Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0853223-d8a6-44c9-890f-c69fed185aac.roa
File:                     d0853223-d8a6-44c9-890f-c69fed185aac.roa (raw, json)
Hash identifier:          d/AWxgOE5HMEb+HZyvzyp+U4MAXtY1lIm9OAwy2cX/s=
Subject key identifier:   B2:92:F6:13:7A:17:0E:DE:AA:18:2A:96:A3:D8:29:72:BC:75:EE:4A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4781A9869A6807E7626B826A14CCE53E5D946127
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0853223-d8a6-44c9-890f-c69fed185aac.roa
Signing time:             Wed 25 Feb 2026 01:10:08 +0000
ROA not before:           Wed 25 Feb 2026 01:10:08 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f27:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:81:a9:86:9a:68:07:e7:62:6b:82:6a:14:cc:e5:3e:5d:94:61:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 25 01:10:08 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=1282ee5c0cf357d19f87cf312c1e84f8b5419475a2df096263ad215b9a6787df, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:00:f1:aa:fb:2f:1a:fc:11:9f:e5:f0:f7:88:
                    9e:b1:76:94:6b:ea:16:17:d2:6a:fb:e2:8d:a9:cb:
                    53:2c:b3:e3:8a:25:28:0e:46:ce:40:63:60:8f:1c:
                    38:34:d3:a9:af:f3:60:1d:db:36:fc:20:ac:13:9f:
                    3e:32:89:d3:74:63:69:06:e8:66:58:b7:da:81:f5:
                    1b:a6:f1:90:70:8c:93:7a:c9:43:42:42:09:50:19:
                    5a:b4:14:ae:fa:d3:c6:73:bd:9f:ee:e4:5c:2d:36:
                    d2:46:2b:f9:bb:7d:f7:e4:7b:71:45:ad:1e:82:5c:
                    14:26:f6:05:84:c2:e8:5b:77:36:07:57:49:4a:f6:
                    f2:64:aa:0e:83:c6:66:99:71:eb:13:24:5f:9a:cf:
                    c9:2d:54:0a:84:44:c0:3b:c2:e3:28:a9:39:c3:a4:
                    57:f2:bd:ce:85:6d:b3:02:43:00:0a:c1:be:b1:0f:
                    1f:9e:19:5d:00:68:57:f8:41:3e:9d:57:53:01:c6:
                    66:c5:5c:00:c0:e7:94:20:c9:da:71:81:1a:e8:da:
                    9c:ca:d2:47:36:6e:c4:d0:59:42:54:a1:52:61:db:
                    b8:e3:fd:c1:4f:7f:55:bc:61:dd:bb:e1:4a:4f:c4:
                    e0:4a:ff:6c:60:9a:39:1b:3b:bc:be:3d:d9:fb:2a:
                    a0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:92:F6:13:7A:17:0E:DE:AA:18:2A:96:A3:D8:29:72:BC:75:EE:4A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0853223-d8a6-44c9-890f-c69fed185aac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f27:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ab:40:39:4c:eb:26:55:ae:f3:1b:6a:a2:7a:0e:8d:7e:10:bf:
         a0:da:61:d1:fd:87:08:d4:6e:7f:ff:20:ff:ac:44:3f:b7:5e:
         76:7f:e8:9e:35:04:7e:fc:24:14:62:ff:3a:4c:e1:46:8e:dc:
         77:f9:28:97:de:46:2e:b3:69:22:41:f4:bc:b4:88:bc:5b:8f:
         cf:ae:84:7c:74:50:87:90:f5:99:fd:f6:ee:5b:3a:d3:28:91:
         c8:a5:03:55:7d:c4:35:1d:b5:ec:ff:03:15:f7:47:6a:f9:c1:
         83:34:ce:35:9a:c7:be:d7:10:55:14:03:53:b5:29:8c:85:18:
         66:73:a4:18:91:1e:d7:c4:49:14:9c:f6:1a:20:4d:ec:a8:22:
         3a:d7:e4:8a:a0:df:d0:9e:4e:53:21:1b:b0:c1:7e:75:5a:49:
         be:b8:eb:ee:d6:9b:43:d9:cc:db:66:b6:b6:ff:c6:4d:e1:de:
         e6:65:2f:e3:cd:c1:29:8c:7b:61:60:84:25:da:40:57:bc:89:
         5d:72:c9:cf:b8:36:2f:21:94:bb:44:0b:79:7b:bf:e1:69:6f:
         e5:e9:c3:b2:a1:1a:9a:e4:ec:25:17:64:39:39:22:9c:ad:82:
         1a:36:e0:18:1d:22:26:0f:02:60:d3:95:cb:11:e8:76:9b:74:
         aa:55:a8:09
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:38 2026 by rpki-client