34:1e:5b:25:88:9c:23:8f:dc:cf:b8:
         9a:72:e6:cc:d6:7a:59:7d:76:74:18:c2:ca:f4:b3:33:74:c1:
         d8:aa:f3:4a:1e:44:e9:02:38:a0:18:9d:8d:94:24:24:e0:e8:
         4d:d7:cb:c4:71:6e:42:1d:05:50:a2:b2:43:00:c9:e4:0c:1a:
         25:0a:97:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:14:07 2026 by rpki-client