Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3b19a945-7e26-4d66-a93d-c43be9220dc3.roa
File:                     3b19a945-7e26-4d66-a93d-c43be9220dc3.roa (raw, json)
Hash identifier:          LVyhFjOvd4mBLdZ1yIyry0Hfv0mq2GYmfZvQkYTVPHY=
Subject key identifier:   A0:6D:6B:58:01:4F:06:D4:C8:13:3D:F4:D6:0E:F8:B2:46:A2:67:E1
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       26334120E6B035C26A09B02CB98D6DED05AA4C5B
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3b19a945-7e26-4d66-a93d-c43be9220dc3.roa
Signing time:             Fri 13 Feb 2026 00:00:10 +0000
ROA not before:           Fri 13 Feb 2026 00:00:10 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        24.110.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:33:41:20:e6:b0:35:c2:6a:09:b0:2c:b9:8d:6d:ed:05:aa:4c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Feb 13 00:00:10 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=f5d5fe235d8f7f07c13c9c867859c30d7473b1e1ff616a9cf6de8ee036ee0dce, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:22:10:b0:3a:28:2d:dc:e5:08:0e:50:f0:5e:
                    1d:1d:df:9b:63:66:88:08:2c:d1:39:52:60:df:76:
                    39:11:28:42:e0:6a:e0:83:33:47:13:6e:9c:50:61:
                    63:3c:d7:b6:24:6e:aa:37:08:39:9d:3b:ae:02:e5:
                    db:eb:8a:f1:65:c8:ae:09:1c:60:c4:16:87:b5:23:
                    50:0b:3f:a0:87:66:df:56:d8:6d:54:9f:78:a9:97:
                    9c:33:5a:a6:12:7f:a2:3a:41:3f:d0:27:f9:d8:33:
                    19:97:01:40:32:b1:fe:6b:99:c5:ef:7a:e2:7a:b3:
                    60:88:74:f9:b6:22:14:d0:5d:ce:5f:dc:18:8b:b6:
                    47:af:9e:b3:44:34:81:b0:c3:a3:1d:8a:2e:82:41:
                    94:de:9d:b2:45:9a:91:e8:98:e2:a2:52:4f:3f:92:
                    23:2a:9a:44:ff:82:24:bb:49:e3:da:51:18:b7:54:
                    07:2a:be:d0:7d:5f:f1:c6:07:0e:a2:2c:0a:8e:78:
                    0a:02:ad:13:38:41:6b:af:40:25:4d:de:78:87:4c:
                    c9:98:90:78:ad:a7:19:58:64:46:b4:dd:1b:84:cf:
                    f7:43:61:22:03:e9:be:d6:d6:cb:e7:5c:1f:d7:e2:
                    82:31:e6:26:10:55:83:7c:66:9c:74:86:5a:88:52:
                    27:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6D:6B:58:01:4F:06:D4:C8:13:3D:F4:D6:0E:F8:B2:46:A2:67:E1
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3b19a945-7e26-4d66-a93d-c43be9220dc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.110.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8f:42:8b:73:a1:ad:28:99:c1:ed:8e:2d:ec:52:fe:c8:83:1b:
         3f:7d:d8:b4:1b:38:ef:79:b8:a7:0a:26:9e:4f:c8:44:0f:84:
         52:b7:2a:11:56:e2:32:09:4f:8d:63:29:31:4e:6c:3a:84:1f:
         8e:0a:9d:53:3b:11:1f:d0:f0:f0:d6:0e:77:27:ac:53:52:31:
         8a:18:86:df:a1:63:d0:a4:d0:b6:b7:a4:36:12:f1:ee:e0:e5:
         17:e6:4a:bf:45:70:89:73:c4:0f:68:2d:73:e3:8f:7b:de:07:
         38:e6:d1:86:f1:a6:37:41:c3:7e:b8:ae:f4:72:8e:b4:2b:4a:
         8b:14:d2:2f:da:e6:d9:e5:7f:87:c4:f6:c9:3b:93:73:e3:ae:
         4f:9e:60:d3:6d:a0:1e:3c:f2:ce:8d:f4:7f:d7:9e:d9:7a:84:
         2c:6c:6e:83:c3:64:17:b3:61:5f:15:20:23:65:41:58:0e:ac:
         42:de:14:42:cd:d4:d8:97:9e:1c:ad:05:0b:d0:e1:e1:d6:ea:
         a6:51:f3:2c:a7:7f:aa:41:91:9c:fb:44:81:b4:cd:54:4a:1d:
         02:82:fe:a7:e4:89:9e:0d:c3:04:73:fb:d9:90:e5:84:02:85:
         ea:cd:1c:b2:58:ae:3e:82:ff:fd:ec:41:81:5e:2f:63:22:5e:
         f5:52:8d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:39:11 2026 by rpki-client