Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/24dfe680-d3e6-4d3d-8f28-ce2f99e02db6.roa
File:                     24dfe680-d3e6-4d3d-8f28-ce2f99e02db6.roa (raw, json)
Hash identifier:          OAE4Rm+gCyncT6lZ5do3s+WNoLa3Aii3Xxs7INSVZds=
Subject key identifier:   FA:7E:F8:AF:C3:C7:EC:8B:BC:09:3D:D9:4B:59:2E:3E:57:66:85:31
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       4AA0132C06A7F0016B40284FBA8732E2E0A7712D
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/24dfe680-d3e6-4d3d-8f28-ce2f99e02db6.roa
Signing time:             Sat 28 Feb 2026 00:40:05 +0000
ROA not before:           Sat 28 Feb 2026 00:40:05 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a0:13:2c:06:a7:f0:01:6b:40:28:4f:ba:87:32:e2:e0:a7:71:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Feb 28 00:40:05 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=5abc4f3f8e09dd5b58461c143632b60edea339421bf8fd6769bd7951e6386b37, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ba:89:68:d4:7a:e5:79:45:af:62:ff:ac:02:
                    1c:32:f1:84:9f:6b:d9:d9:d3:5d:96:9d:bc:34:8b:
                    15:ed:21:c1:6e:dd:ae:77:67:bb:0f:91:ee:68:4d:
                    7b:58:0a:30:1a:31:8c:c0:e9:45:e5:07:e1:5f:38:
                    7e:c7:fd:50:e0:50:70:3e:9a:d9:c4:83:6b:fa:56:
                    98:64:ef:11:97:37:4c:f8:b2:5b:64:da:e7:26:ed:
                    7a:63:5e:9a:96:2a:da:a5:60:e9:32:c5:37:26:ef:
                    05:a9:00:22:b9:20:09:ab:e5:39:a0:9a:fd:94:23:
                    c6:e1:fc:17:3c:8b:97:8f:20:c3:93:7c:b5:80:92:
                    3d:34:ca:a5:70:5e:3f:dc:16:42:34:93:ee:1e:62:
                    5a:82:a0:c1:40:f4:66:e9:af:4f:17:0d:83:40:fd:
                    ca:f5:77:c0:4f:51:f1:63:fa:ac:ed:65:72:8b:c7:
                    05:d4:14:8f:f7:7c:88:1d:2e:1d:47:e4:db:68:48:
                    ad:e8:9a:69:51:60:2a:bc:ee:83:78:bf:ab:21:2b:
                    61:c9:c8:8b:c2:49:0f:07:5e:4a:8b:f7:4b:b2:af:
                    36:c1:6e:c0:52:68:5a:32:c3:76:e7:5f:d0:25:f2:
                    75:d4:00:e2:ad:7f:43:33:09:83:55:f0:1a:1f:37:
                    50:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7E:F8:AF:C3:C7:EC:8B:BC:09:3D:D9:4B:59:2E:3E:57:66:85:31
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/24dfe680-d3e6-4d3d-8f28-ce2f99e02db6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         33:2e:9f:94:81:80:19:a1:05:7b:1b:01:e7:32:9b:5f:92:93:
         a6:7f:58:9c:b2:bc:69:0b:7a:80:c9:4a:0d:42:0d:94:d8:d4:
         3b:f1:c0:cc:0e:ae:21:7b:b0:ac:88:65:af:b1:25:97:c2:c7:
         c3:2d:fc:74:7d:66:7e:ef:26:4b:9c:9f:a6:b7:ca:4b:09:dd:
         8f:64:fe:cc:76:ba:96:fc:81:5a:f0:9f:fd:9e:7c:95:5f:2f:
         64:1c:1f:b5:e4:ac:66:4c:39:55:a0:0d:2c:e5:c1:e0:cc:94:
         37:6c:bf:6e:e3:d5:89:63:9b:df:08:1c:ed:ef:38:81:57:a3:
         60:91:e5:78:e2:b4:6d:0b:5c:47:75:b6:e6:c5:40:bb:eb:23:
         e8:20:22:63:77:40:f2:63:6b:2a:85:87:5f:df:da:9d:be:7b:
         d4:41:55:54:c7:03:66:b9:b3:02:a8:36:14:50:64:e5:8c:7f:
         d7:be:7c:56:93:54:65:4b:80:22:b2:a1:95:21:e0:32:8b:9f:
         a3:5f:19:41:06:83:60:20:77:d8:4c:1c:41:88:52:b4:67:2f:
         c7:5a:6c:05:34:ad:52:81:5d:f4:b7:cd:95:17:c9:5a:34:d2:
         6d:99:29:7a:a5:04:32:50:20:de:5b:41:e8:5f:e4:ad:b4:c2:
         da:de:42:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:42:14 2026 by rpki-client