Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6d34fe3-6c6a-4c49-903b-bcae88048613.roa
File:                     d6d34fe3-6c6a-4c49-903b-bcae88048613.roa (raw, json)
Hash identifier:          Js0ngMogFk/CFly3QAHA4x5rJggf2zDx8WlCN9YKlAo=
Subject key identifier:   A2:5F:4F:0D:65:44:80:BA:FC:C1:47:43:B2:3B:12:2D:A9:24:71:9E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2C8EEC21D5E60109EE8467670189DA33F3E9975D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6d34fe3-6c6a-4c49-903b-bcae88048613.roa
Signing time:             Wed 11 Feb 2026 01:10:43 +0000
ROA not before:           Wed 11 Feb 2026 01:10:43 +0000
ROA not after:            Tue 12 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fea:7480::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:8e:ec:21:d5:e6:01:09:ee:84:67:67:01:89:da:33:f3:e9:97:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 11 01:10:43 2026 GMT
            Not After : May 12 23:59:59 2026 GMT
        Subject: serialNumber=7d3469670371121f0b2d32fcb1baa22abdc38e89228f2a6397c73156d28d0594, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7a:87:7a:aa:0c:22:d8:9c:16:7c:60:41:fd:
                    89:dc:04:f3:49:37:ed:67:f4:69:d2:2b:3d:85:28:
                    52:58:53:9c:9d:e2:af:d3:5c:22:0f:c4:d1:4c:cb:
                    f0:bb:d3:51:24:c9:93:6e:46:25:54:3a:62:cd:40:
                    68:ee:d1:d9:43:59:5b:9c:48:37:39:82:b8:ae:45:
                    70:bd:ec:72:9e:ee:40:e2:e8:2d:9c:1c:3a:3f:9f:
                    f6:65:41:16:c3:e7:82:cb:4c:66:b5:f6:6d:c1:1a:
                    4c:34:6e:73:07:57:c1:cf:1b:74:df:c4:97:b6:04:
                    b7:c7:4f:c3:ab:ee:4d:92:b3:3b:53:87:4d:fc:91:
                    35:6c:13:a7:95:12:5f:5b:dd:e3:37:bc:a2:e5:9c:
                    14:24:25:af:70:91:4f:6b:85:2a:1c:15:fb:0a:5c:
                    4a:ef:da:05:3c:1c:4b:59:ee:28:19:c6:c7:d3:24:
                    9a:26:bb:eb:05:0c:54:72:b4:fc:df:b1:08:8e:a5:
                    84:c0:af:83:bd:87:35:68:84:2d:e8:3d:8e:d2:5a:
                    7f:e9:b3:2b:3d:36:ea:fd:a3:7d:f6:23:89:51:3d:
                    65:c2:4e:b0:b1:a5:70:fb:6c:48:85:dc:7a:46:f4:
                    e3:e5:2f:38:18:66:f4:2b:25:67:20:ba:7b:f1:0a:
                    3a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5F:4F:0D:65:44:80:BA:FC:C1:47:43:B2:3B:12:2D:A9:24:71:9E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6d34fe3-6c6a-4c49-903b-bcae88048613.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:7480::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:91:cd:7e:2d:8a:6e:11:0f:84:18:f6:96:f1:01:61:fe:55:
         29:13:e2:22:27:4f:ae:19:3a:82:69:0b:9a:39:ad:f9:32:88:
         6b:6b:a6:30:df:15:a0:93:87:5b:1f:c4:3d:20:69:9e:9d:4b:
         97:f1:d7:38:9e:6d:20:81:94:55:d4:28:11:64:d1:48:ab:5d:
         42:65:d5:56:77:b3:7c:4b:1a:bd:3e:0e:7f:65:ee:8b:6f:2c:
         f0:71:69:9b:f2:9b:6e:67:6f:71:72:c2:36:90:86:9a:73:fd:
         af:ae:f1:09:70:a3:5f:0d:74:77:5b:7f:96:d5:6d:11:4c:d8:
         e6:d2:a6:fc:96:76:25:b8:d0:ab:fd:95:e4:f0:bd:9d:32:40:
         02:34:76:38:51:0f:46:a0:45:31:cf:aa:f5:cb:2c:d5:88:a1:
         d9:70:b6:7a:60:47:e1:82:f6:e4:53:2c:d5:82:d4:f1:20:7b:
         26:84:cc:aa:06:4f:60:6d:64:83:0d:45:85:c4:4a:11:81:7f:
         d0:93:04:62:b5:35:2f:be:a0:28:d5:48:dd:18:82:aa:19:7e:
         0b:45:e8:01:54:0b:36:a0:63:72:7f:e9:c5:fe:20:aa:9d:63:
         7a:9b:7d:48:2d:8e:36:0b:fd:ac:5a:18:5c:46:92:fb:29:f3:
         0c:27:de:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:26:10 2026 by rpki-client