Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0d43700-d32a-417a-9ea8-12eb83d26590.roa
File:                     f0d43700-d32a-417a-9ea8-12eb83d26590.roa (raw, json)
Hash identifier:          PaHoNQHSXt5ObIG5DNF6GF9NGuh94+DdCnDamG26s50=
Subject key identifier:   3F:C4:4B:A9:30:BA:FF:8C:C6:33:78:B7:7D:B3:6F:D3:EC:46:1D:4D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2EE8108B6765BDF81B09B06106D8898914B0E59B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0d43700-d32a-417a-9ea8-12eb83d26590.roa
Signing time:             Thu 26 Feb 2026 00:11:47 +0000
ROA not before:           Thu 26 Feb 2026 00:11:47 +0000
ROA not after:            Wed 27 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff3:8010::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e8:10:8b:67:65:bd:f8:1b:09:b0:61:06:d8:89:89:14:b0:e5:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 26 00:11:47 2026 GMT
            Not After : May 27 23:59:59 2026 GMT
        Subject: serialNumber=383fb3b081cec5e43c618de5c756addb754435431325aecdf1d11b70832e282a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:96:00:9c:59:8c:2e:6b:83:c1:fb:6d:0d:78:
                    25:82:10:f9:4a:25:35:9c:89:fc:f3:27:c0:b1:02:
                    87:ab:f9:f0:1d:53:58:1b:86:f6:c0:6b:b4:41:f7:
                    99:e3:4e:52:64:18:75:73:2b:10:2f:0e:a8:36:67:
                    dd:f8:d3:e5:98:8e:b0:80:6b:5d:30:af:82:89:7f:
                    ee:34:38:49:ec:c8:6d:d0:87:82:4c:80:90:bb:85:
                    47:9d:b2:6b:cd:f2:03:39:28:b9:af:35:01:f1:90:
                    b4:77:61:82:45:65:37:c8:bf:08:cf:29:aa:7b:a0:
                    a9:47:c5:8a:05:bb:85:de:d0:f9:25:c5:aa:8a:04:
                    57:7a:1b:1b:ed:c1:3c:89:b8:26:40:0b:6b:61:d9:
                    b6:7b:91:09:1c:df:7b:5a:b6:38:f6:35:54:eb:ef:
                    b1:1e:82:0b:23:da:fe:f8:07:0a:80:5e:3f:0a:69:
                    07:e1:5a:5a:02:bd:57:9d:bc:5e:82:4c:f6:23:9d:
                    87:d6:e8:9d:1d:2d:e3:72:06:42:1a:9f:35:a6:0b:
                    9c:9d:32:c0:68:e6:62:86:ce:92:3c:0a:77:ee:04:
                    5d:be:83:37:5b:8d:52:e4:9d:d8:56:12:1c:ba:c2:
                    6a:be:72:ba:66:2d:28:6e:43:f2:ea:88:7c:c7:7f:
                    a3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C4:4B:A9:30:BA:FF:8C:C6:33:78:B7:7D:B3:6F:D3:EC:46:1D:4D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0d43700-d32a-417a-9ea8-12eb83d26590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:8010::/46

    Signature Algorithm: sha256WithRSAEncryption
         ab:79:b6:32:31:02:c6:9a:f8:d6:26:4f:03:73:f8:db:0e:14:
         41:56:f8:52:9d:79:9c:0a:16:7d:3e:24:09:e9:16:86:04:0c:
         12:b2:56:c6:2c:7f:8f:71:ff:d2:6a:7b:14:de:f9:f6:49:1a:
         4c:a9:8c:43:ab:f6:34:d9:2a:db:2f:b7:0f:f6:1a:fe:25:b2:
         e0:f4:e0:73:64:1e:44:43:58:f5:01:30:7f:05:4f:54:4f:f0:
         69:03:9e:c3:42:34:86:9f:e6:76:c2:13:77:30:00:5c:99:6c:
         0c:eb:32:17:41:35:8c:0c:21:57:f3:51:42:32:12:a7:36:78:
         27:d8:d3:a1:10:67:a2:2b:c4:e0:a6:cc:82:04:dd:ad:20:9e:
         ae:87:7d:c5:98:40:30:79:e8:3a:47:24:c2:19:4d:c6:03:0a:
         c9:26:36:f5:aa:03:56:00:e7:82:a3:04:34:50:c7:19:74:8d:
         e8:a2:f2:fb:0f:eb:e4:ba:0c:c5:55:7f:6b:dd:2e:90:ea:0c:
         51:2c:8b:9d:51:2c:07:eb:6e:54:67:d4:23:39:38:15:e5:e8:
         c6:c8:fc:fa:e7:38:16:7f:d1:d1:01:12:6b:c3:5b:80:f9:90:
         73:ab:8f:0a:db:27:3b:ac:76:55:08:86:bb:29:2b:fc:40:05:
         80:c3:3a:12
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIULugQi2dlvfgbCbBhBtiJiRSw5ZswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI2MDAxMTQ3WhcNMjYwNTI3MjM1OTU5
WjB6MUkwRwYDVQQFE0AzODNmYjNiMDgxY2VjNWU0M2M2MThkZTVjNzU2YWRkYjc1
NDQzNTQzMTMyNWFlY2RmMWQxMWI3MDgzMmUyODJhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/lgCcWYwua4PB+20NeCWCEPlKJTWcifzzJ8CxAoer+fAd
U1gbhvbAa7RB95njTlJkGHVzKxAvDqg2Z9340+WYjrCAa10wr4KJf+40OEnsyG3Q
h4JMgJC7hUedsmvN8gM5KLmvNQHxkLR3YYJFZTfIvwjPKap7oKlHxYoFu4Xe0Pkl
xaqKBFd6GxvtwTyJuCZAC2th2bZ7kQkc33tatjj2NVTr77Eeggsj2v74BwqAXj8K
aQfhWloCvVedvF6CTPYjnYfW6J0dLeNyBkIanzWmC5ydMsBo5mKGzpI8CnfuBF2+
gzdbjVLkndhWEhy6wmq+crpmLShuQ/LqiHzHf6PRAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUP8RLqTC6/4zGM3i3fbNv0+xGHU0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2YwZDQzNzAwLWQzMmEtNDE3YS05ZWE4LTEyZWI4M2QyNjU5MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAB/zgBAwDQYJKoZIhvcNAQELBQADggEBAKt5tjIxAsaa+NYmTwNz+NsO
FEFW+FKdeZwKFn0+JAnpFoYEDBKyVsYsf49x/9JqexTe+fZJGkypjEOr9jTZKtsv
tw/2Gv4lsuD04HNkHkRDWPUBMH8FT1RP8GkDnsNCNIaf5nbCE3cwAFyZbAzrMhdB
NYwMIVfzUUIyEqc2eCfY06EQZ6IrxOCmzIIE3a0gnq6HfcWYQDB56DpHJMIZTcYD
CskmNvWqA1YA54KjBDRQxxl0jeii8vsP6+S6DMVVf2vdLpDqDFEsi51RLAfrblRn
1CM5OBXl6MbI/PrnOBZ/0dEBEmvDW4D5kHOrjwrbJzusdlUIhrspK/xABYDDOhI=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:27:06 2026 by rpki-client