Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c7f6cd5-c35b-4fca-ba21-e9855ddd0172.roa
File:                     3c7f6cd5-c35b-4fca-ba21-e9855ddd0172.roa (raw, json)
Hash identifier:          4RplFvIQVJP5uwdmHS0ZQ/8WHr+MDro0PUXG6IfiBS0=
Subject key identifier:   59:E6:89:48:7B:D0:C7:8B:89:52:80:D7:84:33:FD:28:74:9E:66:84
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7AC1D770C49EE9CA7B83FE9D22B9997F179ADB56
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c7f6cd5-c35b-4fca-ba21-e9855ddd0172.roa
Signing time:             Sun 15 Feb 2026 00:30:42 +0000
ROA not before:           Sun 15 Feb 2026 00:30:42 +0000
ROA not after:            Sat 16 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f60:4000::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c1:d7:70:c4:9e:e9:ca:7b:83:fe:9d:22:b9:99:7f:17:9a:db:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 15 00:30:42 2026 GMT
            Not After : May 16 23:59:59 2026 GMT
        Subject: serialNumber=313e26aa7ef5de3cf30dd92c6bc6841a96697d6c5902db95e27001e8d44bc630, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:bb:1a:d0:c5:37:c1:93:7f:32:f7:5e:bc:
                    53:f0:9d:40:15:f3:ef:f7:20:a7:ba:e2:61:11:eb:
                    f8:f9:bb:a5:f3:f3:49:8c:86:70:05:4f:3f:51:ed:
                    a3:b0:9d:86:5c:5e:8f:e4:5a:a0:4e:0d:9a:ce:32:
                    9c:5f:91:11:a4:d3:a8:2c:03:77:54:7e:4f:6a:21:
                    ff:48:03:bd:dc:46:f3:c2:ff:2d:a6:66:dd:e7:c6:
                    44:ed:68:84:74:bd:bd:91:14:54:ce:83:a4:fe:36:
                    7a:d9:35:d6:59:10:31:89:e5:ef:4e:bc:c8:ad:e6:
                    e9:ad:7b:ba:70:16:a5:53:87:cc:d0:2a:82:3b:04:
                    63:d1:25:07:6d:35:10:6a:11:84:69:e2:eb:e2:85:
                    5e:3d:56:94:20:c7:b3:50:92:6b:4d:b5:02:e5:7f:
                    d0:94:d7:fc:d4:78:69:52:c1:38:34:dd:eb:7b:27:
                    f3:a5:13:f2:6d:06:40:0d:67:9d:e4:ae:c3:5a:ac:
                    e6:26:55:7c:bb:55:be:06:34:b8:b7:bf:cf:d8:31:
                    10:c4:51:25:6c:fc:b3:8a:6f:7b:03:3c:29:2f:8d:
                    e2:1a:92:4d:94:19:e5:dd:01:a3:16:06:ec:af:5c:
                    e6:91:58:f8:93:07:e7:dc:83:61:d2:b8:f4:8a:2b:
                    b2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E6:89:48:7B:D0:C7:8B:89:52:80:D7:84:33:FD:28:74:9E:66:84
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c7f6cd5-c35b-4fca-ba21-e9855ddd0172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f60:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         cc:07:b3:a6:63:a1:85:b7:89:e2:73:1a:b7:d6:22:4a:e9:89:
         c1:f7:86:be:0e:f2:6d:9f:d9:fd:c9:e8:60:c0:b6:5f:09:53:
         23:b2:54:21:38:64:18:c7:ee:0e:c9:51:e8:95:17:3d:07:ec:
         19:a5:07:1d:60:41:01:a2:b7:37:3b:98:7c:79:8c:7e:6f:04:
         1e:c7:f9:81:5a:4d:46:89:1d:30:30:ef:cc:f7:41:ed:54:13:
         d2:14:38:90:99:6e:72:d1:34:14:40:7b:fc:a5:34:0e:6e:20:
         ee:c5:80:00:65:11:6a:5b:e3:a3:02:08:57:cb:09:b5:e6:08:
         b4:02:22:ad:af:64:32:97:28:76:4a:27:fb:da:71:76:34:4f:
         5f:35:3b:a2:59:d9:08:4d:43:1c:42:c3:50:2a:f9:28:e3:31:
         0c:4f:3a:e0:41:71:74:64:52:0c:f3:19:7e:f3:28:e3:64:b6:
         be:5a:2e:49:52:f8:28:09:c3:45:4b:84:70:48:67:66:78:f8:
         ef:22:29:e0:83:a0:8e:ca:c7:92:03:ad:43:1f:18:38:58:47:
         f3:81:e5:98:1d:75:6d:7d:09:71:ea:df:8e:6b:84:aa:0a:10:
         79:94:28:52:02:ce:5a:0b:6a:07:da:ec:d8:b5:79:8a:61:22:
         4a:da:68:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:11:40 2026 by rpki-client