Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaf82949-c277-48eb-a60e-5a42e5840364.roa
File:                     eaf82949-c277-48eb-a60e-5a42e5840364.roa (raw, json)
Hash identifier:          BdDO5bt18X3Y894mq/6R//rgNOxbd2S78bFGw3s5vGQ=
Subject key identifier:   0A:EF:47:B2:A7:DC:B8:E1:12:F0:4D:78:CF:78:EE:55:51:C2:64:E0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4F90C0C43C82EE136BC73654035F9644307C7631
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaf82949-c277-48eb-a60e-5a42e5840364.roa
Signing time:             Tue 24 Feb 2026 02:10:10 +0000
ROA not before:           Tue 24 Feb 2026 02:10:10 +0000
ROA not after:            Mon 25 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f00:81d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:90:c0:c4:3c:82:ee:13:6b:c7:36:54:03:5f:96:44:30:7c:76:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 24 02:10:10 2026 GMT
            Not After : May 25 23:59:59 2026 GMT
        Subject: serialNumber=51b83d067699148131fa1ab2ce0c1f5635596892d89004a0610b57c0e2377cbd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2d:c5:b1:49:e6:6b:a9:10:ee:96:43:a9:24:
                    5c:49:14:c2:ae:66:7a:65:80:1a:a1:4a:b9:d4:84:
                    53:62:d8:3f:ae:34:ad:8d:13:6f:e9:0e:9b:6d:19:
                    cf:14:73:e4:40:a8:90:c2:f8:ef:f9:0f:0c:5c:58:
                    6d:e6:da:4e:b7:9c:5e:78:2f:e2:1c:b2:6f:7d:f1:
                    77:dc:5c:bb:ff:26:3c:98:db:2f:63:14:b4:7e:1f:
                    1f:57:be:51:70:f6:c1:c2:37:ac:9c:d3:77:ea:95:
                    08:44:26:2a:7d:5b:c4:33:e0:a8:a1:e8:08:25:04:
                    e2:21:ca:2b:68:d3:64:41:88:86:94:ab:9d:54:8e:
                    c6:72:c9:db:24:87:28:98:7e:5c:36:43:05:ee:fa:
                    d2:78:f3:6a:4f:f2:d6:7f:03:8c:22:a7:fc:cc:3e:
                    9e:69:69:d4:54:9e:1e:26:5e:22:79:79:ba:f7:f9:
                    9e:1e:0f:53:2e:48:86:7a:59:92:72:e6:30:f4:4b:
                    53:b6:b6:64:61:40:20:b4:ca:78:7e:9c:a7:ce:7a:
                    91:61:cc:a3:ae:22:60:01:75:24:12:7e:7f:8d:f3:
                    bb:96:b1:fc:e8:3b:68:85:cc:34:c8:78:62:26:3c:
                    23:39:3a:7b:f0:57:21:2b:8e:fd:f6:9d:b7:a1:b3:
                    91:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EF:47:B2:A7:DC:B8:E1:12:F0:4D:78:CF:78:EE:55:51:C2:64:E0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaf82949-c277-48eb-a60e-5a42e5840364.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:81d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:dd:0e:fe:db:e5:6f:84:18:e2:f2:b6:5e:49:48:57:e6:a9:
         db:05:b9:c1:79:9c:99:8b:95:21:15:b9:c1:3d:e7:bf:04:91:
         a2:b6:75:3d:31:66:d0:c7:7c:60:b8:04:73:9f:08:e3:de:48:
         06:b7:06:ac:c9:41:8c:fd:b4:5b:6e:55:08:b0:ed:98:5d:3e:
         f9:2f:fb:55:96:ca:15:37:75:7b:7f:e7:cc:81:67:10:2a:a7:
         e9:f7:a0:5d:44:ff:b0:e0:ed:5f:00:c7:3b:aa:a7:a8:69:ae:
         bd:18:ad:ca:d7:1a:42:70:1c:b0:01:1f:8b:2c:38:c4:66:6c:
         12:b9:c9:bf:68:d3:a8:64:cf:d1:d1:82:df:71:bc:47:7e:37:
         74:b6:18:2b:d3:12:0d:59:ad:ee:be:c7:1e:ce:12:0f:53:ae:
         02:a2:90:8e:b3:b5:96:14:10:61:6d:34:da:59:ef:59:90:3f:
         ac:a7:3b:4d:35:c8:12:69:8f:94:e3:8f:a7:59:d0:9e:0a:9d:
         c2:92:e7:50:45:38:0b:d9:96:f5:84:bb:e8:02:06:63:ad:84:
         2c:24:7c:9e:4c:f9:3d:fe:76:bd:9d:a0:0f:54:3d:e7:40:3f:
         8e:78:62:fa:b7:cb:c0:11:8b:bc:9f:33:2e:6f:b6:b9:01:43:
         07:bd:35:5f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:15:28 2026 by rpki-client