Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25d16601-c1dd-4bc2-9272-b1bad646a5ef.roa
File:                     25d16601-c1dd-4bc2-9272-b1bad646a5ef.roa (raw, json)
Hash identifier:          9cD4xIA4doCrfqNkzM+XlhvznqrqFIUKEsg+ExfiZ+g=
Subject key identifier:   03:7B:AB:E8:EF:FA:52:BF:9B:50:F7:84:0C:63:4B:D6:EF:71:B0:97
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1749EC5F633FC4FCE22C28D45ABF5F987A285A33
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25d16601-c1dd-4bc2-9272-b1bad646a5ef.roa
Signing time:             Sun 31 May 2026 00:41:16 +0000
ROA not before:           Sun 31 May 2026 00:41:16 +0000
ROA not after:            Sat 29 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fba:50c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:49:ec:5f:63:3f:c4:fc:e2:2c:28:d4:5a:bf:5f:98:7a:28:5a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 31 00:41:16 2026 GMT
            Not After : Aug 29 23:59:59 2026 GMT
        Subject: serialNumber=4bd4aba5e49c35bc4ded915894391a616cd960ecec8d9914ee2ce0f2d018b505, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:7e:88:aa:aa:83:34:04:65:85:0f:ea:60:
                    c4:b4:7f:fa:e8:ad:d2:2a:62:4d:33:31:33:fd:c7:
                    2a:ec:53:30:80:ac:71:3e:e5:96:b4:da:87:a1:14:
                    4c:5d:96:35:96:4b:ae:9d:81:85:8f:ed:09:28:0d:
                    d3:c2:4b:22:b8:7a:c9:13:f0:79:07:f3:6d:fb:91:
                    6c:de:eb:ad:82:e9:54:9c:b2:99:73:ea:80:9f:cd:
                    4a:ed:93:41:22:6f:ad:e2:f0:a8:50:a9:ce:36:53:
                    f5:8c:30:57:00:e5:61:a4:ba:e6:08:89:ea:6c:30:
                    06:89:c5:31:a2:eb:67:20:01:9f:06:3a:6d:60:98:
                    80:52:54:99:6d:04:ae:de:0b:5d:77:3e:b5:42:23:
                    15:cc:25:da:05:32:4f:0f:8d:e9:0f:45:42:00:84:
                    c5:4f:75:14:bd:9d:b9:68:dc:5c:9b:ac:45:f7:bd:
                    07:2b:8a:19:14:4c:f1:eb:6d:d9:7a:cf:04:61:36:
                    ea:8b:dd:83:5f:65:a0:06:81:97:5b:82:89:7c:f7:
                    91:7e:ae:03:91:80:ba:dd:41:92:43:75:69:c6:54:
                    0e:18:75:68:53:bb:9d:93:27:5f:05:94:9b:bf:44:
                    25:09:04:97:2c:f7:bd:3a:be:6d:f6:44:fa:2c:03:
                    db:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7B:AB:E8:EF:FA:52:BF:9B:50:F7:84:0C:63:4B:D6:EF:71:B0:97
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25d16601-c1dd-4bc2-9272-b1bad646a5ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fba:50c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:16:32:9a:fe:a2:8c:20:98:91:ec:eb:43:a2:15:ee:3f:df:
         50:f8:31:60:1d:84:7d:69:a1:f6:ac:17:7e:cf:51:3c:0a:14:
         db:2b:07:8d:88:04:fb:35:ed:ed:d1:18:9c:a0:8b:85:47:f9:
         ac:c2:38:2c:fb:99:c8:2c:af:6c:de:24:ae:12:e4:97:65:c6:
         2f:0d:e7:25:a6:3e:97:94:75:23:dd:c6:db:a1:80:e8:a2:b7:
         c8:bb:d7:27:c5:49:93:16:25:35:bb:f7:f6:2a:b9:54:cd:4c:
         02:72:69:32:6f:46:90:da:15:7d:e3:f5:fc:ec:ff:fa:25:8e:
         92:50:5f:fa:d4:3e:21:03:c2:32:cb:7c:12:49:6a:2d:93:8a:
         5c:d1:48:29:2d:a8:3f:c4:90:ed:ac:75:9f:69:c0:45:b1:6f:
         5a:74:c5:21:4f:73:bb:a0:b3:f1:3d:a3:e5:6d:c0:7e:d7:e6:
         00:b4:5e:e6:be:29:72:00:4d:e0:55:19:df:2c:d3:81:fe:04:
         09:d8:5a:ec:f0:9a:6f:8d:4b:c8:7e:59:23:bf:82:89:56:59:
         35:78:14:8b:74:5d:d4:64:94:a1:ed:47:f8:d0:30:7c:47:8a:
         2f:ff:2e:bf:f6:94:a7:10:47:9e:5f:ef:9e:38:43:36:56:9c:
         4d:f3:4b:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:09:22 2026 by rpki-client