Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18fda923-6882-4956-9d4c-50f19c96087e.roa
File:                     18fda923-6882-4956-9d4c-50f19c96087e.roa (raw, json)
Hash identifier:          VJsfcyubfygJrNPCU58I5PxE7hZPkLwgZ62rQONDT30=
Subject key identifier:   2A:86:95:BE:99:2B:91:90:F1:54:96:9F:63:EB:CA:85:D5:A5:EA:4A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       66BE2721B68C6BFF1D5F840ECD3A6157491BFAD7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18fda923-6882-4956-9d4c-50f19c96087e.roa
Signing time:             Sat 21 Feb 2026 00:30:14 +0000
ROA not before:           Sat 21 Feb 2026 00:30:14 +0000
ROA not after:            Fri 22 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fec:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:be:27:21:b6:8c:6b:ff:1d:5f:84:0e:cd:3a:61:57:49:1b:fa:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 21 00:30:14 2026 GMT
            Not After : May 22 23:59:59 2026 GMT
        Subject: serialNumber=eef2b7dbf09f5033f8c89dba292a5e340804b07b68ee234e67eea9e9c28cddee, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:21:8d:cc:27:d5:2c:27:f2:d7:ee:e2:19:a5:
                    18:44:16:f7:38:e0:0b:81:56:b8:69:0f:76:de:6b:
                    ac:38:10:3a:99:dd:0c:59:af:cb:35:50:af:f6:8c:
                    64:e5:fe:ca:fe:1e:e3:79:1a:be:e1:8b:76:3e:a1:
                    b9:b0:ad:3c:48:70:9a:1a:47:79:fe:1f:40:01:ed:
                    d5:2b:88:a5:41:d7:3f:84:50:d1:cd:5f:50:f7:63:
                    b5:87:6c:83:ba:4e:4d:a5:1d:5d:f1:37:58:96:58:
                    21:3d:7e:e8:52:0b:34:39:ce:b4:f9:53:10:9f:8f:
                    63:7b:99:a6:86:5c:07:b4:67:11:cb:40:42:a7:2a:
                    a5:ed:6f:54:56:4c:f8:24:8f:b4:5f:9c:b9:3e:70:
                    be:6d:34:30:a2:67:95:d9:07:6d:18:75:84:9d:5d:
                    48:b2:53:d2:ce:7f:98:a5:e7:39:e1:23:5b:6b:83:
                    6e:ea:a7:17:a1:5d:21:6d:c6:9c:44:92:29:7e:be:
                    ed:fb:25:a4:9c:10:73:d1:ee:8c:d3:f7:08:0c:49:
                    ab:f9:b0:98:c1:82:0c:ec:9c:cc:d6:77:14:4c:b2:
                    03:2b:ae:c3:03:ad:4f:cc:96:1c:b3:13:1e:6e:12:
                    31:0a:60:a0:32:fc:6a:df:c8:a9:67:7e:ec:1d:7c:
                    63:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:86:95:BE:99:2B:91:90:F1:54:96:9F:63:EB:CA:85:D5:A5:EA:4A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18fda923-6882-4956-9d4c-50f19c96087e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:3f:e6:a0:27:c7:06:3c:aa:1a:27:40:83:f1:b5:da:89:83:
         08:25:f5:28:4c:6e:a6:88:cd:85:26:ca:bd:93:98:8f:d9:60:
         c8:44:1b:d1:53:e0:16:b9:0b:ad:cf:14:ff:d7:80:50:cc:5b:
         39:3f:a4:db:2b:e1:a7:f2:a2:83:e9:bc:70:60:28:13:fe:e7:
         ab:97:3a:ed:52:cc:68:ed:7c:5f:7a:e1:33:a1:61:f0:c4:f8:
         7e:3a:5f:13:a0:5e:22:10:ab:34:e1:e8:3e:ea:d4:42:b8:e3:
         26:1c:41:a9:84:e3:10:02:72:a6:7d:2b:88:30:d3:d0:28:86:
         6a:cb:4f:5f:fa:c1:cb:b5:89:e7:b5:8f:25:c2:2f:13:88:3a:
         d0:c5:80:c7:f5:82:a6:eb:c2:0b:8b:3b:36:c7:20:9c:0f:58:
         1c:19:4d:39:62:4c:61:fe:98:17:a0:55:57:c6:5f:78:af:a3:
         43:7a:33:ed:41:cf:62:72:25:57:55:32:ea:eb:39:05:3a:6e:
         c8:0d:05:8d:18:84:73:3a:25:df:5f:f3:80:03:d9:21:75:eb:
         d9:82:66:81:68:b6:f9:ca:1c:59:49:34:83:ab:a3:9b:35:03:
         b0:b9:d3:ab:79:50:b2:32:1f:8c:44:d4:1c:36:14:f6:c4:f1:
         fa:5c:2f:ca
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUZr4nIbaMa/8dX4QOzTphV0kb+tcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDAzMDE0WhcNMjYwNTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BlZWYyYjdkYmYwOWY1MDMzZjhjODlkYmEyOTJhNWUzNDA4
MDRiMDdiNjhlZTIzNGU2N2VlYTllOWMyOGNkZGVlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCfIY3MJ9UsJ/LX7uIZpRhEFvc44AuBVrhpD3bea6w4EDqZ
3QxZr8s1UK/2jGTl/sr+HuN5Gr7hi3Y+obmwrTxIcJoaR3n+H0AB7dUriKVB1z+E
UNHNX1D3Y7WHbIO6Tk2lHV3xN1iWWCE9fuhSCzQ5zrT5UxCfj2N7maaGXAe0ZxHL
QEKnKqXtb1RWTPgkj7RfnLk+cL5tNDCiZ5XZB20YdYSdXUiyU9LOf5il5znhI1tr
g27qpxehXSFtxpxEkil+vu37JaScEHPR7ozT9wgMSav5sJjBggzsnMzWdxRMsgMr
rsMDrU/MlhyzEx5uEjEKYKAy/GrfyKlnfuwdfGMzAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUKoaVvpkrkZDxVJafY+vKhdWl6kowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE4ZmRhOTIzLTY4ODItNDk1Ni05ZDRjLTUwZjE5Yzk2MDg3ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/sEAAwDQYJKoZIhvcNAQELBQADggEBALU/5qAnxwY8qhonQIPxtdqJ
gwgl9ShMbqaIzYUmyr2TmI/ZYMhEG9FT4Ba5C63PFP/XgFDMWzk/pNsr4afyooPp
vHBgKBP+56uXOu1SzGjtfF964TOhYfDE+H46XxOgXiIQqzTh6D7q1EK44yYcQamE
4xACcqZ9K4gw09AohmrLT1/6wcu1iee1jyXCLxOIOtDFgMf1gqbrwguLOzbHIJwP
WBwZTTliTGH+mBegVVfGX3ivo0N6M+1Bz2JyJVdVMurrOQU6bsgNBY0YhHM6Jd9f
84AD2SF169mCZoFotvnKHFlJNIOro5s1A7C506t5ULIyH4xE1Bw2FPbE8fpcL8o=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:38 2026 by rpki-client