Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ea3c173-2d90-428b-8f3d-aef2bc267266.roa
File:                     8ea3c173-2d90-428b-8f3d-aef2bc267266.roa (raw, json)
Hash identifier:          MghGNJDjx6aomWMVSGMeLSHgOfSpqkz2+BiAasD9o4U=
Subject key identifier:   CF:54:FC:2E:4C:A3:06:55:12:9C:D2:2E:E4:BF:93:36:89:E0:62:6C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       70E564780E319665E5FCE45C86DC2E58F4BC0AB9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ea3c173-2d90-428b-8f3d-aef2bc267266.roa
Signing time:             Tue 10 Feb 2026 01:01:55 +0000
ROA not before:           Tue 10 Feb 2026 01:01:55 +0000
ROA not after:            Mon 11 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:833b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e5:64:78:0e:31:96:65:e5:fc:e4:5c:86:dc:2e:58:f4:bc:0a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 10 01:01:55 2026 GMT
            Not After : May 11 23:59:59 2026 GMT
        Subject: serialNumber=6008d466b0010104637b94270436479cf623a390754a1ffad7afe51d0f511dff, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:79:0f:0c:ae:36:6a:13:2a:61:05:d2:20:16:
                    35:24:34:1a:99:8e:e5:c7:88:00:5a:4d:7e:97:90:
                    da:8d:57:96:4b:64:2b:50:c1:ad:1e:6d:96:a8:8b:
                    a0:b3:91:05:59:0b:9c:1d:4c:cd:52:ae:fe:b4:5e:
                    2e:50:24:35:fd:c4:67:05:21:2a:3e:95:28:5f:a7:
                    3b:5c:cf:5e:20:ef:16:11:a4:a0:2b:6b:4c:23:45:
                    9b:9b:c6:ae:dd:4a:6c:32:47:10:e6:31:e8:e7:95:
                    c7:12:18:aa:35:0d:da:f3:cf:a3:3a:da:c8:4c:8d:
                    9e:cd:77:0e:67:b0:c4:5d:24:48:47:e1:a3:85:90:
                    8f:56:72:d1:7f:fb:c1:4d:e8:26:2c:2d:b7:e0:a1:
                    1b:aa:e1:61:a9:ea:27:78:2b:3b:b6:42:89:db:bc:
                    4c:33:5c:72:c9:63:d8:31:a0:5a:26:21:cb:09:48:
                    94:1c:1f:9a:01:e4:12:08:48:4a:d3:cb:f4:b6:c3:
                    85:5d:66:a2:bd:5c:db:f6:32:b1:e7:a9:72:e2:e7:
                    7c:d7:85:5f:22:d4:c4:7e:a8:5a:35:d3:eb:62:ba:
                    8b:16:3f:eb:d4:dd:2a:b8:9c:0c:a5:06:e2:21:7d:
                    5f:68:75:fb:5f:e9:cd:37:eb:be:61:62:07:ef:79:
                    ff:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:54:FC:2E:4C:A3:06:55:12:9C:D2:2E:E4:BF:93:36:89:E0:62:6C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ea3c173-2d90-428b-8f3d-aef2bc267266.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:833b::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:92:a0:bf:65:1e:64:1b:84:65:51:14:30:38:ae:fa:7e:bd:
         72:65:42:07:61:18:79:13:c8:46:6e:5f:f8:68:c2:e5:56:c5:
         99:e6:56:46:98:72:a2:ba:ac:c3:8b:79:5a:d7:f9:e3:bc:4b:
         dd:dd:0a:73:60:25:90:90:45:8e:05:9f:cf:ad:5b:36:c0:2e:
         15:5e:79:7b:60:29:c8:2a:54:28:0e:c1:a9:96:d7:5f:38:5e:
         60:74:43:5c:94:09:4b:62:e5:82:70:59:2e:7b:2e:51:8a:ba:
         5c:d8:e2:0a:b4:75:09:8e:f7:b0:7a:76:fa:18:13:d3:15:9a:
         96:22:4d:b4:71:dd:3e:44:69:3a:79:05:82:f3:5c:a4:0c:2e:
         5f:7f:78:d5:d0:31:e2:92:5a:da:87:75:da:99:b5:58:4f:37:
         2d:87:dd:cf:09:e4:55:0f:6a:18:ca:a7:3a:05:69:5e:79:16:
         2f:70:d4:53:fd:b5:36:0e:79:f6:c8:13:9d:32:8f:26:a4:e2:
         d2:56:3d:86:15:76:72:49:af:02:bf:15:5a:2a:5c:49:d6:89:
         5c:90:8c:8c:2a:63:3e:39:30:80:74:bc:ca:72:6c:fd:9f:3b:
         f1:1b:72:3b:24:7e:74:57:60:9e:f8:ea:45:82:45:63:31:82:
         7f:d3:d3:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:22:35 2026 by rpki-client