Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5bc265a-1827-411f-8fbb-6affb77e57cd.roa
File:                     a5bc265a-1827-411f-8fbb-6affb77e57cd.roa (raw, json)
Hash identifier:          76MNfNySlmpMnUW7GkRptpiyIb9Nt8Lb2KBhc1kQGPc=
Subject key identifier:   BA:DB:A4:A5:5D:25:0B:C9:11:3D:6A:51:7C:B1:96:A0:8F:BB:F9:E5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       45D6CEA72E33C9B09B64A6596AED76AA7E0026C5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5bc265a-1827-411f-8fbb-6affb77e57cd.roa
Signing time:             Thu 26 Feb 2026 00:20:11 +0000
ROA not before:           Thu 26 Feb 2026 00:20:11 +0000
ROA not after:            Wed 27 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fb8:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d6:ce:a7:2e:33:c9:b0:9b:64:a6:59:6a:ed:76:aa:7e:00:26:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 26 00:20:11 2026 GMT
            Not After : May 27 23:59:59 2026 GMT
        Subject: serialNumber=9d48ccb86b4b669d0d4fd3eb6e293659201f0f1d5d6f3af2971e283d442916dc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e5:1e:4e:8e:52:ba:1e:85:5f:f7:1b:dc:14:
                    25:b3:4b:9a:c8:e3:61:7b:bc:ff:b2:45:e9:c0:e3:
                    36:ba:40:6d:4d:62:1c:71:d3:7b:ea:b4:f5:38:90:
                    3b:fc:ad:d1:ec:b3:12:47:45:d5:33:57:2e:ba:f3:
                    fa:38:ca:86:ef:ed:81:71:f2:72:98:dc:43:e1:d4:
                    a7:42:f6:5b:ec:ae:0c:90:48:0d:a1:ad:c6:cd:bf:
                    98:3a:6c:30:b7:23:40:50:ab:ef:d1:7e:c5:ff:f5:
                    15:bf:5a:df:97:2b:cc:37:18:d8:7b:ae:fe:26:32:
                    6b:d6:7f:68:da:45:1b:c6:74:1f:6b:14:8d:df:76:
                    61:3f:ce:d3:cf:88:99:00:6f:f6:72:4a:81:67:91:
                    75:6e:e3:ac:7e:3a:9b:c0:de:89:9a:7d:65:26:34:
                    af:e1:51:44:e9:17:d1:9c:dd:67:87:42:a9:4b:00:
                    39:2b:19:a7:0f:d8:a7:13:bf:22:27:25:7e:74:4f:
                    5f:5d:25:c0:55:da:20:d8:cf:10:bf:4a:da:5f:df:
                    30:71:cf:ac:16:b2:63:33:7a:fb:93:74:08:41:08:
                    71:ec:1a:e2:e6:10:6e:a7:25:ba:47:28:1f:27:71:
                    0c:e9:a7:25:4f:b3:39:0a:11:ac:79:6c:9a:fb:97:
                    5e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DB:A4:A5:5D:25:0B:C9:11:3D:6A:51:7C:B1:96:A0:8F:BB:F9:E5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5bc265a-1827-411f-8fbb-6affb77e57cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb8:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         d8:b5:66:17:a7:ce:df:82:b3:e5:9e:b8:10:cb:4b:72:e4:24:
         5b:fa:44:d7:61:c8:bb:11:91:0e:6e:17:84:31:58:9c:5d:53:
         86:5f:33:b3:db:64:d0:01:c4:34:e9:fd:74:68:07:c5:a6:23:
         3b:f8:76:88:d9:78:7e:b8:c0:cf:de:26:73:fb:8b:1c:bb:37:
         03:25:61:10:f5:ff:8b:8d:15:02:5e:e7:82:7e:52:cb:10:79:
         4d:4f:d9:55:cc:86:c3:1c:52:af:a7:1c:d2:e3:7c:b0:54:f6:
         f2:29:48:f0:cb:78:56:27:e4:7c:66:5c:cf:d0:f1:d9:5a:c6:
         db:81:ca:28:48:74:84:09:2b:78:59:ae:86:c8:07:1c:e8:ab:
         2e:2f:8b:9b:90:ec:81:ae:99:42:3c:d0:0c:69:af:ba:c1:e4:
         54:8b:b6:b1:c0:50:c4:7e:3f:40:5f:6c:c2:97:31:b3:e0:a2:
         82:f3:61:40:f0:b9:2f:bf:61:ea:e3:6d:3a:c7:43:2d:1d:9b:
         1f:82:3f:3b:25:4c:33:b2:84:3a:05:58:9b:95:43:6a:21:8c:
         2a:7c:e1:6d:b1:86:21:31:89:fb:f4:79:00:57:86:90:42:3c:
         d2:af:c7:47:16:38:27:22:aa:6c:2a:74:4f:2c:8d:4b:d3:eb:
         1c:1f:8b:8c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:18:39 2026 by rpki-client