Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/445ec936-4ab3-46e7-bfa6-2ffd1095678c.roa
File:                     445ec936-4ab3-46e7-bfa6-2ffd1095678c.roa (raw, json)
Hash identifier:          0WNmxmjs9ftuz0q4Koa4nlMaWTpC+/VTLKHTLfYwVCw=
Subject key identifier:   97:EF:D1:B7:2C:DB:5F:88:96:6D:7E:59:59:32:C0:9F:39:8A:0E:EB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       26A3E4CD3BDABDAB6538191613F90E987C6FB378
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/445ec936-4ab3-46e7-bfa6-2ffd1095678c.roa
Signing time:             Wed 25 Feb 2026 00:10:50 +0000
ROA not before:           Wed 25 Feb 2026 00:10:50 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fb9:c000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a3:e4:cd:3b:da:bd:ab:65:38:19:16:13:f9:0e:98:7c:6f:b3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 25 00:10:50 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=8bc0b3ba2a0e3ddac049ccc06f059dfbc96157c6298cc8af1a313163d6135eeb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:93:f4:fc:ef:c9:9d:8e:eb:d6:19:40:a0:af:
                    7a:e5:f6:6b:a2:04:e5:3f:20:ba:43:56:72:de:ac:
                    f6:46:e0:03:c8:37:2f:09:91:07:60:6f:f6:98:d3:
                    aa:de:49:7b:c6:d3:09:e1:ef:8a:40:78:bd:79:3e:
                    86:cf:ac:af:09:b8:fb:11:99:2d:db:ff:a7:b1:0e:
                    3c:ab:ab:5d:ef:14:58:79:21:0d:9f:84:00:46:88:
                    f1:0c:cc:39:96:17:35:e7:b2:6a:da:07:03:0d:8f:
                    cf:ca:f6:7f:23:cd:2a:0b:95:fb:ee:e1:9c:5e:e2:
                    fd:8d:6f:55:19:1e:2c:99:ea:34:63:7e:2f:e8:d1:
                    a4:d9:82:8a:00:ec:15:37:cb:f3:f2:61:fe:c6:57:
                    83:12:ea:c2:41:b2:4b:10:7f:95:f6:50:e3:0b:24:
                    c4:dd:eb:cf:7a:ed:35:5e:57:b3:9d:13:af:93:4a:
                    0b:fa:47:8f:dc:e5:03:f0:cd:d6:75:e0:a6:1d:59:
                    ca:96:98:46:ba:1a:0c:60:a4:c6:f3:1a:11:ea:ad:
                    b8:9b:9e:9d:61:3a:df:a6:58:4b:ca:a0:d7:00:89:
                    d6:8c:55:fd:e4:5f:07:00:d7:29:a9:24:a7:36:95:
                    23:41:e0:96:7a:ef:1c:4c:01:63:c7:df:23:86:7f:
                    ce:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EF:D1:B7:2C:DB:5F:88:96:6D:7E:59:59:32:C0:9F:39:8A:0E:EB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/445ec936-4ab3-46e7-bfa6-2ffd1095678c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb9:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6b:1b:af:4f:07:aa:7e:af:d0:e6:06:72:1c:06:1a:d2:d6:78:
         7f:03:13:ba:bf:e1:14:91:b7:99:a8:fd:30:db:cf:96:03:15:
         c4:db:95:d5:ac:00:c4:86:4a:47:10:ff:5e:f4:d7:4c:8a:e5:
         ed:41:06:0e:ae:09:08:98:9d:80:e4:9e:5a:2c:ef:23:df:ec:
         d9:70:4b:14:bf:f9:d9:b7:b5:c3:1a:07:1f:e2:b5:5e:8d:d5:
         f6:8e:70:a4:1c:0b:47:f0:d0:7b:07:24:c5:80:59:90:68:a6:
         00:95:7b:04:67:4f:fe:5a:ce:29:c4:39:58:af:dd:87:70:75:
         fa:b9:32:7c:f2:c9:21:d4:77:5e:b3:d2:0e:33:bf:58:40:d4:
         3b:fb:a9:3d:4d:67:ce:6d:19:5c:70:52:ac:94:05:4d:14:c7:
         14:99:53:8b:ac:20:c5:69:14:96:f6:fa:f8:51:24:f5:74:a6:
         d8:1a:98:e9:d8:1a:e2:e3:a7:8c:2b:01:c3:f3:b8:a0:73:52:
         16:48:25:3a:39:be:46:58:2b:7f:af:98:7d:1a:b5:7b:a3:f4:
         d9:a2:60:5d:4f:62:cd:50:4b:a4:05:8c:fe:a8:ef:8b:ab:b9:
         82:fb:8d:e0:d2:6b:9a:82:c7:9c:ca:4e:4a:8b:44:06:e0:da:
         cd:dd:77:93
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:16:03 2026 by rpki-client