Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef392e95-5697-4675-a401-25d090055bed.roa
File:                     ef392e95-5697-4675-a401-25d090055bed.roa (raw, json)
Hash identifier:          29HbVm+hKOhH3Q5U5XiIFVqP5VOi/020cdQ7in82Rdc=
Subject key identifier:   77:01:98:2C:9F:F1:52:09:E3:BF:D2:78:23:E8:FB:64:D2:4D:08:C9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5014132BC05BA32953F55FC483656535CF51CD25
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef392e95-5697-4675-a401-25d090055bed.roa
Signing time:             Wed 18 Feb 2026 00:11:10 +0000
ROA not before:           Wed 18 Feb 2026 00:11:10 +0000
ROA not after:            Tue 19 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.87.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:14:13:2b:c0:5b:a3:29:53:f5:5f:c4:83:65:65:35:cf:51:cd:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 18 00:11:10 2026 GMT
            Not After : May 19 23:59:59 2026 GMT
        Subject: serialNumber=d323ba3ada5516fcd46e9048530baae2334abebb0704ecefd5c5728d896be280, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:22:fa:6f:07:b1:e6:2e:35:a8:e3:f0:b3:33:
                    46:be:b5:d5:1a:46:23:e7:03:61:93:e5:f1:59:7c:
                    c7:06:be:11:1b:42:14:16:e0:94:b3:2e:5d:d9:99:
                    10:c9:e5:a9:36:f9:c6:a1:e0:54:95:49:fc:7f:42:
                    ea:60:89:a7:4b:26:9d:35:cb:56:bf:3b:3d:dd:ab:
                    48:9b:1c:a0:bd:97:c6:6e:7d:92:b0:8f:8c:51:b3:
                    c3:21:c3:1b:cf:8b:7e:a5:98:74:b8:13:64:6d:85:
                    38:04:26:d1:76:48:06:91:f2:4b:ba:87:d9:42:bf:
                    5c:e8:44:ea:15:42:c2:42:4e:9e:3a:7b:7b:77:71:
                    a3:b8:69:8d:c7:98:75:93:f1:66:29:9b:77:c4:05:
                    cd:14:c5:99:92:e9:62:de:fb:dc:72:f4:65:3a:f5:
                    9c:d3:14:78:4a:46:fd:17:8d:66:2b:f3:81:7f:d0:
                    56:e2:5d:04:f8:61:3d:5b:fd:2c:e4:ff:e8:50:68:
                    37:6b:01:ab:99:cb:0e:67:83:b6:7f:9e:07:b8:77:
                    b0:96:b7:62:83:58:da:b8:13:48:1c:a1:eb:c4:e8:
                    48:d2:95:7e:1a:4a:75:a7:31:27:81:27:6b:31:ab:
                    6e:82:9e:17:65:ea:a3:7b:a5:9b:34:60:db:5b:45:
                    36:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:01:98:2C:9F:F1:52:09:E3:BF:D2:78:23:E8:FB:64:D2:4D:08:C9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef392e95-5697-4675-a401-25d090055bed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         57:1f:05:37:07:cf:55:6f:e5:a8:0b:e3:9b:dd:df:2c:66:d5:
         ca:e2:e3:a2:85:f4:93:c1:14:45:eb:d6:ff:8b:35:19:f9:29:
         c3:80:63:c6:d7:04:20:ca:07:0d:c1:b0:a2:2e:df:2f:51:e8:
         25:77:81:ca:4c:94:80:d5:85:a7:ab:b2:2b:91:8e:84:7a:40:
         47:ba:a8:94:cb:6a:d6:c5:72:ab:d1:94:32:bd:e6:77:9b:ab:
         e4:78:0a:4c:37:69:a7:58:4b:03:fa:5f:8d:51:09:1b:95:57:
         13:02:ad:74:6c:45:a4:9d:4b:f4:6c:2d:f1:9e:fa:78:c6:ff:
         f8:39:8b:cc:af:bb:b7:0e:49:f5:8d:da:da:10:8e:fb:a1:1b:
         45:bd:38:96:79:c6:50:81:20:d7:b2:e3:f9:33:59:b7:d6:fb:
         e4:10:26:ac:0d:51:a5:28:59:22:2f:fe:5f:9a:e2:ec:ed:c4:
         08:8d:66:1f:ca:dc:a1:6f:eb:c4:e9:17:1b:19:11:6f:45:cd:
         4d:da:73:0a:1d:7f:98:2d:ce:a3:66:b0:41:e1:ae:d0:88:62:
         5c:af:e9:03:f4:57:fd:fb:d8:4a:3a:fa:b8:6e:75:1d:38:35:
         cd:fa:61:56:f7:4f:ab:bc:28:b7:31:52:00:4b:c4:7d:fc:b8:
         de:f7:bb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:30:19 2026 by rpki-client