Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4c6cd78-6139-435b-a258-a601228d052a.roa
File:                     b4c6cd78-6139-435b-a258-a601228d052a.roa (raw, json)
Hash identifier:          NPlYVweFohW6sLcUOxn6Pw9RjwcDkIR1rtcL8yI5HUQ=
Subject key identifier:   DC:FB:1B:4D:99:C5:3D:4A:0F:6E:4A:E0:0E:4A:9D:AF:9E:71:C2:E4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2487875FE20AB504BF839FD1A0C28DC4E4B44605
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4c6cd78-6139-435b-a258-a601228d052a.roa
Signing time:             Wed 25 Feb 2026 01:10:56 +0000
ROA not before:           Wed 25 Feb 2026 01:10:56 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f36:6000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:87:87:5f:e2:0a:b5:04:bf:83:9f:d1:a0:c2:8d:c4:e4:b4:46:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 25 01:10:56 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=d0a5cb8744a7d686f5112e988a382e1d11a90e118282df10233d2d5e9a777202, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a7:d6:67:1f:d2:09:7b:e6:f3:32:ec:12:ba:
                    45:22:2c:b7:17:4e:92:05:e7:c0:ec:74:64:31:10:
                    19:cf:d8:ed:65:ef:bc:1f:cc:f7:1c:84:b1:ce:ac:
                    06:64:86:b5:d8:ec:0a:24:f5:5d:e5:8a:e0:4e:d5:
                    29:05:76:6f:ea:e8:dc:a9:ba:55:35:2b:f3:0a:81:
                    ef:e7:a8:d3:8d:8d:88:63:5e:59:14:68:60:6a:e7:
                    28:54:00:e0:bf:fa:73:fc:a2:fe:f6:6e:49:8e:b7:
                    9d:68:54:60:b6:09:61:f5:ba:4a:dd:71:9d:e8:30:
                    2e:fc:53:54:46:11:8a:d9:4d:7a:a7:07:9a:3a:9b:
                    e4:0e:f5:94:81:44:e3:d2:3f:41:47:ba:81:37:0d:
                    46:fa:ff:a2:21:6d:23:45:53:58:f3:84:d0:c5:17:
                    38:5d:ff:7c:6e:f7:ee:f0:e4:a5:23:05:c7:90:f6:
                    c8:c4:3f:47:0f:97:4c:19:4c:48:c5:28:f7:68:ac:
                    dc:fc:dd:72:58:2d:bd:3f:e4:6e:c3:e0:d4:77:6b:
                    8b:b1:c8:1e:37:97:12:74:0d:4f:61:a5:b3:88:42:
                    aa:f1:b0:1e:38:72:4e:77:88:34:5a:a6:85:1c:b7:
                    3c:a9:52:cb:94:82:b5:27:e7:63:a7:c5:e7:45:7c:
                    7a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FB:1B:4D:99:C5:3D:4A:0F:6E:4A:E0:0E:4A:9D:AF:9E:71:C2:E4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4c6cd78-6139-435b-a258-a601228d052a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f36:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:f6:7e:e1:ec:92:01:e1:6e:d7:a6:fb:0f:75:63:d4:be:21:
         b8:e8:44:b2:39:83:3d:a5:37:fb:e4:28:c5:e0:59:d1:b2:fc:
         e1:52:c8:31:3f:d6:05:35:ea:bb:5a:4b:8a:e6:7a:f4:ff:26:
         9f:63:03:56:c1:43:1d:cc:87:37:5d:56:54:ca:17:a1:de:9f:
         31:b7:9b:98:70:eb:b0:c9:80:06:d1:0d:6c:7a:22:e2:e5:27:
         a5:82:f3:bf:83:9e:53:98:2f:e5:34:4f:5b:89:f4:71:24:9e:
         8b:d9:de:54:9c:b1:b7:30:92:8c:cd:64:66:4e:1d:d9:8b:37:
         f0:8f:7b:e1:e9:fe:11:c4:88:9f:a0:1c:24:c9:d8:ae:d0:ff:
         d5:ea:c7:18:ac:82:99:05:33:10:72:d9:d5:c8:e4:cb:db:9c:
         ec:e1:4b:58:91:46:b2:2e:79:2c:e8:04:8e:23:42:2d:31:73:
         fa:82:1a:7f:82:ff:80:66:0c:f7:3d:10:88:35:72:8a:f6:bd:
         a5:e5:8a:f2:9c:26:5d:5e:40:ad:e4:48:61:75:10:4c:aa:fe:
         76:c7:47:6f:55:bf:73:84:78:01:f6:77:c6:03:d8:30:2a:e9:
         b0:6b:7e:86:ff:12:e3:63:70:d1:e5:47:f1:d0:f1:f6:82:b2:
         75:20:e4:69
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:35:39 2026 by rpki-client