Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f4fd009-c1bd-4df9-a85f-7c903e47ddcf.roa
File:                     6f4fd009-c1bd-4df9-a85f-7c903e47ddcf.roa (raw, json)
Hash identifier:          BuqjlHo4GKpjEUmtIJR1pn/imGaw0RwHwXX0OCmgtiw=
Subject key identifier:   5F:3E:0C:41:C7:42:CF:51:90:0B:A6:95:CC:B7:7A:49:33:2E:19:B8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       705ADAC319845AC61AD6EC277673CB39CA660457
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f4fd009-c1bd-4df9-a85f-7c903e47ddcf.roa
Signing time:             Sun 08 Feb 2026 00:40:08 +0000
ROA not before:           Sun 08 Feb 2026 00:40:08 +0000
ROA not after:            Sat 09 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff9:8000::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5a:da:c3:19:84:5a:c6:1a:d6:ec:27:76:73:cb:39:ca:66:04:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb  8 00:40:08 2026 GMT
            Not After : May  9 23:59:59 2026 GMT
        Subject: serialNumber=4e4a021a5f18778ae3376931cf51d94c080ef166d075dfa8db0fc9da8349013e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4b:83:d4:e6:a8:71:f9:90:67:b5:91:50:5a:
                    8a:82:83:6e:35:c8:63:23:e8:1d:58:df:6b:ab:51:
                    b6:b9:7b:91:0a:57:7c:c9:9f:84:c0:b8:45:89:85:
                    ea:10:e4:ce:b9:e6:59:35:7a:ec:ad:8d:95:29:b3:
                    60:db:16:35:67:9a:89:8c:cb:02:6d:ba:62:cf:92:
                    1a:dd:6c:b9:20:40:f1:9e:37:17:15:8e:21:e4:35:
                    16:5a:88:f8:b2:07:bb:ab:0c:f8:6a:a5:35:e8:73:
                    3f:fb:32:6e:5a:b4:f4:08:72:cb:d5:d6:03:2b:cb:
                    df:db:46:78:8c:61:e0:22:bd:bf:e6:1e:60:dd:ca:
                    1b:ea:74:15:6b:78:5b:ef:8c:61:e0:40:5d:43:74:
                    0d:29:06:8f:99:da:5a:df:eb:61:95:10:57:fd:40:
                    1d:05:f8:41:0a:85:fd:3b:45:94:13:7b:05:3b:e3:
                    1e:0b:95:a3:9a:78:8f:8e:d9:69:67:fa:46:35:04:
                    f8:17:31:c0:34:ab:e8:78:a5:fc:c5:1c:c2:61:59:
                    f1:0e:cf:57:40:ee:ef:53:b2:2f:9a:7e:3b:51:0e:
                    5a:ce:d5:95:91:ba:7a:cd:5f:98:85:e1:7f:dd:05:
                    2a:16:1e:39:20:91:9e:f9:f2:1e:e3:06:2c:e3:33:
                    26:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3E:0C:41:C7:42:CF:51:90:0B:A6:95:CC:B7:7A:49:33:2E:19:B8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f4fd009-c1bd-4df9-a85f-7c903e47ddcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff9:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         7e:d3:15:4d:bb:f1:17:92:6e:ea:f7:c1:6e:37:a7:8f:f0:3a:
         64:09:b1:93:26:89:8d:20:4f:39:a1:f9:78:2a:35:9c:cc:89:
         ca:5c:db:9e:c8:f4:0b:28:73:7f:34:a9:fd:10:2f:06:74:eb:
         4a:33:a6:12:5c:8b:f7:e1:13:90:6d:f4:77:dc:ee:75:7e:f1:
         50:db:2d:0e:e4:2b:5b:fa:57:1c:bb:76:18:14:26:97:cf:ca:
         a7:4e:fc:b9:b7:7f:8f:6b:77:90:36:37:f2:20:98:e1:45:d5:
         53:e5:9e:9e:17:64:a9:fa:a6:4d:db:c8:bc:64:42:95:85:55:
         96:44:2e:97:c0:6f:79:e7:90:af:3c:19:cf:cc:d7:fb:c0:db:
         9d:b8:8a:88:fe:ec:98:88:44:3c:20:15:56:53:d5:8f:09:f2:
         a6:0f:ad:d2:bb:62:22:c0:47:57:34:78:a4:9c:f8:65:ad:85:
         58:65:42:fa:fc:25:77:d0:8e:2e:6b:8f:c3:bd:8d:e4:29:84:
         ab:b5:1c:99:ec:1f:fa:7c:51:43:84:68:74:1a:45:82:eb:06:
         49:66:29:29:9a:de:b1:93:17:f3:49:c7:33:af:28:34:49:1c:
         1b:55:0c:b3:7b:34:e7:e2:2a:d1:9f:15:88:c7:81:1a:50:fd:
         54:da:67:41
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:53:10 2026 by rpki-client