Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85b59dcc-993d-4bb9-8658-41d0e953ce90.roa
File:                     85b59dcc-993d-4bb9-8658-41d0e953ce90.roa (raw, json)
Hash identifier:          DE0tFJQ/5MNSPA+Qn2KitOzvy6CWKfodj8AgivDLlRA=
Subject key identifier:   DC:42:15:C8:00:D7:13:D9:5E:31:B6:56:7C:1F:9E:64:F2:47:96:29
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7B8B1C341A8DF0B87B4FFF867BC447696A986E12
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85b59dcc-993d-4bb9-8658-41d0e953ce90.roa
Signing time:             Sat 14 Feb 2026 00:40:05 +0000
ROA not before:           Sat 14 Feb 2026 00:40:05 +0000
ROA not after:            Fri 15 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff4:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:8b:1c:34:1a:8d:f0:b8:7b:4f:ff:86:7b:c4:47:69:6a:98:6e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 14 00:40:05 2026 GMT
            Not After : May 15 23:59:59 2026 GMT
        Subject: serialNumber=a1174c45c02c158ffdf3e8b8a8feff0bfe6dec704aa0baaa083757cb06f524d1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e3:62:6d:7d:75:3d:e7:41:6b:fd:a3:41:c1:
                    49:37:9d:2a:c6:53:71:7b:98:01:c2:84:84:94:f7:
                    2e:82:fa:c5:cf:de:a7:e9:73:6d:b7:fc:ca:ba:a6:
                    57:ac:d8:cc:a4:70:e0:6c:85:b0:0b:79:ec:31:5f:
                    45:55:e0:e7:5c:8e:c4:76:0e:93:4b:76:fa:af:9b:
                    39:4f:ad:74:a4:41:47:11:0f:84:d9:76:30:c0:55:
                    d6:f3:73:e2:ef:e7:a9:74:fc:26:40:cf:0e:7b:65:
                    2f:6a:56:9c:78:72:78:67:6f:63:28:32:57:d1:c6:
                    8e:84:dd:d7:3e:66:5d:fb:35:cd:93:18:2e:49:2b:
                    08:cc:9f:d9:07:93:32:de:55:4d:5b:b6:15:1a:0a:
                    d7:17:54:4e:f6:6d:4b:c2:d6:32:ab:21:03:49:a2:
                    c8:05:cd:44:25:88:9c:d9:8b:a8:e7:38:90:dd:85:
                    b3:bb:13:c5:7e:50:ec:e3:5f:f0:1f:69:17:28:54:
                    6a:88:7b:1c:49:2f:82:01:3e:15:af:5d:65:94:5e:
                    31:a4:60:07:18:8e:e4:80:18:24:f1:4f:96:8f:69:
                    74:d5:d5:74:43:19:04:53:f6:86:d8:0d:d7:4d:ee:
                    b4:7e:55:49:ef:41:4a:82:81:ec:6d:fc:20:86:6b:
                    27:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:42:15:C8:00:D7:13:D9:5E:31:B6:56:7C:1F:9E:64:F2:47:96:29
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85b59dcc-993d-4bb9-8658-41d0e953ce90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff4:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         96:81:4d:10:35:1a:c4:37:c1:5e:07:ab:2d:e3:15:2a:c1:f7:
         c7:cf:e5:c1:69:50:55:d6:8d:3e:c2:22:7e:5a:59:dd:3f:bc:
         a0:3f:9e:c3:b1:67:fb:4c:62:eb:49:84:2f:c0:c0:d3:33:b6:
         fd:54:ff:f4:b1:05:6f:17:42:30:2e:8b:4c:2f:52:8c:6c:08:
         a5:9c:0f:73:62:c4:51:67:5c:4c:ef:b9:25:8d:8e:a7:ab:a5:
         25:99:72:83:41:53:01:af:5e:88:5d:aa:ea:82:6e:d4:ed:a9:
         16:60:cb:7d:17:5c:8c:2c:2d:9c:eb:93:78:49:7d:3e:ef:10:
         cb:19:ab:42:98:4f:0a:8c:0f:48:a0:af:22:27:a0:b7:ab:5d:
         7f:8a:3d:0b:fd:26:83:1d:d3:0e:65:87:0c:8a:a5:1e:d6:39:
         b9:ff:8b:92:8e:2d:0f:e8:46:ce:0d:bb:ee:d8:32:c6:d7:80:
         2a:b6:14:61:45:a1:32:10:c4:29:74:7e:64:68:60:e7:dc:ce:
         10:08:53:6c:80:45:fc:0d:36:0f:7d:7d:83:86:6e:9f:62:d1:
         63:58:13:c4:4e:84:97:db:47:9b:e6:24:ea:8a:98:73:47:6f:
         96:b0:93:8f:1f:93:98:4f:a8:5f:cb:a8:09:2f:5c:12:84:6b:
         35:11:34:5e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:24:50 2026 by rpki-client