Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0d8910e-fb9f-4ac3-98ad-e89e7d0c572e.roa
File:                     f0d8910e-fb9f-4ac3-98ad-e89e7d0c572e.roa (raw, json)
Hash identifier:          YaxUvnNVEVFKmyKc3jPJYchfHIoOu/wkUKjMALyKp94=
Subject key identifier:   DE:EA:7D:94:D3:57:F9:88:30:46:82:61:D8:D5:91:6B:23:66:8C:53
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       087C0A9E023B437DEC6BA96E85F628EDBC74B84F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0d8910e-fb9f-4ac3-98ad-e89e7d0c572e.roa
Signing time:             Fri 13 Feb 2026 00:00:49 +0000
ROA not before:           Fri 13 Feb 2026 00:00:49 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        50.16.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:7c:0a:9e:02:3b:43:7d:ec:6b:a9:6e:85:f6:28:ed:bc:74:b8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 13 00:00:49 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=f98fd8e555e0da450fab7cd40b1e97e42ffef8edeba33dcd327c9ce9ea67e741, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:37:91:9b:55:51:c1:1c:0b:8f:2d:13:ee:54:
                    45:14:15:16:d4:01:b9:70:be:b3:fc:a9:ae:1f:ba:
                    fd:d2:91:ea:61:2e:25:8d:5a:4a:c2:87:e0:5b:b0:
                    47:bb:38:1b:9a:5b:33:a2:67:f1:03:c1:3c:3c:73:
                    45:c2:08:be:2d:91:79:57:cf:5c:bb:6f:b9:a8:69:
                    e2:8f:50:da:c3:a7:4e:9a:40:b1:a5:a3:29:a2:30:
                    75:0a:d0:71:b5:ac:2a:f5:8d:39:0c:a3:d3:d0:96:
                    93:54:27:7d:84:51:b8:ff:00:ee:f7:76:cb:2a:cf:
                    8f:7c:16:9f:ff:eb:be:49:c6:fc:63:a7:23:7a:62:
                    1d:8b:1c:ee:c1:2c:22:5b:07:15:d0:38:f5:81:52:
                    38:07:92:d4:1f:fd:b4:16:8e:36:a9:95:7c:df:98:
                    d9:02:c1:c0:42:90:67:ee:28:58:21:18:28:34:00:
                    c2:3c:a1:bd:c2:63:67:14:81:13:2b:6d:3f:4a:14:
                    f7:d5:4b:2a:25:b9:39:5e:d6:37:8a:9f:60:dd:10:
                    d3:31:1c:08:1a:79:0e:68:09:f8:a4:43:49:ff:e5:
                    c8:1c:f3:fd:f5:43:2b:7a:6d:97:e9:57:f6:7d:87:
                    4e:7e:59:94:b2:70:20:0f:33:82:55:13:3a:7b:51:
                    ba:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EA:7D:94:D3:57:F9:88:30:46:82:61:D8:D5:91:6B:23:66:8C:53
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0d8910e-fb9f-4ac3-98ad-e89e7d0c572e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.16.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:18:53:27:ad:ae:18:31:5b:34:e0:bb:a0:96:ec:4c:35:a1:
         73:a3:3e:01:fe:1d:3d:51:12:8b:f6:f7:5c:17:d5:07:c6:07:
         13:94:9d:11:cd:52:04:83:2b:07:5b:fb:5c:96:05:72:f8:ee:
         17:dc:37:99:c2:cb:10:08:50:f2:16:47:85:fa:d6:c7:90:07:
         19:cc:da:a8:7f:e8:a3:8b:8e:58:83:c1:81:47:4d:fe:c4:93:
         65:dd:79:d9:94:72:d0:17:e1:d8:cb:c2:2f:c1:08:cf:9b:f1:
         a9:a8:f1:62:f5:41:11:22:e0:13:9d:0d:88:1f:28:31:72:28:
         d4:b3:bf:83:20:f4:a0:f6:60:49:47:13:7e:1a:4a:e5:35:24:
         23:23:df:17:ed:3d:2b:68:3a:8c:eb:a0:bd:25:fc:ae:c5:a5:
         c3:c7:79:32:5b:3d:b2:0b:e0:02:c5:26:6e:fd:a0:46:6d:a0:
         02:30:c4:39:f8:67:0e:b7:c1:44:e2:0a:d8:f7:45:9a:da:78:
         db:10:c2:5f:c7:3a:50:98:27:24:db:28:30:7c:27:58:01:c3:
         ea:16:6e:f0:7c:f7:67:25:04:87:d8:a1:bc:1a:40:d5:cf:7a:
         e5:87:af:04:71:5a:f1:e5:e3:fb:77:b5:8d:31:2e:ba:c0:0c:
         c3:fe:a6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:50:29 2026 by rpki-client