Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/097efca9-2599-4210-a384-fbe86822649c.roa
File:                     097efca9-2599-4210-a384-fbe86822649c.roa (raw, json)
Hash identifier:          4Z5AVdCedlmSrtj2qyHaioItF5IhAErm/z8LJqsnlAE=
Subject key identifier:   A1:90:49:F7:71:E1:19:2D:19:5B:28:96:25:20:4F:5E:E5:7C:E4:43
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F7E554044E24C4E29D6C8C916D2236590941EB3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/097efca9-2599-4210-a384-fbe86822649c.roa
Signing time:             Fri 15 May 2026 02:01:19 +0000
ROA not before:           Fri 15 May 2026 02:01:19 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:c040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:7e:55:40:44:e2:4c:4e:29:d6:c8:c9:16:d2:23:65:90:94:1e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 02:01:19 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=519d80067dc3bae614594e9a86b44ab211aa8968dda336baf844d14240e5e325, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2d:ef:b8:40:ef:39:45:f1:89:4e:58:50:bd:
                    f3:f8:0b:b3:c1:3c:2e:b5:8a:74:95:72:94:d5:6d:
                    8f:8b:b6:d0:2a:24:8f:75:ff:62:0b:e3:e7:3a:5a:
                    a8:75:74:85:9b:55:2d:0f:bd:c3:fb:70:b9:27:7f:
                    47:9a:aa:a5:5d:4a:d8:de:55:19:1a:75:dc:e8:ed:
                    65:c0:cb:5e:0f:74:99:7b:01:3c:11:16:86:d3:29:
                    f2:74:e4:a9:36:18:11:9e:e9:33:39:c0:db:42:6e:
                    4c:ff:e3:3e:1e:73:36:0a:28:78:ef:34:2f:4a:d4:
                    a6:5f:23:8f:b5:e9:b3:45:fe:44:e0:af:c3:72:a2:
                    4a:46:97:1c:fa:e4:ab:cc:af:9f:ec:18:3c:46:d4:
                    26:f6:92:72:7a:6b:7a:76:0c:83:53:28:aa:59:bd:
                    c9:25:9c:ba:ef:78:35:ed:fd:a3:52:1c:bd:2c:6b:
                    19:5e:f8:77:a6:76:7a:56:86:4d:87:10:c3:62:d8:
                    e2:3e:ca:dd:89:35:9b:e5:33:ee:b7:41:e6:f4:18:
                    ab:b0:1e:ef:6e:08:9f:79:67:fc:cb:1e:a7:19:78:
                    52:38:97:b1:b7:69:5d:07:4b:fe:e4:d3:f7:d2:c0:
                    50:4e:ac:aa:15:03:29:35:bb:b4:e5:52:7e:12:33:
                    12:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:90:49:F7:71:E1:19:2D:19:5B:28:96:25:20:4F:5E:E5:7C:E4:43
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/097efca9-2599-4210-a384-fbe86822649c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:c040::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:df:d4:55:cf:73:f8:20:45:b6:f4:e6:19:ae:de:80:4c:3e:
         dc:7d:02:d9:58:75:28:db:f1:a4:21:c8:ab:37:bd:58:14:ce:
         34:ed:8c:a0:77:39:cf:3d:90:1f:de:34:5b:7a:8e:11:16:b9:
         03:b8:97:82:90:0a:5d:2c:98:fd:21:c3:cc:76:33:e6:9c:18:
         3c:c2:bc:c0:9c:f5:c7:00:c4:25:72:9b:0a:91:22:1b:c3:d5:
         53:66:87:5d:ba:b2:70:0c:6f:4f:29:43:21:cf:04:7e:c2:8e:
         4c:95:58:25:f3:22:1d:ba:d6:8c:9d:be:84:28:c3:09:66:76:
         e2:f0:a1:05:25:71:ad:c2:b8:93:54:1b:f6:9b:d9:52:33:ce:
         79:ff:0a:c4:df:f2:42:15:4e:79:61:97:09:a8:49:f3:52:0b:
         e4:ed:07:8d:3a:ad:0b:6b:44:72:4e:3c:9f:57:58:8e:21:39:
         a2:1d:50:7b:e7:61:d0:81:e3:6e:5f:56:5a:bd:f0:3e:67:84:
         84:82:21:88:6b:22:00:ce:9e:6b:0a:ab:a3:97:90:e3:93:79:
         ae:92:ec:fe:a2:85:4f:20:ae:5c:55:33:45:24:15:e0:e6:f9:
         58:72:77:7f:05:46:1c:8b:01:45:78:66:ff:ed:5e:fd:c8:a2:
         8b:9e:c4:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:57:35 2026 by rpki-client