Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51cf629-3b5c-444d-a5a3-c49bffcebe3a.roa
File:                     a51cf629-3b5c-444d-a5a3-c49bffcebe3a.roa (raw, json)
Hash identifier:          vr2JIK2wAV4dCTjgEaG6tV8hDbMx6IgvnhMTM86ZD5U=
Subject key identifier:   3A:8C:1D:A3:07:15:62:73:57:21:A9:87:70:25:22:D6:43:12:28:58
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4DA55926A536FEE2791E79B7BA7383B3111259AB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51cf629-3b5c-444d-a5a3-c49bffcebe3a.roa
Signing time:             Sat 28 Feb 2026 00:30:57 +0000
ROA not before:           Sat 28 Feb 2026 00:30:57 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fef:8000::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a5:59:26:a5:36:fe:e2:79:1e:79:b7:ba:73:83:b3:11:12:59:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 28 00:30:57 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=257c4babc37ab35929d69780117a2f9fbca61795485356014f41dd3865e6ef58, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:70:6c:d5:a6:7e:3f:fc:9a:ec:cb:d6:c1:e5:
                    eb:98:50:87:90:52:e0:28:04:8f:e8:28:7c:83:b5:
                    ba:3c:0e:8a:76:20:f7:46:49:99:6e:22:bd:d5:55:
                    fc:24:51:47:eb:46:46:0e:d0:30:2e:06:7d:31:87:
                    be:2b:9e:7d:d4:67:78:4e:4d:9a:67:48:8c:40:e4:
                    52:76:44:25:49:bc:0c:3a:59:01:3c:ad:40:da:67:
                    98:c6:05:0f:b5:b7:dd:55:8b:c2:08:2c:bf:71:87:
                    70:c1:6e:30:c7:a1:14:5b:c6:42:1f:c1:17:85:7c:
                    b8:ff:5f:3c:f9:b0:e4:95:80:6d:07:d5:5c:a6:ac:
                    4d:60:5b:94:ac:61:ca:2c:05:2b:28:34:fb:f6:28:
                    3b:ca:7c:eb:78:de:ff:3b:61:bc:56:db:7d:2d:1c:
                    a9:91:c9:f5:10:2a:cb:8f:e3:53:04:92:30:a1:99:
                    6c:cf:34:96:d7:75:92:a8:6f:ca:ef:df:12:72:e6:
                    a9:13:5e:91:ad:ce:e9:94:80:bf:5c:90:9a:45:a0:
                    0d:01:57:dd:ab:5e:75:57:92:00:cd:1d:3d:ac:9c:
                    ea:2d:32:96:ea:ab:0a:15:fa:bd:7c:c2:73:25:18:
                    f7:53:e8:13:6b:e9:db:4b:28:7d:54:e6:af:e6:75:
                    d5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8C:1D:A3:07:15:62:73:57:21:A9:87:70:25:22:D6:43:12:28:58
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51cf629-3b5c-444d-a5a3-c49bffcebe3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fef:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         1b:d1:98:1e:fe:ad:8a:da:9e:29:f4:55:d1:c4:bd:b9:1d:a5:
         86:1f:31:09:f5:ff:5a:53:e8:d3:cf:14:b5:d6:68:20:b7:a7:
         eb:af:5e:17:3f:d6:da:7d:c5:48:9f:90:2f:c4:3c:79:d5:42:
         c0:cd:7a:85:06:68:a4:9f:3e:7e:8c:14:7a:a4:81:82:9d:b1:
         b0:c4:80:15:a7:be:ce:97:01:27:f2:e4:40:66:dd:52:8a:bc:
         b4:74:dd:4a:98:55:5b:5b:aa:ec:d2:fa:db:5e:9a:dc:81:4a:
         6c:ef:cb:a3:2b:e6:62:8e:ff:a6:af:d5:7c:64:74:bc:b3:b3:
         19:15:75:0c:4f:02:f9:08:04:bf:e6:54:72:57:48:c4:3b:63:
         49:4c:2f:ba:9e:bb:02:15:23:64:d0:a2:43:5e:08:2e:ac:a5:
         12:c9:a0:f8:bf:f2:4d:f3:65:e1:e3:99:68:92:18:1f:be:95:
         74:9f:f3:4f:07:4c:2f:5d:7e:6e:63:18:97:56:c3:83:52:f4:
         a2:5e:2e:d8:2e:24:8f:af:7e:f6:0e:1d:35:af:d8:f9:47:98:
         44:f8:97:a4:0e:f6:11:5b:32:14:36:99:74:b7:4f:75:e1:6f:
         44:00:a1:aa:02:43:fd:a0:37:a4:d7:d9:d4:cc:ca:03:66:9b:
         75:83:66:ae
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:24:46 2026 by rpki-client