Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/586d6dac-fcf7-4c1d-9ea8-43c6a3e9de02.roa
File:                     586d6dac-fcf7-4c1d-9ea8-43c6a3e9de02.roa (raw, json)
Hash identifier:          H2UHaf49tOVuZvCyzWkjhNaDuwoKsl6YiUVADm0z6tU=
Subject key identifier:   37:79:47:DD:C3:06:C9:BC:DA:AB:A4:59:F1:2F:63:B5:92:39:C9:82
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       45C4B596A1E80B87E5BD8079AAAABC4DC8EF9091
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/586d6dac-fcf7-4c1d-9ea8-43c6a3e9de02.roa
Signing time:             Wed 11 Feb 2026 01:11:07 +0000
ROA not before:           Wed 11 Feb 2026 01:11:07 +0000
ROA not after:            Tue 12 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:8000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c4:b5:96:a1:e8:0b:87:e5:bd:80:79:aa:aa:bc:4d:c8:ef:90:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 11 01:11:07 2026 GMT
            Not After : May 12 23:59:59 2026 GMT
        Subject: serialNumber=466da6bec21a08f7afb0afdbcb92986c0287f585efcf7f4ec7ec3c7b6b4ce487, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d5:89:0b:76:8d:3b:a1:aa:bc:c2:b4:0c:ca:
                    39:8a:d3:42:07:65:9a:30:ad:d2:88:c3:7d:28:96:
                    29:8c:fb:58:b7:42:e8:50:35:ae:47:d5:fd:2b:21:
                    8c:23:62:21:30:42:1f:7e:03:3a:90:21:fb:b2:84:
                    0a:e9:01:18:88:01:17:99:21:f1:f0:3c:92:87:ab:
                    73:cd:a7:32:dd:cb:b6:de:d9:b2:6a:af:8a:8c:f4:
                    d1:96:cb:65:6f:56:3f:fd:93:2e:dc:cf:cd:04:b8:
                    23:d5:20:fe:37:37:07:80:bf:b9:08:1c:c7:43:19:
                    0e:d7:f0:41:25:86:5f:7d:bc:60:87:2b:e1:9f:38:
                    d1:59:cc:0f:11:f2:4d:4a:a6:55:a0:5f:bd:35:10:
                    37:35:05:1d:ad:e3:c0:38:6c:70:59:28:d7:83:a3:
                    79:00:ce:2c:f1:13:08:28:91:c6:37:0d:f6:42:1e:
                    2a:41:85:ec:52:19:09:2d:1a:ea:25:3e:1e:32:03:
                    b1:ba:c8:be:d6:8c:82:12:53:87:18:7a:7d:be:05:
                    ba:dc:f8:fd:7d:56:34:e1:39:00:2e:c9:16:59:25:
                    47:4a:31:3f:9d:d7:b6:f3:cf:81:16:9b:a4:21:0d:
                    ec:66:16:05:88:f0:b8:22:c5:bc:06:d6:92:d3:17:
                    7b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:79:47:DD:C3:06:C9:BC:DA:AB:A4:59:F1:2F:63:B5:92:39:C9:82
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/586d6dac-fcf7-4c1d-9ea8-43c6a3e9de02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         5b:6d:fa:b9:70:0b:5a:32:09:3e:56:3e:04:d9:b4:5b:19:63:
         f2:1b:0a:81:7b:e8:3d:25:d3:a8:68:e2:18:92:58:59:fd:53:
         fe:30:fc:ee:90:f5:0e:4b:26:66:53:c9:1a:59:43:37:94:af:
         6c:93:53:53:a0:00:1a:9b:af:f5:d2:6d:cf:3b:d3:28:83:a0:
         33:8d:56:2d:69:6e:42:b9:7c:db:dd:25:20:77:ff:96:8b:4b:
         77:f8:81:0c:0b:46:fb:12:9d:e6:a5:1f:78:d9:e5:83:f8:42:
         49:48:52:59:e7:1b:ea:81:95:02:15:21:f2:5c:75:e0:e8:37:
         9a:a7:1c:8c:8b:d5:27:ea:79:17:d8:20:d2:b7:02:bf:08:66:
         ac:6f:5b:d5:c1:53:99:e4:46:c8:8e:2e:87:32:f2:dc:9d:f0:
         ea:b0:ee:21:dc:6b:4f:97:81:3a:38:47:f7:6a:97:4f:24:35:
         e4:77:da:66:bc:7a:01:49:69:51:10:1a:1e:f3:87:17:19:c7:
         35:ba:a8:2b:ac:9b:23:39:54:3c:c1:17:4c:a3:2e:67:9e:3a:
         4e:3a:df:5d:d4:c9:8d:3f:cc:2a:4f:ab:c9:e0:bd:03:69:4a:
         8c:71:2b:f4:61:ed:4b:1e:f8:f7:5e:59:d6:e3:ff:11:e6:35:
         7b:4c:d6:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:26:04 2026 by rpki-client