Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d600ccd6-ff43-419e-9c88-f766b917445a.roa
File:                     d600ccd6-ff43-419e-9c88-f766b917445a.roa (raw, json)
Hash identifier:          FGf7jNYVuNiP36qyeFrM0Kjt0j16bdTNSU6lB4+9nwg=
Subject key identifier:   94:92:36:7A:50:78:60:3F:3E:33:33:3A:5D:C8:8B:2C:6B:37:FE:6D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       729D0CCE17E3CD92226779FB8B466D13B38EC4AE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d600ccd6-ff43-419e-9c88-f766b917445a.roa
Signing time:             Sun 08 Feb 2026 00:30:11 +0000
ROA not before:           Sun 08 Feb 2026 00:30:11 +0000
ROA not after:            Sat 09 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.51.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9d:0c:ce:17:e3:cd:92:22:67:79:fb:8b:46:6d:13:b3:8e:c4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb  8 00:30:11 2026 GMT
            Not After : May  9 23:59:59 2026 GMT
        Subject: serialNumber=c3a6abffa0fda2d16026540e45aed32acffbe3b45d5ba727b93b1d7882309582, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:89:d1:d5:eb:e9:94:10:4d:9e:9f:a1:03:6b:
                    2e:6b:b4:81:41:8c:1e:72:4f:aa:ff:79:e5:d4:0b:
                    ca:b4:f0:ad:e6:e8:74:b6:4c:6c:80:94:0b:ab:88:
                    d5:6a:97:c7:41:72:5d:8e:36:a8:4f:dc:c0:74:37:
                    32:c2:12:08:ae:b4:42:e8:d6:6d:7c:ce:80:a3:00:
                    18:7c:40:6f:83:a1:33:c8:5e:67:26:40:8d:3d:d2:
                    4a:55:84:6f:b8:37:27:7b:2b:a2:60:e0:cb:5a:5f:
                    03:31:62:20:a3:3c:fc:14:96:32:02:6e:63:db:fa:
                    d0:e8:15:41:7a:ef:c0:57:8b:6c:d6:ad:ef:4c:e8:
                    27:d0:fa:b3:c7:0c:18:b7:be:34:9d:10:c6:6f:4c:
                    14:05:5a:25:6d:e4:58:c2:5f:dd:3e:a2:b5:6e:19:
                    d9:79:dd:d9:4e:04:42:eb:30:86:bd:62:3e:4b:56:
                    be:82:82:ae:a0:dd:98:09:e9:33:36:93:ce:a0:eb:
                    74:4e:3c:fb:2e:2f:e6:eb:4d:67:e2:ce:6e:77:a8:
                    86:6e:a0:b9:05:2d:ea:d3:81:9a:08:cb:09:b7:f7:
                    9e:fb:66:cb:cd:6f:01:00:f2:da:a2:b5:a5:78:07:
                    d4:fb:dc:fd:7c:43:fa:e2:3c:2b:15:97:43:fc:c0:
                    20:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:92:36:7A:50:78:60:3F:3E:33:33:3A:5D:C8:8B:2C:6B:37:FE:6D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d600ccd6-ff43-419e-9c88-f766b917445a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.51.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         15:ca:08:ac:67:37:90:fa:59:c0:d7:dd:11:e1:42:4a:7d:15:
         8c:a6:31:86:cb:be:31:8d:88:a3:4f:a2:69:9d:40:93:67:9b:
         b0:92:e0:e6:89:3e:4d:b2:d8:67:f8:5a:b7:8d:0d:79:98:fa:
         16:c9:bc:fc:92:89:c8:b9:6b:47:9b:3d:80:67:c5:ce:4a:37:
         19:81:f0:5c:1d:da:b4:d4:0b:f6:b6:b0:ae:7f:7f:f0:1d:80:
         44:c9:28:e0:ae:89:ad:8b:21:7a:2d:e0:a3:8f:e0:17:5d:70:
         ee:56:d8:7b:b0:db:ed:d3:0f:9d:c0:d9:4e:80:40:67:22:5d:
         62:88:e2:ba:d6:69:4a:e0:6f:fb:4f:50:41:19:17:99:52:14:
         40:e9:45:65:29:c6:87:26:f6:92:ab:fc:3b:f9:7e:cb:bb:39:
         7a:d9:45:1d:d3:c7:17:c4:ce:4e:2c:04:8d:0a:b8:37:34:f7:
         08:2d:a2:c2:05:07:32:ed:c8:0f:da:99:1e:38:95:95:b8:10:
         e9:fb:11:d0:f5:a7:bb:bf:db:79:54:00:f4:6b:d0:cc:60:1c:
         4a:04:3a:f8:93:73:c2:13:d3:22:9a:c3:56:9a:d0:bd:0a:91:
         e5:79:4a:27:d9:6e:4d:4d:a5:6f:61:b8:0c:63:bc:9d:e5:05:
         3b:68:ce:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:23:31 2026 by rpki-client