Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b1c9dcb-93fb-441d-8015-1d13f8a272fc.roa
File:                     6b1c9dcb-93fb-441d-8015-1d13f8a272fc.roa (raw, json)
Hash identifier:          cO5vmuyEM+7kNqNpf89C6Abt4odlEHsxKloCPdoT33M=
Subject key identifier:   7E:DA:62:66:2F:70:FE:09:31:21:F3:0F:8E:18:32:64:06:B9:A3:3B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5DA2D061EF0FBAB6C4A9A6E6462E5313A3442400
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b1c9dcb-93fb-441d-8015-1d13f8a272fc.roa
Signing time:             Wed 25 Feb 2026 02:10:35 +0000
ROA not before:           Wed 25 Feb 2026 02:10:35 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:2080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a2:d0:61:ef:0f:ba:b6:c4:a9:a6:e6:46:2e:53:13:a3:44:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 25 02:10:35 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=981556b263220b4b3dfc2814b626accc0fcb5620cf0a24921c631c68c8313fa8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c2:8b:f6:fb:59:4f:6e:2c:ff:f0:f9:26:d2:
                    b5:34:c9:c4:79:b3:82:dd:db:7d:b3:96:43:1a:b0:
                    11:09:0b:7e:89:32:ae:95:7d:5b:d0:60:5d:83:50:
                    b0:b8:76:5b:fa:25:49:5e:b0:5b:5f:10:46:fb:e7:
                    53:4c:85:66:bb:96:d2:df:5b:c8:05:ed:dc:1a:9d:
                    74:10:71:60:15:58:bd:c2:37:03:7c:31:9d:b4:4b:
                    45:1c:79:3b:64:f3:8e:27:24:10:e5:3b:1a:fa:b0:
                    8a:a5:a4:cd:3e:89:f0:10:fb:48:28:01:ca:d0:f5:
                    92:7c:68:da:f2:cc:f6:75:00:8b:a2:d9:8d:8d:e2:
                    4d:0b:72:3f:a7:03:15:d8:c0:36:c5:80:66:d0:bb:
                    53:f0:6f:20:cb:c6:95:2e:de:51:a8:53:90:85:9e:
                    2b:95:80:65:5d:ae:88:f5:e2:df:3c:8f:92:a3:1b:
                    c6:7e:12:11:db:1c:32:b9:10:0f:f9:bb:2a:79:bc:
                    10:27:90:7e:97:b3:d1:98:bb:68:8a:ca:f1:95:71:
                    4a:5f:3e:fb:28:26:bf:27:8c:5b:a2:ea:ee:e5:0b:
                    4d:ec:21:23:c3:82:40:16:c0:76:ab:7d:29:e8:22:
                    7d:e1:0c:e6:17:38:4e:3d:43:06:03:4a:44:ea:a3:
                    76:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DA:62:66:2F:70:FE:09:31:21:F3:0F:8E:18:32:64:06:B9:A3:3B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b1c9dcb-93fb-441d-8015-1d13f8a272fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:2080::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:4b:7b:0d:22:7d:66:bb:90:4f:92:f5:70:b5:52:89:3d:1d:
         4d:38:ee:25:a8:9e:f3:50:ec:17:3f:5b:d7:16:96:ea:04:d7:
         71:70:bb:59:03:b0:a5:c9:f3:98:0a:66:36:00:1c:3b:3c:04:
         61:08:fe:65:61:5d:bc:cd:ab:df:78:c0:b0:82:20:f8:b8:54:
         42:e1:8f:ea:68:05:f1:ee:72:ec:36:17:f4:a0:80:a7:29:6b:
         bc:db:42:23:fa:de:47:8d:95:c1:01:2d:43:21:31:7d:9f:78:
         b9:7c:a9:50:92:3b:a5:98:9c:23:2b:0e:b5:c2:d1:32:4b:c6:
         8c:53:90:67:5e:76:18:82:62:21:46:59:f2:e9:71:a5:60:a7:
         62:49:98:2c:c2:5e:2e:26:9e:b9:c0:e0:a0:7d:0a:b4:ed:bb:
         e4:ac:dd:98:25:ad:69:50:fe:4d:4f:94:98:51:0e:71:08:a5:
         b9:51:ce:aa:d9:00:fa:bb:f7:fc:fe:dc:4d:95:43:17:bf:e0:
         bd:ce:02:d7:9c:b8:fd:63:9d:37:07:40:da:9d:a5:06:65:89:
         57:2b:ca:71:96:88:85:0f:19:06:2b:76:5e:60:5c:83:7e:4f:
         32:c6:e6:71:52:65:aa:6b:03:34:ed:1f:46:e5:8a:f2:a9:32:
         06:66:0e:42
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUXaLQYe8PurbEqabmRi5TE6NEJAAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDIxMDM1WhcNMjYwNTI2MjM1OTU5
WjB6MUkwRwYDVQQFE0A5ODE1NTZiMjYzMjIwYjRiM2RmYzI4MTRiNjI2YWNjYzBm
Y2I1NjIwY2YwYTI0OTIxYzYzMWM2OGM4MzEzZmE4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCwov2+1lPbiz/8Pkm0rU0ycR5s4Ld232zlkMasBEJC36J
Mq6VfVvQYF2DULC4dlv6JUlesFtfEEb751NMhWa7ltLfW8gF7dwanXQQcWAVWL3C
NwN8MZ20S0UceTtk844nJBDlOxr6sIqlpM0+ifAQ+0goAcrQ9ZJ8aNryzPZ1AIui
2Y2N4k0Lcj+nAxXYwDbFgGbQu1PwbyDLxpUu3lGoU5CFniuVgGVdroj14t88j5Kj
G8Z+EhHbHDK5EA/5uyp5vBAnkH6Xs9GYu2iKyvGVcUpfPvsoJr8njFui6u7lC03s
ISPDgkAWwHarfSnoIn3hDOYXOE49QwYDSkTqo3brAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUftpiZi9w/gkxIfMPjhgyZAa5ozswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZiMWM5ZGNiLTkzZmItNDQxZC04MDE1LTFkMTNmOGEyNzJmYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/yIIAwDQYJKoZIhvcNAQELBQADggEBABRLew0ifWa7kE+S9XC1Uok9
HU047iWonvNQ7Bc/W9cWluoE13Fwu1kDsKXJ85gKZjYAHDs8BGEI/mVhXbzNq994
wLCCIPi4VELhj+poBfHucuw2F/SggKcpa7zbQiP63keNlcEBLUMhMX2feLl8qVCS
O6WYnCMrDrXC0TJLxoxTkGdedhiCYiFGWfLpcaVgp2JJmCzCXi4mnrnA4KB9CrTt
u+Ss3ZglrWlQ/k1PlJhRDnEIpblRzqrZAPq79/z+3E2VQxe/4L3OAtecuP1jnTcH
QNqdpQZliVcrynGWiIUPGQYrdl5gXIN+TzLG5nFSZaprAzTtH0blivKpMgZmDkI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:07:42 2026 by rpki-client