Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/185ce3ab-97ef-4abe-b444-3a3c6d7a8c0b.roa
File:                     185ce3ab-97ef-4abe-b444-3a3c6d7a8c0b.roa (raw, json)
Hash identifier:          XkxSYwxyIoO2gTBkIvEFrWgSKwmibPaF0GyxbLuuyL0=
Subject key identifier:   49:53:EE:34:EC:E2:48:20:9C:EA:15:38:87:18:4F:F8:B4:AC:61:41
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       26604D25854F48C78971546377804AF932CB884D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/185ce3ab-97ef-4abe-b444-3a3c6d7a8c0b.roa
Signing time:             Fri 22 May 2026 16:32:32 +0000
ROA not before:           Fri 22 May 2026 16:32:32 +0000
ROA not after:            Thu 20 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fb9:800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:60:4d:25:85:4f:48:c7:89:71:54:63:77:80:4a:f9:32:cb:88:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 22 16:32:32 2026 GMT
            Not After : Aug 20 23:59:59 2026 GMT
        Subject: serialNumber=6f4803a4a85b4b08a69e930a8f7b680d5892efdc27346eedc79e1d0526e1a959, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b2:20:20:aa:3a:53:c9:fd:cb:c6:bd:17:c2:
                    01:e4:56:10:36:a0:36:1f:b1:f1:8a:15:df:36:b2:
                    ee:67:d3:77:c5:15:50:b1:a2:73:31:4d:a2:23:af:
                    91:94:e1:00:b6:9e:99:7f:e2:4d:f6:83:c4:0a:6b:
                    10:d6:23:e4:b7:d5:fa:3f:9a:bc:1a:6f:dd:70:ce:
                    4d:9e:d2:0e:56:56:4b:47:14:a4:8a:cf:82:24:65:
                    b2:5f:20:ce:c7:36:2a:a3:2b:3b:32:75:cb:31:5f:
                    3f:4d:ac:e6:aa:80:8c:7b:dc:de:fe:e6:7d:c9:64:
                    e4:48:97:dc:11:58:98:07:fd:35:b0:34:31:14:c0:
                    1d:88:ef:06:9f:e6:9f:a3:45:5d:07:87:f5:ea:74:
                    f2:07:8a:64:6d:77:b0:79:fa:7d:69:b6:bb:34:d6:
                    78:fc:58:59:05:83:cb:4e:29:3c:d5:07:88:ae:0a:
                    f9:e1:d1:04:b9:03:45:04:4f:d3:68:ef:53:1e:ab:
                    6a:f5:1c:3b:2e:64:cb:02:40:aa:55:fd:0d:af:f1:
                    22:1d:65:51:a5:06:1e:3b:6e:26:91:b3:48:99:26:
                    13:a4:90:81:ae:de:b9:95:d0:60:80:f9:03:5c:d9:
                    76:31:3a:df:3c:76:64:3f:40:52:30:79:af:5b:ad:
                    eb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:53:EE:34:EC:E2:48:20:9C:EA:15:38:87:18:4F:F8:B4:AC:61:41
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/185ce3ab-97ef-4abe-b444-3a3c6d7a8c0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb9:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         c0:7a:d6:85:72:9d:e2:f1:a2:4c:90:83:e5:19:43:df:43:58:
         1e:67:13:56:1a:a7:2b:e9:1f:36:c9:f3:5d:82:a2:67:70:c5:
         5c:ad:9f:c1:14:d6:fe:35:03:94:73:7a:20:46:07:e7:bf:82:
         c4:15:13:47:25:4b:9a:92:fd:18:c6:23:06:ad:07:ae:39:27:
         c8:12:30:41:12:5d:32:22:f0:89:89:21:c6:4a:21:23:e9:96:
         a5:ef:51:fe:1b:ff:9e:36:7f:4f:25:08:70:61:1f:3b:11:21:
         41:ea:36:9e:89:1f:87:e5:6b:16:dc:b9:04:7e:1a:4c:fb:38:
         45:56:56:3f:bf:c7:e0:c9:0a:fa:fc:cd:57:d6:ff:fc:b9:8a:
         c5:be:bb:c2:db:a2:72:6f:70:cb:5d:19:af:8f:26:e6:b9:48:
         fe:ab:96:92:2a:7c:fa:c2:b5:88:b1:0e:af:df:15:75:fb:c6:
         23:21:68:0e:d2:cc:fe:da:39:0b:04:fb:46:99:35:8f:76:4c:
         a1:83:db:2c:7f:98:ac:fc:1a:ed:2f:15:60:53:05:99:fa:e4:
         46:9d:a0:b2:eb:34:68:f7:20:fd:e0:d9:cf:61:1f:54:07:5e:
         42:1c:40:69:63:03:c0:19:e7:b8:6e:80:b5:2e:05:ee:e5:c1:
         55:ef:de:ac
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:38:38 2026 by rpki-client