Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/317aa5f2-e2fd-44a6-8ee1-f18aa61c0689.roa
File:                     317aa5f2-e2fd-44a6-8ee1-f18aa61c0689.roa (raw, json)
Hash identifier:          tmxbO+lOFheurichQZcgXOXnLku0RJqApvUu27pmA7g=
Subject key identifier:   DC:43:97:8C:BF:2B:5C:41:90:FC:BD:E1:35:98:4B:E4:BD:3C:86:C2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       193564A46190904D41C79047DB9537EDD72BE7DB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/317aa5f2-e2fd-44a6-8ee1-f18aa61c0689.roa
Signing time:             Wed 25 Feb 2026 02:30:47 +0000
ROA not before:           Wed 25 Feb 2026 02:30:47 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f11:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:35:64:a4:61:90:90:4d:41:c7:90:47:db:95:37:ed:d7:2b:e7:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 25 02:30:47 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=02a614f6b4078bc0ebd8a09f9dd69edbf84af1421818b965240ec4864682e452, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2e:13:e9:12:37:69:12:3f:7f:cd:7a:99:5c:
                    39:b6:35:22:cf:bf:7f:22:6b:b4:96:41:bf:32:24:
                    78:05:e0:3f:2f:f0:da:2e:5a:7e:b9:a8:e1:db:ea:
                    b4:22:cc:43:d1:af:c2:ca:c9:b8:b1:67:99:97:9e:
                    ac:c1:4c:d8:da:08:21:4f:b6:e0:ff:60:9d:5d:c1:
                    90:50:dd:d5:86:ef:6d:64:9e:98:11:de:64:bb:75:
                    06:6e:42:33:ad:c2:9e:71:11:53:90:6d:39:79:d7:
                    cb:25:d8:c6:61:b8:15:a9:53:98:98:96:3c:f4:61:
                    5f:b4:18:c0:e6:ce:c3:b3:91:9d:9a:95:59:5d:76:
                    79:a4:88:08:2a:7b:23:b1:2a:f3:c5:96:b3:56:c2:
                    fc:25:fe:8a:1c:b5:bd:8c:c1:ab:f6:ab:f3:f4:e5:
                    c7:14:67:f5:59:d0:91:8c:aa:e1:41:9a:20:b7:5e:
                    1c:d8:6e:c1:1f:2b:77:1f:ba:4d:a0:79:17:c3:71:
                    aa:31:3c:d5:dd:41:c3:71:4f:3f:14:a5:c2:e7:6d:
                    a9:e5:e0:be:ac:39:2c:73:75:6d:66:39:68:49:fe:
                    fb:6d:9e:bd:a9:bc:4f:ce:2d:0b:33:42:0a:ca:88:
                    d0:bc:98:bd:d4:aa:39:e7:32:b0:74:ec:ae:71:80:
                    5e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:43:97:8C:BF:2B:5C:41:90:FC:BD:E1:35:98:4B:E4:BD:3C:86:C2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/317aa5f2-e2fd-44a6-8ee1-f18aa61c0689.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f11:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         69:08:55:46:38:07:84:7d:c0:34:fa:ba:86:78:8f:1a:8e:db:
         b9:a7:1d:27:66:0c:95:b3:df:76:95:1b:33:e2:27:84:aa:c5:
         d5:76:05:53:f1:af:4a:91:a9:3b:6d:ac:5b:cd:14:3b:42:a2:
         6f:9e:2d:27:4e:fb:55:89:47:83:57:02:ac:f1:88:0d:98:83:
         b9:1f:f9:6f:11:f2:f0:3d:16:51:3d:d7:84:28:9c:73:59:a7:
         f6:6d:12:b2:a4:86:e7:1d:a3:53:98:a6:b7:05:2f:3e:82:fb:
         d2:12:bc:6c:7c:6e:8c:e4:61:9e:5a:05:98:bd:00:b4:f7:30:
         f5:7c:b3:0c:bd:9c:2e:ee:ad:3d:26:da:e7:e4:79:d1:97:c7:
         9d:6d:39:e5:bc:b7:b6:35:1e:4f:8d:2a:1c:b4:6a:36:a6:14:
         47:95:61:f9:bc:42:7d:31:94:5e:ee:14:a4:37:14:3f:df:91:
         ce:80:b2:e6:c2:6c:ca:7e:8f:50:dc:3f:e3:8c:dd:31:d7:51:
         a2:aa:45:b2:91:c0:81:a8:53:bc:66:60:d0:5f:59:5a:7f:43:
         e2:4c:cb:cb:3d:02:fb:a4:99:f0:81:62:86:da:0a:f9:47:c7:
         91:ae:02:41:56:fc:18:64:dc:9c:a8:bd:32:37:1d:ab:4e:17:
         86:d0:30:82
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUGTVkpGGQkE1Bx5BH25U37dcr59swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDIzMDQ3WhcNMjYwNTI2MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMmE2MTRmNmI0MDc4YmMwZWJkOGEwOWY5ZGQ2OWVkYmY4
NGFmMTQyMTgxOGI5NjUyNDBlYzQ4NjQ2ODJlNDUyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqLhPpEjdpEj9/zXqZXDm2NSLPv38ia7SWQb8yJHgF4D8v
8NouWn65qOHb6rQizEPRr8LKybixZ5mXnqzBTNjaCCFPtuD/YJ1dwZBQ3dWG721k
npgR3mS7dQZuQjOtwp5xEVOQbTl518sl2MZhuBWpU5iYljz0YV+0GMDmzsOzkZ2a
lVlddnmkiAgqeyOxKvPFlrNWwvwl/ooctb2Mwav2q/P05ccUZ/VZ0JGMquFBmiC3
XhzYbsEfK3cfuk2geRfDcaoxPNXdQcNxTz8UpcLnbanl4L6sOSxzdW1mOWhJ/vtt
nr2pvE/OLQszQgrKiNC8mL3UqjnnMrB07K5xgF5FAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU3EOXjL8rXEGQ/L3hNZhL5L08hsIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzMxN2FhNWYyLWUyZmQtNDRhNi04ZWUxLWYxOGFhNjFjMDY4OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8RgDANBgkqhkiG9w0BAQsFAAOCAQEAaQhVRjgHhH3ANPq6hniPGo7b
uacdJ2YMlbPfdpUbM+InhKrF1XYFU/GvSpGpO22sW80UO0Kib54tJ077VYlHg1cC
rPGIDZiDuR/5bxHy8D0WUT3XhCicc1mn9m0SsqSG5x2jU5imtwUvPoL70hK8bHxu
jORhnloFmL0AtPcw9XyzDL2cLu6tPSba5+R50ZfHnW055by3tjUeT40qHLRqNqYU
R5Vh+bxCfTGUXu4UpDcUP9+RzoCy5sJsyn6PUNw/44zdMddRoqpFspHAgahTvGZg
0F9ZWn9D4kzLyz0C+6SZ8IFihtoK+UfHka4CQVb8GGTcnKi9Mjcdq04XhtAwgg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:08:39 2026 by rpki-client