Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06cdad74-b0b2-4100-88e8-71b03924bd5c.roa
File:                     06cdad74-b0b2-4100-88e8-71b03924bd5c.roa (raw, json)
Hash identifier:          WBTQbUCRkfa08nusAxDmXtYMoPzpjT3Ghf9bDPjZdXY=
Subject key identifier:   0C:79:8E:C6:0A:23:CC:42:8A:F2:70:51:0F:BF:99:16:CA:00:79:9B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       589C85C9E4E77EC296F2AF05DBD6EE2D31619B8B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06cdad74-b0b2-4100-88e8-71b03924bd5c.roa
Signing time:             Fri 22 May 2026 16:37:44 +0000
ROA not before:           Fri 22 May 2026 16:37:44 +0000
ROA not after:            Thu 20 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fe8:ec80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:9c:85:c9:e4:e7:7e:c2:96:f2:af:05:db:d6:ee:2d:31:61:9b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 22 16:37:44 2026 GMT
            Not After : Aug 20 23:59:59 2026 GMT
        Subject: serialNumber=5b84968ee87edce71120bba5540972cedb7926e5ac271f2adc20f0dcae4def12, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9f:69:16:aa:06:e2:1d:e6:1d:37:f2:aa:a3:
                    32:31:18:77:c9:10:fb:09:5a:ed:6e:51:c5:6a:18:
                    7c:47:a0:21:61:13:c9:c9:b0:e7:23:0e:9b:9b:de:
                    b1:88:22:71:ae:0b:1e:59:1a:fb:4f:d5:07:42:45:
                    4c:69:7e:c4:f7:86:0c:9f:dc:86:88:88:38:c6:ac:
                    57:71:1d:d5:b3:ba:b4:8c:46:93:d5:5f:b6:a0:84:
                    75:29:b5:5f:27:a0:12:5a:7e:ce:65:5f:20:cc:72:
                    20:8e:f4:fd:2f:f8:e8:7e:a5:0c:c1:53:bc:ef:ea:
                    b0:b7:20:ab:e6:6d:c8:45:b6:46:46:88:d1:b0:07:
                    1e:99:19:93:88:cf:40:6b:2b:2f:0e:41:a4:56:6f:
                    b5:71:15:67:3c:a7:cc:9b:53:89:23:fd:75:30:cd:
                    9c:16:11:fa:77:3d:e7:8c:09:aa:a4:5a:bd:c0:d3:
                    67:6d:cf:9b:a5:93:7e:f7:4c:3f:f1:cc:f0:15:9f:
                    85:3f:4b:e9:c3:df:41:25:e7:d8:d9:00:84:ae:54:
                    83:20:ca:bb:de:ff:a2:41:c3:18:62:23:56:c3:81:
                    d3:d3:7f:db:36:14:8b:dd:48:9d:0d:38:dd:bd:06:
                    d9:34:6f:c5:a2:e9:2f:cd:da:21:4b:36:52:98:29:
                    49:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:79:8E:C6:0A:23:CC:42:8A:F2:70:51:0F:BF:99:16:CA:00:79:9B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06cdad74-b0b2-4100-88e8-71b03924bd5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fe8:ec80::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:92:ac:2f:48:e7:08:9e:4f:6b:a5:68:ee:c8:ba:a1:95:01:
         78:62:62:60:b7:5f:3f:b8:34:8f:97:5f:8a:09:99:72:72:06:
         27:43:b4:95:e9:57:d2:1a:e2:d5:53:aa:d8:bd:ff:38:a7:41:
         d3:f4:0a:33:3d:e9:c2:f8:9f:f0:42:ae:5b:28:1b:49:2d:eb:
         6e:45:5e:b7:6d:9d:59:c2:1f:77:2d:d0:41:d7:5f:07:4e:49:
         78:0a:ca:4c:cd:63:4a:86:20:5b:3b:f6:5d:57:3c:31:fc:78:
         0c:7d:ba:4e:71:77:d2:de:33:1c:8e:ca:ad:24:96:23:5e:a5:
         83:44:ea:7c:65:19:ab:6a:1d:e5:a4:31:cb:43:89:ab:af:a7:
         78:25:5e:5e:0d:9e:dc:fb:29:9d:c7:00:49:83:14:61:b1:72:
         51:5d:81:39:15:3e:0b:47:d7:58:07:31:bb:3d:d5:19:19:56:
         64:53:14:01:7c:23:cc:9d:5f:9f:fa:c5:5b:cf:d7:87:b3:dd:
         e3:ec:3a:65:d1:fd:90:3f:ed:e5:fa:16:e6:ec:0d:8f:f2:8f:
         ec:22:d8:4f:8c:bc:a4:7e:73:ec:ef:68:0a:d9:95:b0:e0:a5:
         33:0c:ab:5b:f0:18:73:ee:44:ae:a8:aa:68:97:ce:b3:38:a0:
         d3:d4:d1:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:15 2026 by rpki-client