Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44ba2d14-974a-4511-8fd7-d58b9de4e839.roa
File:                     44ba2d14-974a-4511-8fd7-d58b9de4e839.roa (raw, json)
Hash identifier:          xuSpqpvF1dFSKIHMwR5obg5OfsyABRf3TGuCdCxkN1M=
Subject key identifier:   91:D8:EF:0A:A5:95:4A:B0:B1:AF:FF:DE:09:DF:B0:E9:BE:96:B6:4F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6AEABC4BD578003CB08ABE198E755B214D522D4E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44ba2d14-974a-4511-8fd7-d58b9de4e839.roa
Signing time:             Wed 18 Feb 2026 21:36:51 +0000
ROA not before:           Wed 18 Feb 2026 21:36:51 +0000
ROA not after:            Tue 19 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        32.196.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ea:bc:4b:d5:78:00:3c:b0:8a:be:19:8e:75:5b:21:4d:52:2d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 18 21:36:51 2026 GMT
            Not After : May 19 23:59:59 2026 GMT
        Subject: serialNumber=e1632156d770de7db0e53902a5a2772a97b87fdbdeea458f703f1e6d3076f551, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:96:c2:70:cf:c2:04:96:7f:49:49:f6:66:3a:
                    9e:5a:98:21:8e:e1:69:13:84:29:b8:cd:64:0a:7b:
                    73:46:e8:15:df:5f:41:e5:d0:93:44:50:f0:32:b1:
                    ca:bf:31:d9:db:7c:05:3e:e4:fa:95:3d:f6:84:9d:
                    10:6f:00:e3:e9:ff:6e:78:78:e4:f4:4d:20:76:59:
                    80:2a:87:c4:58:5f:1e:b1:1a:8a:2c:7c:17:9d:fd:
                    43:bf:af:e2:d0:db:9c:83:d0:12:a5:33:dc:7f:6d:
                    30:14:db:bb:fa:a7:3f:6f:23:87:c0:f0:e5:fa:dd:
                    db:34:c3:81:4a:df:31:f0:dd:7f:19:0c:85:17:e3:
                    a1:ef:59:56:b8:1c:0f:9f:e4:b9:46:ae:50:65:91:
                    0f:0c:6e:22:73:ac:08:d9:6a:45:08:ae:2b:6d:ff:
                    a3:c0:24:62:62:43:d4:1e:64:78:e0:a6:0a:e0:12:
                    4d:7b:9f:7b:86:16:c6:ba:2b:30:8a:0e:4e:5c:75:
                    f2:3a:d8:d6:b1:92:ab:fa:12:3f:85:5d:99:08:c3:
                    72:85:36:33:96:b6:57:32:6c:5d:83:9b:ed:f0:0b:
                    5f:b4:02:c8:27:20:8f:a4:8d:3a:9f:87:21:a4:6b:
                    7f:fe:3e:cc:ef:ad:ba:c7:dd:f6:14:e3:fa:80:e4:
                    78:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D8:EF:0A:A5:95:4A:B0:B1:AF:FF:DE:09:DF:B0:E9:BE:96:B6:4F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44ba2d14-974a-4511-8fd7-d58b9de4e839.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  32.196.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         c9:1b:64:e8:a7:be:e8:ce:43:86:b0:81:a8:97:a1:46:0e:ff:
         10:24:0b:e7:18:0b:34:a8:9a:d3:5c:78:76:66:57:6f:9f:a1:
         7b:17:cc:8a:b2:f5:38:de:78:e0:a6:23:93:bd:16:8e:f0:01:
         25:16:27:47:84:f4:f5:c2:3b:dd:fa:76:4b:78:99:00:aa:f2:
         f7:a5:a7:2b:42:25:d9:10:e5:32:42:77:5f:59:1d:11:f2:91:
         4c:5d:f6:53:08:cd:22:44:96:4b:cd:04:63:11:73:5a:49:52:
         c4:b8:0a:27:b7:00:9a:d7:38:c2:04:fd:a9:a5:df:2e:ef:ca:
         22:66:93:76:64:60:b4:b4:8d:2c:fb:48:ce:db:a8:2f:6f:be:
         8a:9f:42:11:14:b7:f3:11:b5:61:e6:80:f7:7d:ee:7f:1c:22:
         56:39:11:18:df:b0:80:a6:d8:b5:e5:86:cf:b5:6b:5c:85:6b:
         c3:8a:c8:62:88:3a:1b:55:f0:a2:2c:60:13:b3:93:da:02:83:
         15:af:fd:f1:32:ee:37:55:25:a0:5c:e8:19:0f:ca:55:94:c1:
         d3:09:6c:7d:e9:7e:1f:2d:48:fe:dd:71:43:36:d0:af:da:f3:
         7f:03:15:09:af:c6:e5:1e:4c:f7:06:36:bf:e5:20:4c:01:dc:
         be:5c:a4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:55:32 2026 by rpki-client