Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30fe8b62-dd1f-4c87-86e2-bb4137bef195.roa
File:                     30fe8b62-dd1f-4c87-86e2-bb4137bef195.roa (raw, json)
Hash identifier:          FViP5xsFqZ/xKb3XS/aitb/BeRv2Lk9FrXWmKAsacPI=
Subject key identifier:   DE:87:64:C7:C8:11:3C:BD:34:69:7F:2D:AD:D2:4F:11:B9:F6:A9:63
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2DDA0C665A09ECDC0B639B1B6B2279FDC1B0F2A2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30fe8b62-dd1f-4c87-86e2-bb4137bef195.roa
Signing time:             Fri 15 May 2026 01:40:08 +0000
ROA not before:           Fri 15 May 2026 01:40:08 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:4180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:da:0c:66:5a:09:ec:dc:0b:63:9b:1b:6b:22:79:fd:c1:b0:f2:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 01:40:08 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=822b5012515f85d00c275509c2b9dbac99906b8b91d75d086c6cfdc7754d0b96, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:68:73:d9:bc:d0:9d:db:ac:7d:23:21:ea:7b:
                    4d:9c:47:b2:0e:8b:54:ca:b8:e0:89:e8:bf:b1:5a:
                    66:09:be:fa:c2:68:7b:d1:31:04:57:c4:34:47:be:
                    f4:53:66:69:c0:b4:ef:50:d4:b8:08:3d:50:37:57:
                    aa:43:f5:4d:e9:2e:dd:d9:c4:ac:91:46:7a:e5:63:
                    35:50:84:62:67:27:8f:cb:7b:96:9c:f0:6e:24:2a:
                    92:e9:83:cc:64:2f:d5:71:f1:65:18:a3:0f:47:b9:
                    0e:7a:54:ae:78:05:81:14:ad:dc:de:cb:b8:8a:ca:
                    2b:c3:8f:c6:c7:80:7b:4f:9b:30:ba:49:79:b0:6c:
                    34:c7:97:95:36:68:5f:2a:7a:1e:6e:50:ce:0d:9c:
                    89:a0:a3:cc:98:02:a1:b4:35:54:71:8a:45:56:bc:
                    83:42:22:63:00:e1:56:b4:45:db:6c:bf:9b:13:d9:
                    eb:44:2c:a2:a4:96:7c:49:7f:a3:f1:5f:e9:dd:67:
                    df:8c:89:0c:22:0c:79:ce:e2:f0:3d:e5:2c:a2:af:
                    5a:7d:ca:7d:e0:d7:5b:bf:41:1c:93:96:b8:c9:89:
                    5f:a7:1a:40:27:45:7a:5e:d2:06:cc:fd:9d:ff:d5:
                    d6:9b:ef:d7:de:cf:6c:d4:ec:bb:2e:68:e8:5c:c5:
                    88:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:87:64:C7:C8:11:3C:BD:34:69:7F:2D:AD:D2:4F:11:B9:F6:A9:63
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30fe8b62-dd1f-4c87-86e2-bb4137bef195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:4180::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:25:a1:62:68:41:7e:24:43:19:8b:f0:6c:3d:84:2e:a6:1d:
         65:7f:3f:2b:44:86:03:fc:7f:da:0f:b8:f7:1f:04:6f:ed:25:
         97:06:6f:e3:1c:ea:e0:c8:6b:3c:8b:f8:41:fe:04:0e:7a:cd:
         ec:2d:c1:d2:ba:42:ae:8d:41:0a:f0:3f:ce:f4:c6:8a:1c:4a:
         65:f0:45:03:44:2a:6c:92:9d:71:dc:83:cc:32:f2:a4:b5:62:
         df:be:b4:17:9c:ab:d1:d2:4c:3c:ee:f7:17:ec:43:49:13:cf:
         0f:ad:1a:d0:9d:a7:c2:89:4c:37:85:6f:91:71:13:d8:a2:a1:
         66:08:08:0c:67:a3:0d:b2:7b:e1:79:aa:fb:96:cc:8f:bd:00:
         c9:73:b4:e6:14:39:c8:41:5f:bf:07:2b:2e:77:f1:e4:4b:1d:
         ed:05:b6:c8:c5:83:07:cb:6f:85:2c:71:60:76:77:76:e0:a2:
         83:f1:a4:88:6f:a5:f6:4a:17:d3:cb:33:42:1c:5c:18:0b:63:
         ff:5f:e6:17:73:3a:d4:e4:85:5f:38:70:61:f3:f6:87:85:68:
         5f:fe:58:15:a2:7e:bb:65:96:46:7f:74:a0:87:88:5a:60:be:
         54:4e:cb:ab:9d:72:a8:9b:5f:1a:7e:2c:a7:2c:81:a6:59:7c:
         8a:84:83:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:08:51 2026 by rpki-client