Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80d26464-05c9-4f2b-ba80-8facd3bbef1f.roa
File:                     80d26464-05c9-4f2b-ba80-8facd3bbef1f.roa (raw, json)
Hash identifier:          uXFwNURqsLaSwe4ePsCtnWOjqzwqkMtIdIjL9YEyZJ0=
Subject key identifier:   C2:CB:62:C3:57:A7:AF:D4:E9:92:1C:1D:2F:8D:A9:DA:4F:55:22:D4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       42D98EA4A9DC391B83FAB059B468A9471D7B3C77
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80d26464-05c9-4f2b-ba80-8facd3bbef1f.roa
Signing time:             Wed 25 Feb 2026 01:21:15 +0000
ROA not before:           Wed 25 Feb 2026 01:21:15 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f38:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d9:8e:a4:a9:dc:39:1b:83:fa:b0:59:b4:68:a9:47:1d:7b:3c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 25 01:21:15 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=dbe1423f2bb488e93d6c7402419e28d66f08633093c4cb6dda81033079a7968c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:54:a7:f4:a6:bb:82:f8:f3:ff:a7:13:e7:94:
                    b7:89:88:0b:65:8a:5e:db:62:10:e1:86:3e:8f:c1:
                    fa:df:a8:49:cd:bf:9a:52:4a:5c:4b:00:35:d6:43:
                    d0:04:f5:7a:19:67:db:65:5e:9f:a7:fe:bc:02:41:
                    7d:73:82:5d:20:98:60:7c:56:47:f4:19:0a:89:c9:
                    ec:b1:a2:f3:a9:a2:a8:70:42:a6:05:7f:35:3f:a2:
                    23:c5:5a:23:8d:2c:ba:dc:b1:3d:22:12:06:1b:28:
                    14:8a:87:75:a2:88:57:ae:57:10:8f:ae:3b:e8:99:
                    30:4f:08:0d:ef:f3:14:82:7b:be:67:25:2d:37:50:
                    b0:f0:a2:f4:43:b8:92:6e:41:c4:9a:9d:66:31:e2:
                    6a:13:5e:ea:d1:15:1f:ed:97:ad:a4:9f:03:0d:0d:
                    25:07:cf:23:7b:67:63:4a:4a:21:e1:d8:e0:02:9c:
                    8c:ca:3b:a3:bb:1e:db:41:c4:e9:05:0b:c9:f6:38:
                    01:c3:de:d9:e0:6b:1e:ba:c2:01:34:04:c5:f3:8c:
                    01:bc:aa:a6:bb:bc:e0:5e:1f:ef:88:24:e7:81:6e:
                    35:87:ea:0f:c2:dc:68:ac:bd:09:cd:f5:9b:d5:6d:
                    7e:38:b7:7d:c2:5f:dc:3e:2d:d4:05:24:39:23:ef:
                    df:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CB:62:C3:57:A7:AF:D4:E9:92:1C:1D:2F:8D:A9:DA:4F:55:22:D4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80d26464-05c9-4f2b-ba80-8facd3bbef1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:cc:26:35:64:8f:9b:ff:80:12:98:ae:f1:5c:97:98:05:82:
         60:f8:25:4e:55:d6:ee:80:5e:97:d1:03:c7:9a:cf:ea:c1:c7:
         bc:99:5a:fd:66:fc:48:5a:68:23:91:d1:27:cf:49:46:74:a8:
         5d:8b:3c:de:8f:c1:7d:c0:31:6e:27:f7:1b:a3:5a:2b:a4:42:
         73:3a:b6:51:e9:6b:2b:7a:b6:f8:52:d3:7e:7b:59:08:51:8c:
         a2:04:c8:4b:66:c1:1a:50:9c:22:5a:27:dc:c4:13:57:4c:79:
         57:1f:4a:45:bf:7c:65:8d:17:23:eb:43:c2:67:b9:60:20:68:
         e9:09:f0:04:b1:3a:8e:41:52:71:c4:7e:30:4f:02:fe:48:b8:
         a5:c1:95:e7:94:0e:bd:09:ba:75:05:7b:2c:27:b1:ab:e1:dd:
         d9:9c:8f:1f:9f:83:37:67:14:c4:2c:67:b2:35:27:96:93:2a:
         58:2e:6e:46:13:ef:4d:f9:4f:16:9f:59:a9:16:48:59:96:6c:
         f0:e3:08:a9:a5:7a:7d:e0:23:4a:d8:34:f1:27:b9:98:c6:56:
         9f:dc:02:14:2e:22:8c:8a:13:bb:47:a7:a2:0e:c0:d2:43:9c:
         bb:f6:d3:2d:7e:8c:6d:ea:7d:77:e2:92:61:71:d4:06:d4:31:
         0e:fc:e1:cc
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUQtmOpKncORuD+rBZtGipRx17PHcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDEyMTE1WhcNMjYwNTI2MjM1OTU5
WjB6MUkwRwYDVQQFE0BkYmUxNDIzZjJiYjQ4OGU5M2Q2Yzc0MDI0MTllMjhkNjZm
MDg2MzMwOTNjNGNiNmRkYTgxMDMzMDc5YTc5NjhjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDFVKf0pruC+PP/pxPnlLeJiAtlil7bYhDhhj6PwfrfqEnN
v5pSSlxLADXWQ9AE9XoZZ9tlXp+n/rwCQX1zgl0gmGB8Vkf0GQqJyeyxovOpoqhw
QqYFfzU/oiPFWiONLLrcsT0iEgYbKBSKh3WiiFeuVxCPrjvomTBPCA3v8xSCe75n
JS03ULDwovRDuJJuQcSanWYx4moTXurRFR/tl62knwMNDSUHzyN7Z2NKSiHh2OAC
nIzKO6O7HttBxOkFC8n2OAHD3tngax66wgE0BMXzjAG8qqa7vOBeH++IJOeBbjWH
6g/C3GisvQnN9ZvVbX44t33CX9w+LdQFJDkj79/nAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUwstiw1enr9TpkhwdL42p2k9VItQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzgwZDI2NDY0LTA1YzktNGYyYi1iYTgwLThmYWNkM2JiZWYxZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB84EDANBgkqhkiG9w0BAQsFAAOCAQEAmcwmNWSPm/+AEpiu8VyXmAWC
YPglTlXW7oBel9EDx5rP6sHHvJla/Wb8SFpoI5HRJ89JRnSoXYs83o/BfcAxbif3
G6NaK6RCczq2UelrK3q2+FLTfntZCFGMogTIS2bBGlCcIlon3MQTV0x5Vx9KRb98
ZY0XI+tDwme5YCBo6QnwBLE6jkFSccR+ME8C/ki4pcGV55QOvQm6dQV7LCexq+Hd
2ZyPH5+DN2cUxCxnsjUnlpMqWC5uRhPvTflPFp9ZqRZIWZZs8OMIqaV6feAjStg0
8Se5mMZWn9wCFC4ijIoTu0enog7A0kOcu/bTLX6Mbep9d+KSYXHUBtQxDvzhzA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:12:08 2026 by rpki-client