Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c636934a-c7cc-4c0f-acb1-a74b2500994d.roa
File:                     c636934a-c7cc-4c0f-acb1-a74b2500994d.roa (raw, json)
Hash identifier:          zqBTJWFLpfCGDzeMl696ZFNBl52u4iYeP+esKYDyuSc=
Subject key identifier:   65:0B:1F:92:F3:BB:F3:E8:4F:0C:EE:FA:20:1B:F2:27:58:64:82:F4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0D279D4343F47C9D6423F558FC1E283AFED2B907
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c636934a-c7cc-4c0f-acb1-a74b2500994d.roa
Signing time:             Tue 24 Feb 2026 01:11:15 +0000
ROA not before:           Tue 24 Feb 2026 01:11:15 +0000
ROA not after:            Mon 25 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f38:3480::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:27:9d:43:43:f4:7c:9d:64:23:f5:58:fc:1e:28:3a:fe:d2:b9:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 24 01:11:15 2026 GMT
            Not After : May 25 23:59:59 2026 GMT
        Subject: serialNumber=428d9616bf7e6f7d0a43e2c4808c887afdcd1ed2d8bde94c77b137e6a33b7f64, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e6:d1:db:e1:c2:51:49:e3:e7:4f:46:b5:5a:
                    c9:39:44:d5:b9:d9:65:59:c9:6a:a6:b5:a9:0a:cc:
                    cf:be:f4:9a:91:e9:27:78:18:86:0f:50:6c:30:fc:
                    9f:80:45:c5:e4:3f:e9:fc:bc:d5:b0:06:02:e2:a6:
                    8a:5c:e2:d4:67:51:49:34:b0:ec:7f:8f:b4:95:96:
                    30:18:24:fd:4a:ab:13:ba:44:db:1b:5c:f5:90:82:
                    94:ba:5e:ec:da:60:1a:32:3a:0d:4e:86:c1:95:34:
                    a5:3f:8a:4e:41:e9:ef:a9:cc:a4:f0:f4:92:38:60:
                    76:d1:bb:b0:bd:b0:71:b9:80:11:77:11:3b:1a:43:
                    18:12:a9:40:6b:7d:61:43:89:8d:b4:b0:53:2f:fd:
                    f1:63:89:91:2b:ef:57:d5:28:6f:26:95:a4:be:c6:
                    36:2f:df:90:18:da:a2:41:e1:8e:45:44:88:45:4d:
                    13:98:27:7e:7d:0b:4d:74:b6:70:96:be:65:04:b7:
                    54:3b:c2:3e:c9:ee:35:14:38:cc:30:70:26:1f:55:
                    a3:b6:1e:4d:95:34:d6:b7:63:7e:66:60:3b:3a:5c:
                    51:8c:6e:a2:1a:cd:6d:07:61:38:61:70:14:ae:f0:
                    a9:b2:b1:2c:f2:c4:32:e7:fd:6a:76:7b:87:a1:8f:
                    72:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0B:1F:92:F3:BB:F3:E8:4F:0C:EE:FA:20:1B:F2:27:58:64:82:F4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c636934a-c7cc-4c0f-acb1-a74b2500994d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:3480::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:d7:40:62:39:42:89:45:e8:48:12:d2:03:74:01:ad:a0:6c:
         c1:e7:94:34:ba:9c:fd:13:9e:71:c4:b1:89:28:65:27:f8:67:
         2c:ad:bd:ec:20:3a:e1:31:8c:e2:0a:58:e9:35:96:f0:b1:80:
         a7:ac:02:b9:50:1d:d3:cf:30:1d:bc:85:5e:ff:3d:6a:1e:84:
         3f:fb:fd:54:df:be:7b:22:18:01:35:3f:7a:7a:d5:9b:6a:69:
         e2:aa:f1:bd:9b:5e:60:45:d1:84:41:ce:4e:bb:9b:82:58:4a:
         8d:93:3c:79:14:da:ab:87:01:1e:2f:99:3f:61:34:46:ed:5d:
         c7:33:2e:8f:2d:5b:8c:67:26:62:79:23:34:ee:fb:2c:05:7e:
         43:92:9c:fc:75:91:2b:0d:54:f9:d6:c1:5a:ea:2a:cd:0d:03:
         be:e5:fc:b7:5c:21:be:a7:e3:59:88:93:17:8e:18:3b:e1:b2:
         9a:8e:c1:5c:7f:e6:97:19:88:ba:75:97:99:4c:dd:b8:01:94:
         d2:8b:bb:5b:ef:5d:a9:90:7d:cd:ae:20:af:48:99:b1:08:9d:
         ca:6d:b9:6e:9a:30:c6:5f:73:41:17:22:41:e8:52:47:ec:fa:
         e9:3d:1a:b5:1d:52:29:44:f9:9c:66:aa:c0:1f:0e:c0:84:dd:
         d4:32:2d:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:27 2026 by rpki-client