Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaa3394f-58c7-4d02-b38c-01dcf9725a1d.roa
File:                     eaa3394f-58c7-4d02-b38c-01dcf9725a1d.roa (raw, json)
Hash identifier:          gaOG17zV7dEOjpg3KvmxenOzpSI81I9tqA1gJDrGF94=
Subject key identifier:   AA:34:B6:89:F4:71:69:23:0F:9E:DC:F3:EF:5F:14:53:30:EC:E8:05
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2C9D89D1ECEC1EA989381C510E57E63274D6DDB3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaa3394f-58c7-4d02-b38c-01dcf9725a1d.roa
Signing time:             Wed 18 Feb 2026 21:36:50 +0000
ROA not before:           Wed 18 Feb 2026 21:36:50 +0000
ROA not after:            Tue 19 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        32.192.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9d:89:d1:ec:ec:1e:a9:89:38:1c:51:0e:57:e6:32:74:d6:dd:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 18 21:36:50 2026 GMT
            Not After : May 19 23:59:59 2026 GMT
        Subject: serialNumber=fccea7d2dc1ea51d1ef3a47116ea2fbc59d83e3be6c854167425fb959b95b806, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f1:ca:f6:b8:17:4f:70:f0:bb:f5:cf:1d:56:
                    c7:d1:d5:91:ab:14:aa:4b:e2:c6:06:44:b6:fd:f2:
                    48:d8:1e:5f:34:7a:1a:12:16:ff:c9:f7:7f:d7:99:
                    62:34:24:b9:43:ea:c4:0b:17:9b:18:0b:9f:27:fa:
                    6b:51:b9:ef:66:fe:e3:9a:3c:61:18:23:ce:9d:89:
                    61:39:99:26:ee:8d:d7:34:57:75:90:1f:62:d0:99:
                    41:d8:c2:70:1a:e3:e6:95:f5:9e:cd:52:3f:a3:4f:
                    fd:25:6d:43:4a:18:f3:ea:6b:f2:e0:ec:01:a3:34:
                    e6:7c:b8:f6:88:ad:f3:80:bb:32:30:d1:4e:b4:65:
                    cb:4a:07:9c:1f:05:f7:aa:ce:ac:3e:47:55:3c:b7:
                    7a:95:53:b6:dd:58:bc:5d:61:5d:58:b5:6d:f3:b7:
                    fd:8b:4e:39:c3:2c:7c:df:7a:a7:f8:4f:c3:3d:4e:
                    5d:2d:da:6a:b6:a0:8b:d4:94:c5:64:90:ec:3e:00:
                    a6:0e:b4:78:91:6a:1a:02:1d:a8:0d:fa:6b:ca:91:
                    dd:c3:eb:e7:9e:4b:dd:51:1b:f5:fe:73:7f:cf:78:
                    52:35:02:ce:27:f3:c8:6f:84:d4:18:01:de:d9:d9:
                    8d:a7:c2:f2:18:b2:aa:5b:ef:78:c6:14:61:88:cf:
                    51:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:34:B6:89:F4:71:69:23:0F:9E:DC:F3:EF:5F:14:53:30:EC:E8:05
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaa3394f-58c7-4d02-b38c-01dcf9725a1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  32.192.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         56:30:ea:00:26:d7:27:d5:ad:cd:f4:3f:d7:66:1e:fd:e2:92:
         45:5d:34:ca:51:83:b0:59:1c:d2:7b:a6:47:fc:cf:33:81:5c:
         db:39:4a:97:cd:19:70:52:fb:83:8b:f1:e1:9c:37:30:2f:b1:
         6c:60:fb:b7:55:38:34:f4:a5:73:a4:a7:ea:5e:de:36:52:4c:
         55:ea:95:ae:da:d8:b7:40:d5:7c:c4:e6:f5:ee:9f:ba:dd:65:
         28:2b:5a:6a:84:fd:21:6b:ea:9f:3d:38:df:ec:4d:66:be:a0:
         3d:b7:d8:fb:d3:69:e6:2a:ea:20:f7:a8:10:ab:bf:d4:99:95:
         97:c0:d8:18:97:aa:cd:7c:83:03:f4:5c:73:98:a0:c0:58:ac:
         07:33:c0:14:f4:c4:14:17:88:eb:27:e2:4c:c9:73:7b:ff:22:
         ed:2a:4d:a9:ce:92:84:53:c7:7b:0c:aa:25:04:f5:b1:14:f9:
         3a:42:71:24:f7:87:84:95:68:18:25:7d:5c:2c:66:dd:38:62:
         f7:8c:18:df:0e:7b:b5:56:91:8d:7d:c8:d2:bf:8b:5e:9a:31:
         d8:2f:67:5e:fd:ca:8f:b2:59:c4:21:1b:13:6c:96:66:2f:2c:
         10:9d:ba:02:dd:13:aa:69:28:7c:41:3b:7b:bb:3e:de:5a:8d:
         02:08:4a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:55:33 2026 by rpki-client