Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7189a62-410c-4e8f-8bfe-6da7978c95dd.roa
File:                     b7189a62-410c-4e8f-8bfe-6da7978c95dd.roa (raw, json)
Hash identifier:          O2PwTecGYpNcOqIeOo5d3qPZBCJqwLfhkvqmmfL2SZA=
Subject key identifier:   47:C1:28:82:A2:D6:17:5D:77:16:2E:6C:72:29:A2:2D:E9:92:88:54
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       18CEDB6E2DD37DBF599912A546F12CD50A6D5369
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7189a62-410c-4e8f-8bfe-6da7978c95dd.roa
Signing time:             Wed 18 Feb 2026 21:36:52 +0000
ROA not before:           Wed 18 Feb 2026 21:36:52 +0000
ROA not after:            Tue 19 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        32.192.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ce:db:6e:2d:d3:7d:bf:59:99:12:a5:46:f1:2c:d5:0a:6d:53:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 18 21:36:52 2026 GMT
            Not After : May 19 23:59:59 2026 GMT
        Subject: serialNumber=5220fa5481aec9b4814db35cb16f4f423a185d64022ed80d1983e2afe8872a6d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:19:cc:95:1a:f6:62:c5:aa:c8:ec:fe:a9:d7:
                    a8:b3:3c:b6:e1:47:a8:d7:76:7b:88:d9:ef:40:2c:
                    d0:cd:8f:59:72:e9:df:31:67:fe:34:45:26:d3:64:
                    45:7b:77:f3:4a:17:bc:5d:c7:7e:84:e2:af:13:02:
                    53:84:25:8f:67:e2:24:98:da:b6:45:f9:2e:21:d2:
                    26:b3:aa:6f:3c:e1:68:f6:51:46:a9:78:60:cb:4c:
                    97:17:b2:a6:56:67:11:56:70:ac:9a:e7:7b:fb:13:
                    f6:38:99:f5:a5:c3:0d:04:ca:1f:bf:61:bd:2d:f4:
                    ef:33:f6:09:67:86:4d:98:6a:ff:69:0d:65:ab:5d:
                    0c:37:6c:4a:93:fa:a3:c1:b1:be:a5:03:c7:b7:69:
                    55:34:86:e1:88:a9:94:bf:17:30:42:55:e6:f1:50:
                    44:f0:ab:28:12:fa:5a:fe:58:2e:15:99:cf:e7:5b:
                    35:b0:d6:6d:19:26:21:99:05:5a:d6:9b:05:32:87:
                    d6:b1:ad:d1:af:d5:0c:3b:9d:ac:c4:bc:e3:fd:b0:
                    7c:89:52:9b:b3:3f:14:29:69:bb:72:99:c1:0b:a2:
                    f3:0f:d9:14:64:da:6f:d8:bf:3d:cf:b9:c3:91:1c:
                    46:27:f6:e0:c2:17:0e:68:f3:67:eb:2c:74:d5:92:
                    32:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C1:28:82:A2:D6:17:5D:77:16:2E:6C:72:29:A2:2D:E9:92:88:54
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7189a62-410c-4e8f-8bfe-6da7978c95dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  32.192.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         26:48:80:c9:bc:cd:c1:5b:8e:a6:d5:89:7e:dd:3a:c8:fc:51:
         a6:c3:79:19:9e:e9:3d:68:a4:88:4b:ed:e1:8a:3a:a5:7c:af:
         26:ac:46:bd:c5:c5:79:9f:2c:6f:7b:f1:52:8c:9c:93:87:59:
         65:9d:6d:b1:3e:2e:f1:0b:2b:c6:0d:cd:92:a5:df:e4:3b:49:
         e0:22:69:b3:8a:45:e8:9e:8a:74:2d:cc:9a:18:8e:a7:60:c8:
         4c:5b:f9:93:cc:ca:8e:21:ef:6b:b2:1e:e7:e2:d3:38:d4:b5:
         af:6f:f1:e1:15:81:39:8a:4b:40:26:82:e3:6f:cd:fc:02:b3:
         5a:08:1b:7c:d4:4b:5a:96:39:99:c4:b4:7f:6c:97:e7:c1:b7:
         18:1b:4c:41:53:13:78:9c:33:78:4c:37:c7:2c:78:f5:a3:14:
         79:e0:15:a1:95:7d:31:9c:0c:71:42:ed:46:94:e4:d6:76:a5:
         6e:56:40:dd:c0:36:ca:8c:39:32:dd:05:23:50:63:b5:77:57:
         b6:1a:b2:47:26:d0:e3:22:aa:0b:40:68:31:e6:4e:8f:40:9a:
         b1:a7:26:3f:a7:01:1d:52:81:4f:d0:44:14:e9:66:5a:29:1e:
         af:69:45:a9:7a:a2:9f:8c:c8:3d:bb:92:be:22:16:1c:d0:b7:
         67:a4:e2:b2
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUGM7bbi3Tfb9ZmRKlRvEs1QptU2kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE4MjEzNjUyWhcNMjYwNTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MjIwZmE1NDgxYWVjOWI0ODE0ZGIzNWNiMTZmNGY0MjNh
MTg1ZDY0MDIyZWQ4MGQxOTgzZTJhZmU4ODcyYTZkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDdGcyVGvZixarI7P6p16izPLbhR6jXdnuI2e9ALNDNj1ly
6d8xZ/40RSbTZEV7d/NKF7xdx36E4q8TAlOEJY9n4iSY2rZF+S4h0iazqm884Wj2
UUapeGDLTJcXsqZWZxFWcKya53v7E/Y4mfWlww0Eyh+/Yb0t9O8z9glnhk2Yav9p
DWWrXQw3bEqT+qPBsb6lA8e3aVU0huGIqZS/FzBCVebxUETwqygS+lr+WC4Vmc/n
WzWw1m0ZJiGZBVrWmwUyh9axrdGv1Qw7nazEvOP9sHyJUpuzPxQpabtymcELovMP
2RRk2m/Yvz3PucORHEYn9uDCFw5o82frLHTVkjJNAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUR8EogqLWF113Fi5scimiLemSiFQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I3MTg5YTYyLTQxMGMtNGU4Zi04YmZlLTZkYTc5NzhjOTVkZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwMgwDANBgkqhkiG9w0BAQsFAAOCAQEAJkiAybzNwVuOptWJft06yPxRpsN5
GZ7pPWikiEvt4Yo6pXyvJqxGvcXFeZ8sb3vxUoyck4dZZZ1tsT4u8Qsrxg3NkqXf
5DtJ4CJps4pF6J6KdC3MmhiOp2DITFv5k8zKjiHva7Ie5+LTONS1r2/x4RWBOYpL
QCaC42/N/AKzWggbfNRLWpY5mcS0f2yX58G3GBtMQVMTeJwzeEw3xyx49aMUeeAV
oZV9MZwMcULtRpTk1nalblZA3cA2yow5Mt0FI1BjtXdXthqyRybQ4yKqC0BoMeZO
j0CasacmP6cBHVKBT9BEFOlmWiker2lFqXqin4zIPbuSviIWHNC3Z6Tisg==
-----END CERTIFICATE-----
Generated at Sat Feb 21 04:55:32 2026 by rpki-client