Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c222f035-1c02-4052-94b2-4fc3e0405321.roa
File:                     c222f035-1c02-4052-94b2-4fc3e0405321.roa (raw, json)
Hash identifier:          30CgPO6QpoS3qeR1bzw2EWKJhBrVl+ZQrHXwY0TIL5M=
Subject key identifier:   88:14:7D:73:94:36:AF:BB:56:FB:23:EF:55:15:2B:02:CF:0A:88:F3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       79DD00F36A7411ADD954622EE1B17567A4BB6B4D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c222f035-1c02-4052-94b2-4fc3e0405321.roa
Signing time:             Wed 25 Feb 2026 01:11:17 +0000
ROA not before:           Wed 25 Feb 2026 01:11:17 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f20:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:dd:00:f3:6a:74:11:ad:d9:54:62:2e:e1:b1:75:67:a4:bb:6b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 25 01:11:17 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=4cd62a329e78b90f4bacb31b6c9c260fe662006620f2cf25be6bb7a00384f9e5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:8d:c2:4e:0c:70:3c:11:d1:60:d6:71:26:
                    8e:f5:b2:9e:8c:19:27:83:57:56:24:6e:f4:c0:4d:
                    bb:ef:ce:b8:ca:87:8a:b0:c3:f1:e8:bc:92:b6:53:
                    09:3f:55:ed:da:77:82:47:5e:27:d2:7b:f5:da:d3:
                    d8:2f:6f:cf:15:4d:ad:ed:ca:24:f2:a9:7d:20:e4:
                    75:78:56:7c:6e:35:da:3f:ad:91:60:20:f2:fc:b1:
                    05:2a:fe:00:7d:8c:7a:54:82:25:3c:d0:8a:28:51:
                    f7:12:92:a3:2a:bc:7e:88:2a:97:be:f1:47:82:48:
                    1d:99:e3:93:18:58:f2:09:43:df:15:96:90:29:b6:
                    08:71:e5:d0:1b:96:65:c3:d0:5f:5a:57:6a:5a:db:
                    44:f3:ae:e9:02:71:aa:4d:9d:a8:5c:b0:40:af:b2:
                    43:b5:bb:3b:77:6e:cb:45:b6:3e:fd:47:83:54:d5:
                    4c:c9:a8:21:3c:97:d2:c6:30:fe:0d:74:7a:5d:3e:
                    64:e8:ad:64:05:c1:03:9d:8c:c1:40:49:1d:72:0b:
                    6f:e7:59:62:f4:9b:e0:2a:d6:38:0a:25:44:c9:c9:
                    ad:2e:c0:d2:74:ed:22:19:91:d0:37:c8:79:15:24:
                    ec:ac:cc:ea:32:50:5c:bd:e5:a3:79:45:2f:50:f4:
                    02:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:14:7D:73:94:36:AF:BB:56:FB:23:EF:55:15:2B:02:CF:0A:88:F3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c222f035-1c02-4052-94b2-4fc3e0405321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f20:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1c:82:ab:be:02:fd:cb:a1:dc:0c:8d:9c:14:d6:4c:4c:09:58:
         ad:32:bb:28:07:18:73:ef:f1:c3:8d:aa:8b:1a:31:e0:0a:f2:
         b7:ba:69:f3:6a:97:70:0d:e4:8b:59:34:c2:d5:4b:30:4f:58:
         ed:a1:62:14:f0:ac:cc:5a:76:e4:61:73:dd:94:b2:21:20:63:
         70:de:ce:42:2c:f1:92:af:2f:f3:92:2c:27:db:93:80:f6:d1:
         ec:8c:f9:36:f8:6d:24:ba:bc:97:82:33:29:aa:28:00:98:94:
         df:2e:d8:be:eb:7f:94:dc:2f:df:31:06:18:cc:9e:61:9a:ce:
         b1:a6:86:32:bd:92:ac:0d:50:b5:4e:00:45:ad:6d:4d:d8:9d:
         eb:80:b6:a3:4a:e0:7d:22:1c:64:60:5b:c1:09:c4:bd:b4:c5:
         a9:8b:dc:ca:37:01:1c:d0:ac:e3:22:cc:62:4a:1d:e8:6b:86:
         28:aa:ef:d1:9b:c0:e6:ef:77:c9:25:c1:58:09:c5:ec:5b:b5:
         2c:db:37:b8:ba:13:49:9c:0a:00:59:5d:e6:47:33:dc:7d:da:
         97:1c:0e:91:c8:ac:80:e7:3a:c9:41:c6:08:2b:f9:45:cf:d8:
         ae:10:75:06:d8:23:08:06:26:72:ad:07:f8:64:90:5e:ab:49:
         14:a3:ec:e5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:13:26 2026 by rpki-client