Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9431031a-a6ce-4625-aff8-32a6f17591d6.roa
File:                     9431031a-a6ce-4625-aff8-32a6f17591d6.roa (raw, json)
Hash identifier:          Yp3Wo5vV2SjY9K7NlmLZcNbFL421FHzb/JgYj/D8OEY=
Subject key identifier:   53:6E:BF:3B:35:26:96:72:1D:06:57:A8:35:1F:E9:5D:C1:87:74:79
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       76A2AE0691B1B580DAA7B50433E60FF4765BC94E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9431031a-a6ce-4625-aff8-32a6f17591d6.roa
Signing time:             Sat 21 Feb 2026 00:20:08 +0000
ROA not before:           Sat 21 Feb 2026 00:20:08 +0000
ROA not after:            Fri 22 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fec:9800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a2:ae:06:91:b1:b5:80:da:a7:b5:04:33:e6:0f:f4:76:5b:c9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 21 00:20:08 2026 GMT
            Not After : May 22 23:59:59 2026 GMT
        Subject: serialNumber=cdc6ee0610d80e96123baab2c6166bf5e731cf3c6b24374f190bf401d491956c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a7:c9:45:1a:99:bc:88:62:17:ef:0f:df:d6:
                    37:62:57:28:f9:3d:62:ef:29:6b:2d:f1:07:cd:ec:
                    53:39:ae:a7:4b:cf:fb:d2:15:f9:f5:a6:c6:95:1c:
                    b1:82:50:4e:a3:47:15:8e:57:ce:c2:0e:a7:59:06:
                    39:de:2d:2b:ac:98:27:84:c9:9d:02:ed:b3:51:d9:
                    41:59:d6:1b:04:46:da:59:f0:02:a3:28:b4:28:3b:
                    06:8c:bb:7a:a2:36:f2:11:c4:c5:c9:e6:cb:c9:28:
                    c6:c9:c4:60:46:7e:5c:cf:79:25:3a:49:75:25:cb:
                    dd:cb:44:04:48:42:5f:ff:01:43:6c:0b:3f:51:fd:
                    31:ba:0a:77:68:ea:45:71:3e:5e:ca:8b:c4:97:8b:
                    fe:88:49:3e:a6:72:3e:2c:3b:d7:68:9d:75:ad:81:
                    ae:89:d2:b1:46:79:04:d8:a2:53:b9:e9:1c:7f:eb:
                    04:97:73:4d:1d:c8:6f:00:0b:f9:8c:83:eb:32:6b:
                    7f:f1:60:15:6a:fa:e6:38:56:b4:0a:e8:7b:f8:b6:
                    5b:48:be:22:a9:7f:66:67:d1:0c:97:f0:c0:eb:2f:
                    c4:9d:99:a5:07:0a:e4:21:e0:93:b2:4f:50:5e:11:
                    a3:7f:4b:a2:55:a6:f6:8d:70:56:cd:98:72:ac:7d:
                    56:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6E:BF:3B:35:26:96:72:1D:06:57:A8:35:1F:E9:5D:C1:87:74:79
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9431031a-a6ce-4625-aff8-32a6f17591d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:22:54:cf:95:1a:60:b5:ef:d0:d4:ed:27:73:ca:54:d6:43:
         23:33:15:94:ab:00:a1:3e:eb:ed:98:34:5f:c8:d9:17:f6:ec:
         e5:aa:25:65:3a:1d:6d:f2:d1:cc:52:9e:7b:73:39:7f:e4:cc:
         9a:be:52:2a:2d:6b:2f:f5:ed:a5:ad:9d:bc:93:d9:42:cd:f3:
         27:bc:58:ce:ef:90:ff:a5:54:9f:88:ff:09:6b:fa:cd:00:35:
         5f:85:b6:73:79:6b:ef:19:6d:b7:66:8d:5d:2c:ed:55:c0:b1:
         e6:fd:85:bb:38:c9:7d:52:a2:3c:6d:98:e2:d7:33:a9:cf:00:
         aa:68:2c:8e:56:ae:75:b6:c2:a4:b7:c9:18:35:52:b7:7f:79:
         58:ef:cb:37:91:39:59:3f:88:c4:a8:3c:5f:72:6d:28:7a:2b:
         88:74:c2:34:2c:7a:a6:6a:58:a4:65:0f:65:79:c9:2a:bf:66:
         aa:fa:d8:8b:27:fa:fe:e9:d9:1a:2b:b7:b3:d5:89:a6:51:b3:
         72:fe:6e:65:2c:6b:3e:ef:85:b4:88:2b:0b:c5:35:b8:65:ca:
         97:c8:b6:a9:2e:8a:95:2f:84:1e:ee:0c:9a:48:33:3b:5d:73:
         a4:48:1a:63:c0:cd:ab:ea:f2:3d:02:b2:6f:d7:af:af:f6:d4:
         8f:77:80:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:24:04 2026 by rpki-client