Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34a79db6-083b-4ccc-8b7b-2e01a76ddbe2.roa
File:                     34a79db6-083b-4ccc-8b7b-2e01a76ddbe2.roa (raw, json)
Hash identifier:          aN/9BPOCXg1Rq3NRLxvpmt4y36WMqppkV6RQRLCvbq4=
Subject key identifier:   09:DF:F1:31:6F:1E:53:C0:55:DE:7C:A5:69:44:97:C5:D7:3F:80:E4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3ADD941CD7EE8E1AB2B9C8DBFBDC38A1458ECDA6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34a79db6-083b-4ccc-8b7b-2e01a76ddbe2.roa
Signing time:             Wed 25 Feb 2026 00:51:22 +0000
ROA not before:           Wed 25 Feb 2026 00:51:22 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1c::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:dd:94:1c:d7:ee:8e:1a:b2:b9:c8:db:fb:dc:38:a1:45:8e:cd:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 25 00:51:22 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=007dbbcc2e5d737cbe3d12979b39467d72d9a882880290d47a60a66269bb5e94, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:47:85:8c:ea:e1:d3:8c:78:4e:23:e2:8a:6d:
                    1d:f8:28:28:03:ee:9c:eb:83:2c:82:3e:5a:d0:26:
                    26:9a:ff:de:5e:f8:11:d3:a6:96:d7:97:0d:df:1c:
                    5f:67:62:cc:50:27:84:78:57:e3:43:14:3e:17:15:
                    62:eb:97:f1:5f:fd:7a:2e:00:c0:37:b6:81:39:f8:
                    9c:34:43:14:8d:fa:7b:fa:14:fb:33:72:c5:e5:6a:
                    12:a4:74:e6:18:cd:fe:54:f2:6f:96:1f:c1:91:0d:
                    5d:0c:8e:a8:df:e9:4f:a3:f8:22:4b:87:95:bf:ab:
                    70:1f:38:92:78:e4:69:bd:b3:5c:d4:ee:7e:7f:87:
                    c0:4e:1a:7c:91:9b:0f:1b:d4:3c:75:e0:2c:13:d9:
                    52:0e:e5:de:00:ae:3b:36:b0:d8:36:7e:6b:c2:8c:
                    bc:57:c3:6b:b3:f8:87:f6:56:6b:34:92:80:3d:ad:
                    e7:04:a6:56:30:d1:e8:00:05:b2:16:29:5f:eb:af:
                    2f:44:50:3d:fd:44:2e:f6:ec:95:00:4b:c8:2a:d1:
                    95:03:9e:be:f2:69:e0:c1:f2:97:dc:9e:a6:9d:a8:
                    95:0a:81:a5:47:83:45:d8:11:9e:51:3e:11:5e:44:
                    0b:c3:a1:41:54:da:85:a3:e3:54:6f:15:b5:fb:f2:
                    e3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DF:F1:31:6F:1E:53:C0:55:DE:7C:A5:69:44:97:C5:D7:3F:80:E4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34a79db6-083b-4ccc-8b7b-2e01a76ddbe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1c::/38

    Signature Algorithm: sha256WithRSAEncryption
         ce:cf:93:aa:ca:1e:5e:b9:9d:30:5f:37:9d:ca:03:b3:4a:cc:
         6e:ff:4a:d6:6a:5d:e5:aa:61:15:d7:ac:ed:f6:09:85:ef:41:
         d7:60:b1:6e:f5:5d:81:a2:83:c4:4a:61:10:e7:6d:ab:39:fa:
         f8:f7:62:20:cf:83:75:14:f8:9b:8f:3a:5e:02:ab:c3:e9:41:
         45:1a:fe:ec:7a:6b:7d:91:67:3a:20:43:ec:c3:32:8c:01:c4:
         1e:5e:78:d2:3d:4e:50:dc:00:85:d5:51:be:fe:48:22:3d:5e:
         5f:36:c0:d2:5d:d1:1e:ca:d1:7b:67:e2:55:f7:ce:26:de:1e:
         fc:c7:1d:6d:65:fb:c0:31:e8:75:9c:3b:9f:dc:d5:c8:d3:17:
         96:51:8c:ce:4d:ac:bd:73:f4:97:7d:45:a3:01:de:f0:61:9d:
         de:57:3a:af:13:5a:ef:f6:99:c9:62:94:2a:55:76:04:20:fa:
         08:09:91:7e:84:48:1f:af:5f:48:9d:2f:83:47:f3:ed:b8:19:
         dc:51:3a:85:db:24:c6:f4:36:47:cc:40:b7:3e:3b:bf:7c:64:
         89:92:16:ce:ee:50:59:c8:11:2e:99:0e:c9:89:d5:7c:47:95:
         d7:1e:78:ed:0d:4e:4b:e3:ab:1d:77:43:15:bd:c2:56:63:45:
         64:57:4b:31
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:08:57 2026 by rpki-client