Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/332eb12c-32e8-4671-8362-1984f7006f09.roa
File:                     332eb12c-32e8-4671-8362-1984f7006f09.roa (raw, json)
Hash identifier:          TirqIWw2AvWGNSf4GTX3dDSq1gafYKgg5doulDBvo8c=
Subject key identifier:   D2:E9:80:B8:42:23:F5:F7:E2:E3:22:2F:D4:7F:4B:66:89:42:61:2B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1CD3CA4FC0C137CCD998C383CFF35A9DE1FD2B06
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/332eb12c-32e8-4671-8362-1984f7006f09.roa
Signing time:             Wed 25 Feb 2026 00:20:09 +0000
ROA not before:           Wed 25 Feb 2026 00:20:09 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1e::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d3:ca:4f:c0:c1:37:cc:d9:98:c3:83:cf:f3:5a:9d:e1:fd:2b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 25 00:20:09 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=df430d3eabb8d06d1700ff2f5001642760fd027276edb6331fa843b32ead625f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e4:ad:c2:25:5c:ac:e5:2b:66:55:d6:09:8d:
                    d3:f3:42:be:ac:bf:f7:03:0e:0e:f7:a1:af:db:07:
                    84:d3:f8:96:eb:14:28:ff:d8:e5:16:20:d0:18:5c:
                    53:05:57:21:ab:3a:26:6d:31:02:58:0d:cd:1f:f4:
                    5b:38:81:13:fd:c2:24:8d:10:56:37:fb:d2:e2:e0:
                    86:54:b7:83:d2:cd:a5:80:19:0e:a4:a0:4e:54:90:
                    18:8b:a8:88:28:57:9f:dd:fa:e6:f6:ec:e0:26:b9:
                    95:c2:12:cf:08:d9:0e:4a:bf:89:08:f8:08:3b:08:
                    48:b9:7d:72:47:10:9f:39:6f:b8:27:cd:61:59:99:
                    2c:cc:04:39:43:74:55:1d:7b:2f:db:2b:cb:69:e5:
                    0b:f9:53:0e:29:94:5d:b2:4f:3e:51:dc:f8:fb:80:
                    df:86:6e:22:4b:97:0e:9e:14:b8:3f:f1:08:bd:33:
                    36:f5:0a:6d:27:95:eb:e6:5e:78:5c:8e:3c:5d:16:
                    33:29:df:d2:f8:75:49:4f:28:52:90:4f:82:23:1e:
                    2e:6f:a6:48:42:e1:2c:0c:ac:0a:00:3a:b6:3e:4a:
                    54:1d:26:17:50:30:35:62:93:56:e6:8d:bc:74:1d:
                    bd:45:fd:de:51:55:be:b9:ad:1a:0d:69:f7:5e:47:
                    29:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E9:80:B8:42:23:F5:F7:E2:E3:22:2F:D4:7F:4B:66:89:42:61:2B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/332eb12c-32e8-4671-8362-1984f7006f09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1e::/38

    Signature Algorithm: sha256WithRSAEncryption
         3f:6f:5f:e9:d4:8a:ed:81:97:21:48:c4:ec:2b:d3:b2:50:9f:
         ce:81:da:92:1a:90:9f:c3:82:2e:58:64:dc:c9:b8:63:7f:ca:
         20:52:91:12:3b:b6:d6:04:d4:ad:77:c5:4f:ae:46:08:09:23:
         39:41:c6:a3:46:63:3e:15:78:e4:c7:7c:ce:a5:4e:ae:69:1c:
         6f:e4:7a:7a:2c:da:51:dd:43:b0:f1:01:37:3e:ab:ca:b8:64:
         ac:b5:1d:64:96:70:03:14:72:af:e4:23:51:ea:bf:44:4d:54:
         95:24:d7:64:a9:8a:0a:70:fa:f5:be:b2:db:d3:67:09:92:e6:
         06:38:b9:2b:ef:d3:a4:c2:a2:70:44:40:ec:56:92:bb:e4:55:
         25:37:eb:48:b9:93:31:b3:b2:1e:fc:28:6d:cf:ad:07:a0:10:
         33:40:9f:c7:b7:c0:90:e1:9c:f4:ae:29:d8:ea:7b:94:0f:1a:
         4d:78:b9:c7:fd:72:6b:fb:19:76:5d:f5:34:73:e0:39:71:21:
         ab:f5:03:05:c5:f2:b3:28:7f:e8:b0:89:cf:42:41:c9:55:fb:
         17:9c:e7:9f:a9:77:4a:44:ed:49:45:d4:55:67:1e:03:7e:f1:
         b9:3b:6e:1b:e6:08:e1:70:80:dc:f9:86:2f:06:db:6f:16:0f:
         83:00:de:50
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:04 2026 by rpki-client