Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/abd82657-873c-4247-976a-fa627e8bd542.roa
File:                     abd82657-873c-4247-976a-fa627e8bd542.roa (raw, json)
Hash identifier:          O6XLahvXozd/v92Q6WcNRuqhS81OKEzXHYcciw1bslU=
Subject key identifier:   9B:5E:CB:7C:F5:6A:38:35:65:4B:78:10:AC:F8:0C:93:43:8C:65:33
Certificate issuer:       /CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257
Certificate serial:       343906EE996B8878F04E83887BA6F41D16B6C484
Authority key identifier: 53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/abd82657-873c-4247-976a-fa627e8bd542.roa
Signing time:             Sat 14 Feb 2026 00:00:03 +0000
ROA not before:           Sat 14 Feb 2026 00:00:03 +0000
ROA not after:            Fri 15 May 2026 23:59:59 +0000
asID:                     54113
IP address blocks:        2606:2cc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:39:06:ee:99:6b:88:78:f0:4e:83:88:7b:a6:f4:1d:16:b6:c4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257
        Validity
            Not Before: Feb 14 00:00:03 2026 GMT
            Not After : May 15 23:59:59 2026 GMT
        Subject: serialNumber=9687c75e12b39d85b2cde111115982024aa1ec4fcf8474cfb9f416634fe9f8b4, CN=2c2421b9-0ce5-48c5-ac23-91a5565f7afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cf:9c:0c:75:71:e7:9e:6c:cf:a7:10:fb:dc:
                    4c:38:ea:67:9a:5c:b5:6a:27:4c:5a:06:b8:cd:31:
                    5e:d5:15:c3:86:58:c6:24:ff:d0:4f:32:8c:3d:ee:
                    4e:26:a8:fc:7f:ef:30:16:d1:9f:2f:44:ae:4d:bb:
                    62:78:c4:fb:b6:7a:f3:a8:c2:49:d6:2d:9c:cf:f8:
                    b4:36:f3:a8:3f:10:de:ae:0c:da:04:78:46:a1:80:
                    8b:5b:3d:73:94:90:2e:55:85:56:28:b8:4a:98:3e:
                    57:19:d0:bb:3f:8b:a0:9a:bf:2c:17:40:e6:68:59:
                    be:d2:44:94:f2:51:35:6c:17:65:d6:e2:5a:ee:c6:
                    9b:06:74:d8:26:79:01:89:14:7f:c0:a1:85:2c:c4:
                    a2:4e:96:d4:ab:f9:6b:67:09:34:3c:c4:9e:be:89:
                    23:6c:9a:00:35:33:8e:3b:63:e3:e7:1f:94:1f:66:
                    0e:ae:c2:94:be:52:57:45:ef:db:0d:7f:d0:8e:28:
                    24:47:e5:93:1f:c9:ff:0c:b2:dd:dc:83:d1:b6:6b:
                    ed:67:c6:89:9f:65:c1:b9:0e:56:58:03:3c:4b:73:
                    fb:d5:7a:fd:df:4f:19:92:78:37:12:3d:65:7d:36:
                    fb:e4:e9:95:d3:f5:9e:d2:18:a4:13:24:93:00:b7:
                    05:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5E:CB:7C:F5:6A:38:35:65:4B:78:10:AC:F8:0C:93:43:8C:65:33
            X509v3 Authority Key Identifier:
                keyid:53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/abd82657-873c-4247-976a-fa627e8bd542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:7a:87:f5:38:63:c8:54:9a:7e:61:3c:bf:91:cc:9f:41:2a:
         fb:da:4d:c4:d4:74:f0:90:56:0d:f3:e4:06:2c:33:ee:f2:9d:
         b3:69:65:b2:58:8a:e5:c1:af:a9:88:6e:52:ff:e3:6c:e2:b5:
         e7:29:c8:eb:74:13:8e:55:ca:8b:fb:a3:93:fb:35:fc:e2:a2:
         ca:87:bd:62:34:f8:bf:09:26:63:6c:82:f3:22:cd:b2:fd:42:
         70:67:3e:b5:8c:57:63:63:2c:7d:3e:48:9d:1a:5c:05:19:12:
         f6:f8:af:9a:5d:d4:4c:95:d0:df:f7:a9:e0:8d:8f:39:14:cc:
         43:fd:98:7c:98:c1:7f:4a:50:20:66:d4:8f:c7:fe:51:08:68:
         bb:f8:48:54:fe:99:bf:64:99:22:cc:f1:b6:ab:ac:88:9d:b1:
         3e:3a:45:b7:7e:33:6a:99:5a:11:1f:d5:c0:59:a6:aa:f3:fd:
         ca:bf:69:64:9e:77:63:6b:21:f7:30:55:17:04:bd:f8:d8:95:
         fe:0d:62:10:40:a0:d9:ad:c0:4f:e8:c3:14:42:b1:b8:c5:89:
         cc:69:7f:34:b3:0d:0e:a4:b7:1d:0e:d1:d0:90:f1:ff:83:37:
         8c:92:14:88:5d:65:7c:fc:c5:10:50:8d:d4:53:7b:3e:bb:1d:
         bc:bc:0d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:46:24 2026 by rpki-client