Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26528af5-555a-4ae6-8cf4-6721ce84a467.roa
File:                     26528af5-555a-4ae6-8cf4-6721ce84a467.roa (raw, json)
Hash identifier:          D6pMm7I4wR2lAV+8IhtIsD3qYT25FFLGKQcXJKPgqXQ=
Subject key identifier:   E4:4A:73:FE:9D:C4:B3:50:DD:E3:9D:C0:F0:C7:91:FF:B4:6C:AE:33
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5058DF3519C7EDAB30F14F51E541FD5125682175
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26528af5-555a-4ae6-8cf4-6721ce84a467.roa
Signing time:             Tue 24 Feb 2026 00:30:38 +0000
ROA not before:           Tue 24 Feb 2026 00:30:38 +0000
ROA not after:            Mon 25 May 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1fff:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:58:df:35:19:c7:ed:ab:30:f1:4f:51:e5:41:fd:51:25:68:21:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 24 00:30:38 2026 GMT
            Not After : May 25 23:59:59 2026 GMT
        Subject: serialNumber=22454a99b4e40e6cdf54c48b19854e1b5af2fed386b9c0dbf5482b1e02d09b5a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d3:85:48:41:b6:5a:ac:4f:d9:55:7e:71:4d:
                    c5:b1:30:ff:cd:02:87:7f:2a:15:c9:16:e9:42:81:
                    80:8c:e1:99:b0:c5:f1:e4:b1:a1:f5:5e:c8:3b:d1:
                    9c:64:88:78:92:41:d4:f5:87:57:c8:e7:95:22:77:
                    9a:20:b0:0d:8f:65:10:3e:8b:67:aa:c1:34:8f:74:
                    ca:37:d9:76:27:55:e3:ca:32:7d:42:df:55:6c:d7:
                    cf:85:de:7b:57:b9:97:d1:23:c8:e0:13:df:a0:37:
                    c2:3c:5c:08:53:6d:3d:4c:c2:fb:4f:57:25:55:93:
                    6d:fc:89:32:6d:bd:36:d2:be:4b:97:9a:34:0e:91:
                    5d:c6:83:6f:d2:1b:eb:09:3d:54:44:bf:3c:dd:51:
                    5d:e7:c2:00:da:88:56:d4:96:5d:63:eb:94:17:0f:
                    08:69:c5:7c:03:e7:e4:cf:a1:45:f8:b3:6c:11:27:
                    ad:2d:bf:5f:c4:66:e4:a5:38:04:f0:53:a9:e9:45:
                    61:da:4e:25:97:75:03:84:e0:bc:63:99:2a:54:a3:
                    5d:c1:55:92:11:4f:f4:b2:e5:0e:42:c7:14:0e:12:
                    5f:fe:79:5b:22:7c:c5:b8:e0:a1:5c:8e:ad:ee:9d:
                    d4:db:f1:20:0d:7f:45:e7:f1:47:aa:c2:f9:50:8c:
                    48:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4A:73:FE:9D:C4:B3:50:DD:E3:9D:C0:F0:C7:91:FF:B4:6C:AE:33
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26528af5-555a-4ae6-8cf4-6721ce84a467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:80:e5:aa:76:a2:54:25:a3:9f:be:1d:dd:19:67:b9:c8:e4:
         42:e2:13:17:51:1b:dd:48:7d:26:dc:6b:40:a8:dc:ea:56:10:
         72:2c:bf:40:23:21:7b:51:a0:ea:b6:7c:e9:dc:27:64:c5:02:
         18:d7:35:ff:d8:43:d7:68:43:bb:c7:f0:b5:0e:22:7f:33:e5:
         87:c8:5e:ea:f0:11:e5:1b:89:0b:4c:ad:8e:e9:a7:c1:29:fb:
         f7:57:0c:f3:6d:7f:0f:95:13:fd:b2:27:b3:e6:1d:61:f8:e3:
         6f:22:af:31:c2:cc:d9:d2:c2:2c:64:f6:70:44:95:22:f6:60:
         f2:79:ad:e0:75:2a:b8:66:5a:c0:0c:3d:1d:13:eb:d1:8e:36:
         07:e2:01:3f:98:85:b8:80:fe:dd:f3:fd:4e:4d:43:f1:fa:21:
         c4:01:16:3b:c7:4d:6c:b7:36:26:b7:03:8a:48:12:e4:1a:c9:
         2e:2d:dc:ab:12:cb:78:aa:ef:ab:1a:16:ae:26:ea:73:da:46:
         aa:84:5a:d1:51:68:ec:bd:6c:ec:3c:ba:fc:52:43:ff:d1:09:
         1e:5a:8d:e6:2e:9e:17:13:91:d4:27:06:dd:c6:99:65:44:a8:
         ed:82:97:30:13:96:a5:e1:c0:d5:d2:a0:11:de:22:5e:e5:85:
         e1:e1:47:1d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:51 2026 by rpki-client