Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/adaa974c-4683-4751-815d-d3dc3f784bfc.roa
File:                     adaa974c-4683-4751-815d-d3dc3f784bfc.roa (raw, json)
Hash identifier:          sGE4/wH1gXkp2EE6dxk4PHMyculdUsCjrTae8jE9jT8=
Subject key identifier:   E3:83:32:FE:AD:1B:6E:2F:84:2D:B3:04:B0:E2:05:8E:13:E6:76:62
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4F39C170ECFC9415F8B76A15E977EEE9579113DA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/adaa974c-4683-4751-815d-d3dc3f784bfc.roa
Signing time:             Wed 25 Feb 2026 00:21:22 +0000
ROA not before:           Wed 25 Feb 2026 00:21:22 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f13:4800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:39:c1:70:ec:fc:94:15:f8:b7:6a:15:e9:77:ee:e9:57:91:13:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 25 00:21:22 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=efc9dcec6867e3ddfd2b51a61885bb97c7bb7ac6505c81fca1fe28e93cbda60c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:67:a7:d8:08:9c:55:29:dd:a3:79:5c:1e:31:
                    fa:c4:7b:71:e7:79:d7:bc:74:b0:d4:44:4f:e8:16:
                    8b:a4:2d:63:37:72:2f:6a:21:55:c4:b7:b2:f0:37:
                    59:df:fb:fb:dd:70:39:c5:69:48:09:70:df:18:32:
                    e2:d3:17:35:2e:b5:c3:30:42:db:f3:69:15:2d:98:
                    ff:ef:2a:e6:0e:3e:b3:b5:d4:7b:e2:fa:47:e9:42:
                    a1:3d:dc:f5:8e:49:db:4b:33:95:83:51:d8:74:4a:
                    c4:a7:6d:0e:dd:4c:59:bc:38:8d:cd:d4:f3:45:37:
                    98:24:92:4f:53:60:66:09:7f:1d:4e:a2:12:b6:43:
                    8e:59:73:a8:77:64:47:23:28:01:40:38:ed:46:a8:
                    16:9d:79:81:87:82:a6:bc:53:e4:61:c7:79:f3:57:
                    fd:6e:1d:b4:97:46:d7:e4:eb:5d:fc:20:fe:ea:36:
                    2c:27:39:3d:5a:bd:b1:cc:9a:61:ee:87:76:84:4f:
                    35:4b:06:e7:31:6e:2c:b0:74:2a:bd:48:29:63:9d:
                    be:82:64:65:ea:54:82:f4:25:e5:db:54:06:8b:11:
                    b9:4a:96:89:6a:af:25:0d:be:68:bb:f3:3f:10:07:
                    d1:27:6b:b5:ac:10:f2:7b:57:87:2e:a4:c1:c6:a5:
                    39:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:83:32:FE:AD:1B:6E:2F:84:2D:B3:04:B0:E2:05:8E:13:E6:76:62
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/adaa974c-4683-4751-815d-d3dc3f784bfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f13:4800::/38

    Signature Algorithm: sha256WithRSAEncryption
         6c:b9:17:12:9c:06:a7:c0:7d:6a:bc:71:08:80:da:c5:18:c5:
         85:27:32:4f:7a:5b:a0:39:cb:ed:54:a7:7d:6f:38:b1:63:3f:
         29:f9:37:cc:95:ab:4e:7b:99:c4:76:2e:92:24:80:0e:e2:68:
         fa:19:f0:d4:16:43:87:e0:38:e1:dd:7d:7e:d5:12:1d:26:5c:
         b3:0f:1e:85:06:0c:b8:8f:44:60:e5:74:20:84:8b:27:9f:c8:
         4a:3d:af:9c:5d:44:39:72:68:95:78:67:6f:e6:35:bc:9d:bb:
         b5:ce:1a:53:6b:57:d1:36:3a:7f:53:31:5e:b5:c2:d8:31:47:
         31:20:21:37:fb:c1:28:96:9d:db:f1:11:79:50:cb:cb:f0:2b:
         d7:12:ac:06:e0:54:a0:69:58:e2:b1:f1:34:5d:7e:a0:9b:f5:
         c4:41:e9:8f:d5:b8:aa:8c:0d:f5:0b:c6:54:49:63:a3:c8:49:
         fb:70:08:d1:12:76:2c:12:76:7e:68:9f:9d:04:35:39:81:11:
         ef:84:e1:f3:3a:7f:88:6b:0b:22:a5:45:61:52:c8:e5:14:ae:
         5a:3f:3f:f1:a9:18:d9:41:41:93:5b:96:6d:68:08:f5:23:53:
         de:7a:9f:0e:f9:e1:2b:79:07:16:69:95:ca:98:29:ad:f1:bb:
         18:b2:3c:3e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:07:48 2026 by rpki-client