Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0270765a-d109-4ec7-8e3f-2a75396a4768.roa
File:                     0270765a-d109-4ec7-8e3f-2a75396a4768.roa (raw, json)
Hash identifier:          39jb/fHwDXIIDmByR+cqFAVsjP1tLdwAQD3yNtTWq20=
Subject key identifier:   1C:08:25:B0:AC:13:30:20:14:51:8D:F9:F1:A0:D3:DA:82:AA:FD:07
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5F57D541C07700659E13953D50CBAB298EB1C4FB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0270765a-d109-4ec7-8e3f-2a75396a4768.roa
Signing time:             Fri 03 Apr 2026 00:20:44 +0000
ROA not before:           Fri 03 Apr 2026 00:20:44 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1feb:80c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:57:d5:41:c0:77:00:65:9e:13:95:3d:50:cb:ab:29:8e:b1:c4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  3 00:20:44 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=4f5d52ee9bf4a0c90ca84b03543504a0818b1dfa2511d83ebc4c9d5c34fd3f4d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:d3:fa:92:cc:4e:38:8b:ee:d2:20:f9:ad:8e:
                    27:e7:20:24:98:71:a8:67:2f:9c:b1:d3:76:0e:2b:
                    46:df:f9:d9:04:46:fe:c3:0b:5b:e2:79:82:ef:3d:
                    0c:86:6f:f9:bc:54:66:98:04:8a:86:a3:60:dc:4b:
                    0b:15:df:3c:9c:37:50:16:e3:c1:2b:95:59:77:21:
                    db:26:c2:ff:d4:c1:08:84:57:b9:9d:43:1a:63:e6:
                    5a:c8:21:aa:8c:f5:d0:ae:0b:ef:d8:df:76:d5:99:
                    e4:43:81:40:6d:da:37:e1:fa:15:4f:43:b9:53:25:
                    da:53:3f:62:c5:1f:16:63:28:e2:1b:7c:fd:75:ce:
                    71:30:00:6f:b8:0d:00:91:7f:7f:4c:8e:bd:e8:4b:
                    1a:5d:20:4b:65:7b:4f:1a:6d:b3:0c:52:aa:28:f8:
                    2c:b8:84:92:c3:99:6f:ae:18:98:57:cd:93:76:fa:
                    a8:20:eb:17:e3:f9:6b:48:db:f7:08:3b:c1:0c:f2:
                    69:cb:d7:32:1e:9d:86:0d:1e:95:fc:ac:fd:4e:c3:
                    d8:78:8c:8a:3a:85:2e:a0:1a:92:f8:5e:21:a3:77:
                    b5:2b:8d:43:e3:cb:c0:6c:a7:1b:df:5f:96:bf:da:
                    d9:36:d7:ec:ba:cb:5b:40:9e:90:66:ba:da:10:8f:
                    1b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:08:25:B0:AC:13:30:20:14:51:8D:F9:F1:A0:D3:DA:82:AA:FD:07
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0270765a-d109-4ec7-8e3f-2a75396a4768.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1feb:80c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:dd:d4:e0:62:44:b1:15:75:ab:16:f2:da:96:a9:ce:89:68:
         91:02:ad:d8:04:14:c1:89:b5:51:ca:44:29:3b:e7:9c:21:c9:
         9c:ad:54:5a:d8:da:dc:c1:86:94:ab:e8:a1:12:99:d6:61:f2:
         d9:b7:af:17:a8:59:0e:fc:a0:e2:96:c9:8c:c1:2f:1a:d0:ee:
         87:c5:e4:13:6f:cb:cb:2a:ca:71:35:1f:2c:bc:a1:ad:ce:ab:
         8a:d6:35:05:e1:5d:39:53:55:7b:3f:d2:ab:33:e9:23:54:ba:
         3e:94:b3:5f:dc:96:7d:12:97:7b:c5:78:79:6c:c9:c1:9f:d9:
         26:73:f0:7a:f6:3d:ae:b3:10:35:18:19:63:98:73:a5:2a:d2:
         0f:cb:06:85:5b:a2:be:7e:6b:a1:3f:45:f2:ff:30:36:6c:71:
         9c:d3:bb:d0:f9:fd:27:96:ed:71:9f:eb:14:0a:f3:d4:3c:ed:
         0b:1b:ae:0a:09:e9:4d:23:27:f5:96:2c:40:6d:1e:84:24:98:
         a7:6d:29:59:40:a9:ec:7e:75:80:5d:07:f7:25:89:42:92:b1:
         2b:5c:06:88:e8:57:11:0d:de:78:30:fd:d9:35:13:93:ce:e9:
         04:96:f0:53:2c:42:65:f0:f4:f3:13:6f:b4:f4:c3:8a:ed:c4:
         5d:a4:de:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:05 2026 by rpki-client