Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7b6bcb6-8e89-4b81-804e-96889fd99885.roa
File:                     a7b6bcb6-8e89-4b81-804e-96889fd99885.roa (raw, json)
Hash identifier:          D5otVHI/bh03IomBEqhsEzi2dRxtF+RWRvq1OWsgmfc=
Subject key identifier:   77:9D:8C:A7:79:60:54:A2:48:4A:C6:CD:45:EE:8A:F2:64:E8:92:A3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       36FE5552FA972A67CF913753B813E5E5A97EC0DB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7b6bcb6-8e89-4b81-804e-96889fd99885.roa
Signing time:             Sat 21 Feb 2026 00:50:11 +0000
ROA not before:           Sat 21 Feb 2026 00:50:11 +0000
ROA not after:            Fri 22 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fec:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:fe:55:52:fa:97:2a:67:cf:91:37:53:b8:13:e5:e5:a9:7e:c0:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 21 00:50:11 2026 GMT
            Not After : May 22 23:59:59 2026 GMT
        Subject: serialNumber=429c7f1d241e0ba3d9922dc23ecd571fc9ef6209e60fd64f045457a0af35150c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:59:5a:b7:f1:d3:11:8a:05:b0:86:da:db:35:
                    59:d8:e7:64:f7:99:98:88:01:8a:9f:5c:7b:61:80:
                    9e:c0:06:ce:28:21:e7:1e:89:3c:c5:79:15:01:9e:
                    85:e5:64:c3:ee:b1:0c:0f:32:65:de:76:f5:49:3f:
                    05:76:f3:7b:41:4e:9a:d2:43:25:44:36:d9:e0:84:
                    d3:f9:de:a5:54:b6:1b:6a:b5:a7:b6:2a:be:0f:f9:
                    85:21:ba:0b:cc:22:64:bf:83:98:1a:44:d2:ce:29:
                    a9:38:94:2a:7a:0f:5b:88:2e:c1:18:33:b7:ac:21:
                    dd:3d:be:cd:0b:c8:de:81:d3:b4:2c:74:26:98:f7:
                    8c:3b:bf:3e:c9:90:76:c1:63:1e:17:83:79:81:9e:
                    40:50:e0:d1:2a:51:48:4b:b1:5b:c9:7f:a2:b7:6d:
                    53:0a:0d:b1:f5:10:18:75:b7:8f:08:0a:7c:c8:30:
                    10:25:7c:02:3a:5b:b6:10:bd:88:b1:da:78:16:8a:
                    94:4f:ac:22:b7:b2:be:7e:17:b7:cc:e1:f6:06:47:
                    32:25:9b:ac:48:ca:73:e1:6a:ed:34:bb:63:a2:96:
                    e3:f8:98:51:fa:ef:23:d2:75:df:8f:63:90:2a:ad:
                    e9:d5:9c:c6:24:a3:74:99:f5:59:5e:ce:0f:79:97:
                    c4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9D:8C:A7:79:60:54:A2:48:4A:C6:CD:45:EE:8A:F2:64:E8:92:A3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7b6bcb6-8e89-4b81-804e-96889fd99885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:3c:94:73:8b:8f:76:d8:2f:dd:24:ba:1a:31:9f:8b:70:a7:
         c5:ba:d8:ad:16:63:9f:ba:2c:51:77:3b:85:09:2c:63:03:dd:
         db:0e:50:fa:ac:f0:37:6b:0d:da:72:e0:21:a8:cd:0d:2e:03:
         d9:aa:95:ef:d9:91:73:c3:98:7f:a6:0c:e4:2c:fe:ce:ae:8a:
         98:84:3c:0e:01:f1:d6:9a:c6:3c:2f:ee:28:87:10:6b:8c:e7:
         e3:01:55:b5:df:eb:93:e3:de:a0:4a:a2:53:dc:ff:66:0d:62:
         45:40:25:79:f9:0e:dd:c9:8b:a0:3b:8c:80:f7:6b:18:df:96:
         25:42:f6:0b:ac:fb:34:0b:46:89:bd:e0:00:b4:78:54:55:94:
         b5:e3:c1:f7:d3:30:20:db:c8:04:a1:c9:db:88:68:3d:97:18:
         80:b2:88:38:19:f5:13:ba:18:77:9c:2d:ad:00:10:ff:e2:66:
         59:bc:34:33:e8:bc:83:6b:8f:81:38:45:b4:c3:2d:b4:6b:ac:
         05:61:48:00:7b:08:6b:46:c5:ee:0b:05:36:33:45:30:c8:04:
         4e:fc:76:64:4d:14:ef:fe:83:d3:5d:82:27:62:8c:2b:be:60:
         77:7c:5f:69:73:6c:48:db:f3:5d:29:3a:46:08:09:2b:6b:0f:
         b7:8e:f1:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:49:35 2026 by rpki-client