Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6538696-8c8b-4e22-8582-42e86ff86c5f.roa
File:                     e6538696-8c8b-4e22-8582-42e86ff86c5f.roa (raw, json)
Hash identifier:          lXTtwisay53g3gn4Oz0Zkn7S5PiBOaURdINCoujHEEM=
Subject key identifier:   4F:CF:1C:DC:92:65:6D:19:F8:74:8C:B3:AE:75:6A:17:D9:00:4D:3A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0433D38C37072A202BD34ABC0545FBEFF6438A54
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6538696-8c8b-4e22-8582-42e86ff86c5f.roa
Signing time:             Wed 25 Feb 2026 01:00:59 +0000
ROA not before:           Wed 25 Feb 2026 01:00:59 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f2f:4000::/37 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:33:d3:8c:37:07:2a:20:2b:d3:4a:bc:05:45:fb:ef:f6:43:8a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 25 01:00:59 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=0d3caee9426010cf8cc7873a08dbfa3360c72cf1aeac7c029557d33825b8e2d3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:5d:5c:6a:31:8c:0a:d5:39:ce:62:48:f0:
                    2a:2d:93:0b:be:9b:15:f8:22:41:23:6e:88:c9:3a:
                    c5:b1:e8:3a:f9:2c:a6:94:8c:0a:51:1b:b1:f3:ae:
                    2b:da:0b:fc:a8:70:57:6c:c4:fc:cf:bb:76:5f:b3:
                    e7:6e:71:d8:0c:61:d4:6c:06:79:15:62:5b:b4:06:
                    ed:75:14:97:9c:96:84:37:d1:60:6d:72:41:b2:e2:
                    8e:ab:8f:81:aa:a5:11:14:c7:dd:73:78:3f:67:7c:
                    5b:77:a0:77:b9:fe:2c:61:ee:3c:bb:0a:26:c2:e5:
                    55:6d:92:21:91:69:2d:91:2d:07:89:a9:9c:0c:c0:
                    a4:21:cd:81:84:30:16:cc:b6:cc:77:41:52:1d:4c:
                    ae:b0:dc:b3:62:fe:2f:ae:23:d0:0f:8e:49:7d:bb:
                    ba:23:54:b9:71:06:27:ec:b8:40:6e:7e:a5:2b:d1:
                    31:03:12:6c:5a:5c:ad:69:4f:76:6e:b1:a2:77:27:
                    68:7f:d1:82:b5:4a:86:0d:56:ab:a1:44:13:52:ea:
                    9c:3a:e0:7d:17:74:0e:4f:94:0f:47:62:87:96:cf:
                    ca:74:81:30:45:ff:f0:c7:86:82:d5:8c:08:f9:97:
                    33:b7:08:53:0b:51:ae:3c:46:f5:cf:6b:57:19:ab:
                    71:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CF:1C:DC:92:65:6D:19:F8:74:8C:B3:AE:75:6A:17:D9:00:4D:3A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6538696-8c8b-4e22-8582-42e86ff86c5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2f:4000::/37

    Signature Algorithm: sha256WithRSAEncryption
         b1:a6:e0:a0:03:70:0c:ea:23:3f:5f:d3:f1:e4:0b:f4:ef:f7:
         ce:59:b3:ec:ea:44:79:fa:53:18:0e:66:1e:0a:e0:a9:73:fc:
         2f:f9:d1:4d:cc:00:02:4f:dc:bd:bf:02:e2:68:77:a4:8a:41:
         77:16:37:1d:b3:56:45:90:2d:64:2a:2b:81:27:55:b4:93:d3:
         70:78:eb:9d:af:ff:4f:a1:3e:15:d9:f1:f5:d2:61:84:d9:6b:
         e2:cc:50:31:d5:b7:18:23:a4:3f:11:f6:bf:86:a3:fc:e8:12:
         10:c3:4b:73:e6:3e:64:8f:06:1e:12:bd:20:f8:7a:08:ce:fb:
         10:a0:70:c0:c3:00:af:67:e2:77:0a:f6:e6:0e:00:2a:7d:d3:
         33:dc:a2:51:62:15:5c:bf:e3:73:de:3c:26:74:cf:29:a9:cc:
         c7:4d:9a:e5:77:69:f4:01:93:cf:60:a2:5e:fa:7d:92:36:c1:
         bc:7d:78:d2:2a:e9:95:c2:c6:3e:14:51:3b:8d:d9:81:ab:8a:
         1a:23:ad:3b:58:4a:91:90:6a:82:46:52:e3:c7:3b:3e:bf:a8:
         3e:96:e6:fb:ac:ec:0c:83:cf:ba:1c:47:57:22:8d:fa:a4:dd:
         7c:cc:a7:cf:d4:eb:4b:97:e8:2c:24:14:81:66:1e:23:87:cb:
         33:60:1c:25
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:03:31 2026 by rpki-client