Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81466a00-4ef6-4b26-ad84-e79fb496219c.roa
File:                     81466a00-4ef6-4b26-ad84-e79fb496219c.roa (raw, json)
Hash identifier:          s3qZkpT1Dy9oDYI3oEU13ExvtVONroUA9IVGfynxmr8=
Subject key identifier:   3E:66:D2:62:E4:75:37:F9:1A:D4:50:23:D1:0B:8B:AE:EB:13:38:0F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5F0C7DE012FE31D0A73135EF38286B3FCA7BEABD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81466a00-4ef6-4b26-ad84-e79fb496219c.roa
Signing time:             Tue 24 Feb 2026 02:20:35 +0000
ROA not before:           Tue 24 Feb 2026 02:20:35 +0000
ROA not after:            Mon 25 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f00:8080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:0c:7d:e0:12:fe:31:d0:a7:31:35:ef:38:28:6b:3f:ca:7b:ea:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 24 02:20:35 2026 GMT
            Not After : May 25 23:59:59 2026 GMT
        Subject: serialNumber=7c310f2c6388d7de3a6569195104aeeb95ed1a8e6319236be5db9c1d3dd2c39a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7d:9d:a2:10:2f:83:6b:0f:f8:c9:5e:36:36:
                    e3:d0:f8:88:7f:64:31:89:fa:10:b4:a8:a1:8d:15:
                    dd:c8:ca:74:f2:ac:0e:6a:b7:82:95:80:57:d4:9e:
                    60:d9:12:50:75:b0:d2:97:1b:88:21:0d:19:3c:ac:
                    ce:b9:75:e8:2c:30:7d:60:91:94:d1:9e:cc:cd:47:
                    23:cc:d6:7b:da:8c:47:6b:11:81:ce:f0:89:8a:f2:
                    61:bb:99:36:d4:53:36:3d:7c:64:41:d6:37:2d:85:
                    5c:4d:de:3a:78:70:87:d2:f9:92:45:cc:fc:44:37:
                    59:46:db:d4:eb:b4:7f:7b:54:03:5f:47:04:19:8f:
                    c6:90:23:c2:23:ca:14:26:b7:80:85:e7:e7:58:cc:
                    94:40:78:67:99:fe:b0:04:ea:ca:af:95:5a:b8:1a:
                    e5:de:f9:54:fc:8a:8b:ec:86:1c:59:b5:ce:3e:e4:
                    0e:31:fa:53:ad:11:f8:14:7e:4c:2f:f8:22:38:5f:
                    a4:e3:7d:4a:23:c4:4e:b0:82:43:9e:39:4b:f9:20:
                    92:29:01:80:4b:1f:5c:30:f0:db:c5:50:b9:03:78:
                    37:ce:fd:cc:8a:83:c1:28:70:82:25:cb:1c:61:09:
                    7f:30:88:3c:89:c4:25:c2:c3:c8:ef:3a:9e:8c:eb:
                    b1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:66:D2:62:E4:75:37:F9:1A:D4:50:23:D1:0B:8B:AE:EB:13:38:0F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81466a00-4ef6-4b26-ad84-e79fb496219c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:8080::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:96:75:ea:16:b5:07:a8:ef:ab:bb:6c:35:c2:f1:d8:dc:e6:
         ba:2f:1c:3f:59:4c:24:1b:06:51:04:ab:21:a8:db:e5:e5:93:
         8d:b4:d4:ed:98:c5:5f:2d:50:bc:db:b7:76:e1:24:29:a8:bd:
         43:d0:e7:a8:7c:84:f8:e7:92:dd:12:4c:05:26:61:4b:af:35:
         72:2f:d4:30:5d:0d:9f:2d:ff:62:62:10:5a:cb:5d:ef:2a:6a:
         41:e0:31:ed:95:f2:24:7e:2f:c2:92:13:18:29:d0:ec:7d:08:
         a5:ce:c6:86:b8:3a:a9:92:2d:ae:67:17:c2:4f:7b:90:26:68:
         69:7b:29:70:57:0a:87:06:c6:c3:c6:c3:e2:81:40:e9:d0:cf:
         77:63:0e:cc:f5:f4:5a:b0:a4:12:6a:6c:66:3f:53:c2:46:50:
         32:17:64:3d:f3:08:99:c7:b3:1e:f4:68:bc:ca:9b:39:35:95:
         a3:a6:d1:c9:68:56:b1:21:9d:d5:5c:74:7b:38:7d:92:f7:82:
         0e:8e:9a:fe:35:53:c4:79:22:b0:c6:4b:4d:c4:16:30:41:82:
         fa:fa:71:03:8a:b6:94:32:07:49:b5:d0:c4:81:33:12:1a:b8:
         30:8e:e6:5f:43:88:05:ec:98:0c:22:36:86:ab:89:cb:83:43:
         f5:dc:e7:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:20:43 2026 by rpki-client