Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a5fd2de-4f42-45a8-a196-4178477280d0.roa
File:                     6a5fd2de-4f42-45a8-a196-4178477280d0.roa (raw, json)
Hash identifier:          brHz0U85IoLbmSe7Y+gp1XmLKM0woNcC0lJjYxMcXqc=
Subject key identifier:   8D:3E:DC:2B:68:BA:79:6B:E6:65:FA:45:6F:C8:39:53:E6:48:C5:31
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4187F4BFC8BE2E77965C860CA3702A8C70BB3245
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a5fd2de-4f42-45a8-a196-4178477280d0.roa
Signing time:             Wed 18 Feb 2026 06:36:51 +0000
ROA not before:           Wed 18 Feb 2026 06:36:51 +0000
ROA not after:            Tue 19 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        64.73.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:87:f4:bf:c8:be:2e:77:96:5c:86:0c:a3:70:2a:8c:70:bb:32:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 18 06:36:51 2026 GMT
            Not After : May 19 23:59:59 2026 GMT
        Subject: serialNumber=0e97eaace97a8bbff9da32fddc8b905b8f16ab8778bd760566dd0ed55412f62c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b6:31:96:60:b4:34:29:d6:68:f4:81:09:d2:
                    23:e4:6a:e0:19:52:a2:e4:4e:a0:d2:55:2c:5f:77:
                    4a:fa:41:81:f3:05:e8:cc:00:2c:09:e6:3d:ec:d0:
                    76:fa:52:eb:50:ac:54:4a:69:6c:8c:0d:46:b1:b0:
                    89:2c:96:bd:3a:46:ef:4f:60:f3:a7:fb:78:bd:9a:
                    2f:43:c5:45:8a:cf:e6:26:77:1f:81:ea:d9:5c:8f:
                    0a:8e:c1:b1:b6:38:2b:ae:24:72:cd:11:80:de:50:
                    3d:1c:8c:3c:b9:36:62:4b:dc:df:dd:28:2a:9d:06:
                    71:ed:7c:70:27:c8:02:47:20:ae:c1:92:bd:c7:94:
                    2c:4f:bb:6a:f4:98:12:f5:a6:4f:45:54:28:76:25:
                    8a:fe:fd:06:6c:41:1e:50:64:21:14:30:e0:8f:63:
                    ca:b7:2f:bf:c8:c5:ff:c1:47:22:bb:9e:dd:e2:d6:
                    c1:b5:b5:58:21:fb:35:6e:d4:57:bd:76:a4:85:d9:
                    a9:6a:8a:2b:20:b7:53:2e:a9:22:03:0b:4b:d6:13:
                    c2:64:43:72:36:7d:8c:c6:b9:6d:ca:55:b5:14:11:
                    54:94:75:4a:60:be:74:33:06:17:6e:92:bf:40:e6:
                    2d:1a:a5:33:30:2a:ed:e0:85:a5:45:13:54:f7:50:
                    77:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3E:DC:2B:68:BA:79:6B:E6:65:FA:45:6F:C8:39:53:E6:48:C5:31
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a5fd2de-4f42-45a8-a196-4178477280d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.73.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         26:91:0a:6e:9b:a6:5a:48:36:3a:72:78:98:4d:c4:fa:80:d0:
         d9:0f:ed:ff:7d:bb:fd:10:4d:a2:a8:41:60:56:72:fe:64:cc:
         16:49:c6:60:b2:c9:a3:bd:44:b2:e1:0e:8b:d3:d0:3c:5b:f6:
         61:1d:dc:d3:5a:ac:54:03:20:71:d3:0c:09:07:af:95:b0:55:
         79:63:f4:43:12:4b:67:45:1d:74:36:24:9f:41:b0:65:f2:77:
         2e:2f:fa:22:79:53:9d:84:e9:ee:6f:06:6f:91:a4:0d:92:dd:
         82:2b:3b:7b:77:0c:c1:83:ba:91:0f:56:9b:e6:2e:a6:92:cc:
         35:c5:dd:b3:0a:ce:dc:d2:53:ef:11:5e:a6:71:8a:e2:c3:42:
         91:dc:b6:8b:42:04:95:c7:66:35:56:28:76:f4:76:ad:ad:9c:
         f8:8e:5c:99:66:1c:15:81:c1:ed:49:2d:3b:8d:56:31:11:7e:
         d9:a3:e7:78:ab:0b:c3:b3:63:f7:40:96:fc:17:48:89:ba:df:
         58:6e:a5:bc:5d:e9:75:07:82:45:92:3e:c4:8e:0e:b4:57:41:
         16:9b:39:19:3d:e0:6c:49:bf:67:f1:89:52:a2:9e:ec:c8:88:
         7d:b9:88:58:24:66:59:2b:f9:f4:c7:81:6b:68:1f:5b:60:37:
         58:dd:d3:a5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQYf0v8i+LneWXIYMo3AqjHC7MkUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE4MDYzNjUxWhcNMjYwNTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0AwZTk3ZWFhY2U5N2E4YmJmZjlkYTMyZmRkYzhiOTA1Yjhm
MTZhYjg3NzhiZDc2MDU2NmRkMGVkNTU0MTJmNjJjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9tjGWYLQ0KdZo9IEJ0iPkauAZUqLkTqDSVSxfd0r6QYHz
BejMACwJ5j3s0Hb6UutQrFRKaWyMDUaxsIkslr06Ru9PYPOn+3i9mi9DxUWKz+Ym
dx+B6tlcjwqOwbG2OCuuJHLNEYDeUD0cjDy5NmJL3N/dKCqdBnHtfHAnyAJHIK7B
kr3HlCxPu2r0mBL1pk9FVCh2JYr+/QZsQR5QZCEUMOCPY8q3L7/Ixf/BRyK7nt3i
1sG1tVgh+zVu1Fe9dqSF2alqiisgt1MuqSIDC0vWE8JkQ3I2fYzGuW3KVbUUEVSU
dUpgvnQzBhdukr9A5i0apTMwKu3ghaVFE1T3UHclAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUjT7cK2i6eWvmZfpFb8g5U+ZIxTEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZhNWZkMmRlLTRmNDItNDVhOC1hMTk2LTQxNzg0NzcyODBkMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVAScAwDQYJKoZIhvcNAQELBQADggEBACaRCm6bplpINjpyeJhNxPqA0NkP
7f99u/0QTaKoQWBWcv5kzBZJxmCyyaO9RLLhDovT0Dxb9mEd3NNarFQDIHHTDAkH
r5WwVXlj9EMSS2dFHXQ2JJ9BsGXydy4v+iJ5U52E6e5vBm+RpA2S3YIrO3t3DMGD
upEPVpvmLqaSzDXF3bMKztzSU+8RXqZxiuLDQpHctotCBJXHZjVWKHb0dq2tnPiO
XJlmHBWBwe1JLTuNVjERftmj53irC8OzY/dAlvwXSIm631hupbxd6XUHgkWSPsSO
DrRXQRabORk94GxJv2fxiVKinuzIiH25iFgkZlkr+fTHgWtoH1tgN1jd06U=
-----END CERTIFICATE-----
Generated at Sat Feb 21 04:55:32 2026 by rpki-client