Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3709c02-3b03-40ee-a552-a17b19d43a03.roa
File:                     c3709c02-3b03-40ee-a552-a17b19d43a03.roa (raw, json)
Hash identifier:          hmygrCpGAHic04Fhhq4+9dvf1V5AWaIs4bq0ibXyB3s=
Subject key identifier:   1A:08:E1:6E:5B:D1:C0:40:DD:51:7D:C9:D2:F5:F9:6A:95:B4:20:71
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       30DB40E6274E900B54D60C309873FD66450FADB1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3709c02-3b03-40ee-a552-a17b19d43a03.roa
Signing time:             Wed 11 Feb 2026 01:10:08 +0000
ROA not before:           Wed 11 Feb 2026 01:10:08 +0000
ROA not after:            Tue 12 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:a4c0::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:db:40:e6:27:4e:90:0b:54:d6:0c:30:98:73:fd:66:45:0f:ad:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 11 01:10:08 2026 GMT
            Not After : May 12 23:59:59 2026 GMT
        Subject: serialNumber=42a3fdd9590eb7a9ff45927935c99bd67765235069afa14e2242bf0bdaeef7fa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bf:1c:de:4a:35:ab:91:b0:f9:09:d5:86:78:
                    c1:54:a1:6f:73:cb:4f:f1:0b:2f:4e:c3:20:15:27:
                    7f:d9:5d:28:7c:18:3e:e7:0c:67:fc:42:3f:b2:27:
                    72:45:4e:4f:ed:9e:fb:15:19:cf:ec:6b:5d:81:fa:
                    6b:e5:61:15:7c:fb:7b:6e:4d:21:fb:50:7e:af:e1:
                    20:33:8e:82:fb:35:33:d6:19:82:68:de:db:00:06:
                    59:08:5b:dd:9d:0a:36:ea:8a:fb:d4:74:0c:7f:3b:
                    64:a3:00:2e:ef:08:a7:c0:f4:65:d8:01:94:7c:36:
                    cd:07:85:cb:ab:d1:3e:c6:b5:07:42:76:5e:15:7a:
                    f7:b0:ae:b7:78:f1:04:f7:0f:48:14:31:44:68:5e:
                    c7:92:54:e6:bf:15:28:e7:a4:90:bb:4d:10:88:f0:
                    48:d3:3e:d8:b3:fc:f3:f0:b2:27:4a:3a:3b:d7:fc:
                    d2:5b:30:f7:85:41:70:36:53:ac:6a:45:db:de:78:
                    13:cd:78:8c:ae:a5:39:12:7d:a5:25:4e:7a:2e:12:
                    08:c4:11:43:90:b5:c8:af:99:b8:f9:91:79:79:cf:
                    33:6a:9f:82:69:a0:9d:43:40:11:4e:52:bb:46:a7:
                    2b:d9:d7:db:71:7c:f2:75:ab:ff:b6:2d:b3:f9:a4:
                    46:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:08:E1:6E:5B:D1:C0:40:DD:51:7D:C9:D2:F5:F9:6A:95:B4:20:71
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3709c02-3b03-40ee-a552-a17b19d43a03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:a4c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         a0:64:38:8f:6c:88:d9:4a:51:38:5b:7b:b5:6c:e6:91:46:be:
         e1:4a:4f:d5:a2:63:b7:fb:0f:9b:c1:17:03:78:94:87:85:17:
         ef:b6:c2:05:9e:ea:00:07:c2:18:fa:e5:5b:06:3c:a6:f2:e0:
         f7:1a:85:05:b2:1d:21:6c:07:b0:73:c6:0d:cb:5c:24:95:49:
         6a:e1:aa:c0:f0:02:57:dd:c1:28:c3:83:eb:ed:fd:9c:28:e3:
         71:50:9b:22:2b:c8:5a:03:47:a8:0e:6b:03:0a:61:d0:26:47:
         f4:89:f6:f2:e2:d1:84:48:c8:d1:ac:fe:b3:c6:10:47:dc:f2:
         ea:62:98:38:57:30:d0:c4:00:0f:e0:4a:62:bd:ff:1c:98:9e:
         b7:fb:6c:77:4d:6a:cf:87:31:cd:82:6e:9f:cc:69:41:30:82:
         21:16:8b:81:c1:36:ff:75:ec:08:5b:6d:12:57:ed:af:64:2e:
         24:0c:b2:fd:d8:c3:70:6b:4c:9c:b5:c6:f8:ca:d7:8b:3c:cb:
         83:86:5c:b5:49:2d:11:83:e4:b6:73:65:a0:61:0f:58:30:c0:
         17:eb:8d:f7:24:3c:42:29:da:7b:d1:82:db:c5:22:53:fc:16:
         54:9b:81:d1:a7:1a:bb:19:13:32:58:56:ae:bf:07:4b:50:b4:
         66:00:b8:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:54 2026 by rpki-client