Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f15d26f-8f71-43a3-80b0-ce2c01880d7b.roa
File:                     1f15d26f-8f71-43a3-80b0-ce2c01880d7b.roa (raw, json)
Hash identifier:          Fg9zzr4L4+cDsPvSpgo5Q6zC5dRuHxfBvUIHc0ItVVQ=
Subject key identifier:   6F:B1:CF:AA:FE:B8:68:29:97:A7:80:FE:05:9D:1F:EA:98:E6:91:AF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       503ED5A72C099272DABBB0E00A58C930A16C05A9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f15d26f-8f71-43a3-80b0-ce2c01880d7b.roa
Signing time:             Wed 25 Feb 2026 02:11:02 +0000
ROA not before:           Wed 25 Feb 2026 02:11:02 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:7440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3e:d5:a7:2c:09:92:72:da:bb:b0:e0:0a:58:c9:30:a1:6c:05:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 25 02:11:02 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=a0423b262a580613f56a93382d1e585830d6e9312c7bbc64c7c6e0f8983b1fbc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8e:67:51:02:bc:e2:cb:70:c7:6c:88:5c:53:
                    94:5d:0c:10:76:6f:24:16:45:d4:e0:d6:34:ad:a0:
                    c0:6d:31:a2:b4:87:6b:45:fa:4b:3a:3b:ed:07:76:
                    ae:37:15:b3:e7:37:0b:2e:93:71:9d:7b:e5:3b:a5:
                    9d:8f:69:5b:90:86:60:46:67:c0:89:93:dc:b3:79:
                    87:e3:c8:7c:d1:4f:89:ee:be:2c:c0:de:0d:f9:cb:
                    16:5e:bd:48:a3:7c:e6:6c:2d:73:e2:93:17:06:9a:
                    c2:1c:02:7f:d0:c6:dc:fe:1f:45:31:a9:5e:57:62:
                    ce:8c:1e:fd:c5:03:35:b5:e2:d2:6d:ef:a1:fd:ff:
                    49:dd:50:98:31:a4:41:22:fb:28:5b:bc:59:bc:90:
                    f1:8f:db:4d:cb:35:87:88:ca:d0:31:9d:44:50:b8:
                    b3:a6:8a:85:5e:86:24:4a:b5:0e:4e:b1:e3:01:51:
                    f3:56:3a:3d:b5:1a:23:07:f2:4b:a3:98:d7:ff:6d:
                    d1:ff:be:98:91:1d:fe:78:9c:13:5c:5c:2d:c2:31:
                    0d:84:9d:0a:a6:87:f4:b4:d3:43:5b:9c:16:76:bb:
                    06:d0:fc:08:31:ec:f8:6f:e6:fc:61:a8:b3:59:08:
                    61:3a:17:84:90:c0:8c:d6:f5:21:d5:12:42:56:4d:
                    a4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B1:CF:AA:FE:B8:68:29:97:A7:80:FE:05:9D:1F:EA:98:E6:91:AF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f15d26f-8f71-43a3-80b0-ce2c01880d7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:7440::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:32:4f:d2:15:12:b1:e8:15:ca:ac:2b:0c:7f:63:72:21:ec:
         a8:f5:e3:87:89:fc:c4:01:c1:b8:bd:00:b1:b0:21:df:6a:b4:
         e4:e7:42:28:6d:31:9f:4d:af:14:bb:5e:5c:cf:42:de:15:b0:
         dd:ec:47:55:6f:29:06:3f:3d:cb:a8:80:80:ae:fd:b5:57:87:
         75:14:50:8f:1c:70:7d:a5:a8:16:1a:07:1e:48:40:1a:32:49:
         32:61:e1:e7:c7:8f:14:50:53:8b:ec:87:c5:d5:cc:80:92:7a:
         12:10:b5:8c:64:84:3f:15:e3:57:56:d6:0e:93:70:30:00:be:
         39:70:95:bf:bc:2d:31:58:cc:b6:ea:ca:58:a0:37:76:a6:60:
         9c:7b:62:9a:28:db:5e:4f:7d:fb:00:6e:05:9b:f8:d6:39:58:
         17:70:a6:93:4c:22:1b:b1:ff:63:df:c1:e3:47:ad:9d:85:b8:
         28:86:c8:b1:af:a8:67:ad:ad:95:96:6f:d9:21:5d:94:89:76:
         9b:1f:33:33:88:34:35:00:6e:d3:fa:70:3d:b1:0a:0a:11:e1:
         18:88:5c:1d:79:d2:12:a3:fb:b0:23:61:b8:d4:3a:97:1a:44:
         1f:5d:a1:03:c9:dd:ae:4b:fd:7c:cd:b4:f0:50:7e:d8:1d:7e:
         3b:4a:5b:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:06:41 2026 by rpki-client