Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d41ff51-e213-454b-bf01-4829839d9568.roa
File:                     6d41ff51-e213-454b-bf01-4829839d9568.roa (raw, json)
Hash identifier:          i7L/rBu7+Y7hEtJz4T2RWZgInCCytcbWKcjjrVqw3UI=
Subject key identifier:   7D:25:A1:A3:C1:27:E4:C2:E0:3F:0E:04:BF:02:CE:0B:BB:7C:54:AD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4DC0CA2B50A5280A74B391C7E89C4B66E38D866D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d41ff51-e213-454b-bf01-4829839d9568.roa
Signing time:             Wed 25 Feb 2026 01:11:15 +0000
ROA not before:           Wed 25 Feb 2026 01:11:15 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1c:c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c0:ca:2b:50:a5:28:0a:74:b3:91:c7:e8:9c:4b:66:e3:8d:86:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 25 01:11:15 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=13fed9f3b6c1d99257dc585869764e4961b3efd8f412c9d332d9a9378f8c135d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:13:e8:bc:d2:11:5d:4f:a8:0f:d8:13:55:68:
                    2f:3e:f6:21:f0:93:92:6c:8d:4d:d5:11:60:99:71:
                    ec:e2:6c:fa:1c:8f:0c:01:d9:98:be:ac:ce:a1:8d:
                    4c:1b:f6:c9:f4:46:e2:9c:a7:ad:af:22:0c:cd:e7:
                    19:73:dd:d1:af:9b:7d:8a:9d:27:12:f3:85:0f:3c:
                    38:df:ee:8b:c6:d4:b9:9f:3c:d9:22:57:18:67:83:
                    22:ad:df:19:54:c3:a5:e9:2b:12:06:8b:3e:f7:f2:
                    57:5b:d3:fd:6c:15:b4:14:16:a6:b5:3b:d7:5e:67:
                    cd:a8:d8:6e:ba:d3:51:5a:bc:6d:18:92:bb:b7:86:
                    64:ca:5e:26:92:8e:b4:6b:cf:a5:5d:6d:53:b9:5e:
                    f4:4e:21:7f:3b:55:45:c1:fc:46:d2:c0:6e:48:7c:
                    5d:20:58:df:37:f9:ea:f8:02:a8:f2:b3:b9:4a:7b:
                    f1:77:aa:24:44:61:6e:4d:71:98:de:78:4f:f4:4f:
                    c5:25:b4:fb:6b:3d:0e:ae:89:de:55:15:aa:e9:77:
                    22:db:a3:2e:5c:c6:55:01:76:dd:bc:e7:2a:31:51:
                    a6:d9:2a:d9:57:1a:95:c0:35:52:7a:b2:4f:c3:6d:
                    29:0a:cc:95:df:e7:d5:99:15:d1:d2:4c:ca:8e:80:
                    0d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:25:A1:A3:C1:27:E4:C2:E0:3F:0E:04:BF:02:CE:0B:BB:7C:54:AD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d41ff51-e213-454b-bf01-4829839d9568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1c:c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         7f:b3:e0:2c:5d:9a:b5:52:1a:de:5b:74:c1:01:80:66:49:1f:
         c5:35:01:ea:0d:ef:6b:a4:77:a5:d6:46:f9:92:12:13:6d:b5:
         0e:a3:80:50:92:c4:b3:38:36:33:ae:89:ca:31:0e:b4:cf:83:
         9c:7d:f9:09:15:02:fd:31:cb:e5:1b:a4:fa:38:c3:db:96:3e:
         ed:e7:fa:3a:57:fb:49:0a:df:f4:bb:59:eb:86:40:1b:ce:da:
         a0:64:bd:b9:74:4a:41:26:82:f9:48:f6:ff:41:09:fa:0c:11:
         d1:90:6c:dc:02:50:ed:b0:2c:b6:f8:02:d5:92:ff:b1:e5:84:
         d5:bc:02:c5:27:97:4d:13:08:bc:b5:5f:da:a2:b7:e1:37:32:
         8e:d7:a9:77:93:1b:d0:7a:8d:28:2d:8c:ef:3f:2d:f7:eb:c8:
         99:f7:92:0a:b2:59:56:9b:4d:78:90:cb:20:ba:4a:37:3c:3c:
         49:88:b8:3b:69:fb:40:ca:f3:9a:f7:e3:31:6e:8c:08:4a:af:
         a1:15:7b:6e:65:29:7b:44:39:43:96:0f:43:e7:e4:97:74:43:
         17:cc:54:3f:94:a9:65:42:ed:76:1a:3e:ea:7d:21:27:82:a1:
         21:88:37:f1:2d:11:fc:e9:ae:1f:35:9b:d4:67:f7:62:d8:3e:
         b3:3e:ba:89
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:55:12 2026 by rpki-client