Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/600d62a4-e5e5-46cd-9b8b-9a7f3ddeac2d.roa
File:                     600d62a4-e5e5-46cd-9b8b-9a7f3ddeac2d.roa (raw, json)
Hash identifier:          QbGA/yhnEAGtUP9H3J+8YiZzk7vKD8VoFHfEpyaJ60k=
Subject key identifier:   7B:DF:CF:81:0D:92:B6:22:F6:B0:0C:F6:47:F3:88:A3:FA:3C:94:C3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2EF4C85AC243F23EE9B7CB5F4171FBC3365857D8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/600d62a4-e5e5-46cd-9b8b-9a7f3ddeac2d.roa
Signing time:             Tue 24 Feb 2026 01:31:05 +0000
ROA not before:           Tue 24 Feb 2026 01:31:05 +0000
ROA not after:            Mon 25 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:a440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f4:c8:5a:c2:43:f2:3e:e9:b7:cb:5f:41:71:fb:c3:36:58:57:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 24 01:31:05 2026 GMT
            Not After : May 25 23:59:59 2026 GMT
        Subject: serialNumber=58573964773009ea6aa47c973422103ec252b2734f11e871d420a804673ca895, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3b:c6:56:6a:ac:ff:1d:de:a3:e1:21:1b:58:
                    f7:c9:d8:05:fe:0a:67:53:c1:a7:3b:03:81:39:ce:
                    de:a9:db:59:5b:81:fb:b0:ac:97:b1:7b:04:98:46:
                    34:ad:62:96:aa:73:ad:b6:46:9a:9e:de:ae:48:ae:
                    5b:6d:28:f8:98:0e:4a:db:5b:1e:90:28:e3:bf:e4:
                    2e:93:e1:f2:e1:fa:e9:a4:93:b7:63:51:38:0e:ad:
                    db:69:be:f9:c1:5e:68:a1:bd:e6:7b:7c:34:90:ee:
                    b8:44:5f:cd:e8:00:41:c2:4e:d0:9c:97:ee:78:94:
                    69:08:17:57:93:f2:2b:80:73:dc:13:15:81:ed:c4:
                    e8:81:c6:82:aa:03:da:d7:c9:3f:aa:7f:c8:4c:5d:
                    86:f7:d3:74:72:36:d5:fd:e8:63:c7:ba:63:7e:61:
                    a8:01:bf:bd:3a:32:ff:d1:48:bc:60:aa:3d:a7:3d:
                    67:2f:45:72:d5:35:41:45:2e:9c:44:81:52:59:75:
                    e5:87:f6:94:b0:e0:1b:8f:04:57:c7:d1:73:ba:1d:
                    42:8a:11:6f:7f:6f:b6:c1:dd:2a:f8:dd:c6:8f:1f:
                    2b:76:80:81:8e:58:7e:34:de:11:d3:33:ad:13:8e:
                    44:bc:79:c2:4e:f3:cb:cd:17:f8:93:d8:a5:47:74:
                    f2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DF:CF:81:0D:92:B6:22:F6:B0:0C:F6:47:F3:88:A3:FA:3C:94:C3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/600d62a4-e5e5-46cd-9b8b-9a7f3ddeac2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:a440::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:14:89:2d:7c:58:73:ae:97:2f:3e:1c:77:24:2d:4e:09:5f:
         af:04:fb:c7:b9:06:18:09:eb:b5:b4:75:0d:71:ee:6a:b0:64:
         c3:5e:fc:0d:e9:6b:21:99:ed:20:e4:ec:d6:6f:57:09:f9:60:
         8f:b4:dc:37:76:b9:ef:7e:cb:d6:a0:e2:ba:63:1e:d8:df:26:
         18:0d:0b:47:fc:75:41:0f:c7:5c:11:ef:87:f4:66:09:b2:cc:
         e0:7d:38:d7:c7:6b:fc:59:44:75:8c:9c:43:c4:04:6e:8b:4a:
         7c:49:29:b3:b4:55:c4:c8:6d:9d:0b:f7:b6:45:4b:9f:d0:e0:
         69:a0:56:59:99:3e:54:ff:24:af:5c:3c:f7:1b:06:7c:e7:7f:
         ef:3f:78:99:cb:5a:f4:6a:75:60:60:6b:a6:13:ad:07:a7:9a:
         54:75:2e:24:f3:d7:6f:76:07:77:7e:f7:17:dd:de:5b:85:ab:
         2d:82:8d:80:35:75:df:08:8f:76:91:da:1c:72:b2:f9:88:28:
         fe:e1:3f:bb:74:9c:6b:df:90:34:f8:4e:bf:90:03:d3:45:bc:
         3e:7b:51:b3:82:07:3e:d8:43:b7:3e:2b:15:36:5f:f4:2c:42:
         74:40:19:1b:32:81:d1:33:60:bc:a4:df:ec:42:60:e0:52:8e:
         cd:0b:ac:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:37:36 2026 by rpki-client