Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3164b65b-ce88-465e-a4f5-932d48bcb8d9.roa
File:                     3164b65b-ce88-465e-a4f5-932d48bcb8d9.roa (raw, json)
Hash identifier:          EobRiW8XVDDvK2U34zcNqE/XdBFvXTdeiGYT2VhyR0c=
Subject key identifier:   AF:A1:0F:19:CD:41:33:D8:6A:E4:88:62:2C:1D:22:01:53:DD:43:C1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       13AD598AE70E9D10E9D82D5D7D495C1A8230C551
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3164b65b-ce88-465e-a4f5-932d48bcb8d9.roa
Signing time:             Sat 16 May 2026 00:10:38 +0000
ROA not before:           Sat 16 May 2026 00:10:38 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f36:c000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ad:59:8a:e7:0e:9d:10:e9:d8:2d:5d:7d:49:5c:1a:82:30:c5:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 00:10:38 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=9bbd3af2923ef0b205b9ed886f83bc071cd228cddb470ee9133d2c46c5b7f306, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:93:61:dc:51:ae:66:68:e6:b2:e9:a9:77:2b:
                    6b:ec:3e:03:b7:ef:75:77:61:4d:57:75:fa:fd:f5:
                    99:9d:46:95:2d:29:47:c4:c8:af:ca:16:fc:ba:7b:
                    2f:08:00:77:9f:8c:c3:88:34:10:94:97:e6:32:30:
                    8f:b4:20:3d:22:b9:1b:1b:13:09:50:59:c9:d7:e7:
                    0c:74:c3:9a:02:03:d3:19:71:d5:63:a9:4c:48:9c:
                    0e:01:be:d0:d4:7b:64:62:de:2b:79:8d:c9:09:a6:
                    64:2a:d5:7f:a3:26:97:cb:3f:ae:8b:c9:80:72:28:
                    67:93:3c:bc:94:15:10:3f:40:9d:f7:69:3e:80:42:
                    88:53:1f:87:91:21:26:b3:36:50:9b:c6:ff:c4:0c:
                    c2:f7:6c:d9:51:54:9e:b5:26:e7:0f:28:d9:72:95:
                    5a:44:ce:d4:5d:3d:be:b2:33:e7:9b:24:8d:9e:cf:
                    5f:ef:3b:c3:93:60:87:78:87:4f:cf:3d:bc:21:f1:
                    7a:be:6b:42:f7:ca:64:27:c2:f3:b2:6a:0c:46:5f:
                    c9:c1:b2:47:e9:ad:12:94:e9:56:08:6f:81:d9:61:
                    fa:82:3f:b4:27:58:a6:eb:0a:c2:9b:7b:bd:e4:09:
                    c7:ba:b6:17:7e:c4:70:9d:d4:c8:91:08:8c:52:0f:
                    38:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A1:0F:19:CD:41:33:D8:6A:E4:88:62:2C:1D:22:01:53:DD:43:C1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3164b65b-ce88-465e-a4f5-932d48bcb8d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f36:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a8:d2:52:d9:a2:03:84:90:56:e4:96:f0:f6:6d:c0:aa:51:9a:
         c9:cb:fe:b7:59:6b:f1:1e:ca:f1:94:00:72:7b:78:9f:f0:68:
         77:b1:b7:5f:03:71:b6:c8:9e:d6:51:ac:a7:8f:8a:60:b4:0d:
         73:33:c5:41:4a:4d:ba:da:7d:20:15:4f:7f:fd:9e:59:13:5c:
         26:c0:6e:27:3e:4a:fb:54:24:a0:af:c8:6f:0b:66:3d:e6:58:
         ca:eb:bc:11:5e:13:c7:1a:1a:3c:a6:57:4f:a4:7f:73:91:22:
         3e:72:f3:b8:95:f2:d5:b7:99:35:78:7a:ce:b8:2d:94:6e:00:
         25:dd:44:03:c0:19:31:0e:31:44:98:74:4b:a5:43:cd:a2:f8:
         df:89:09:fd:13:e6:6f:84:96:14:18:cd:5c:58:83:21:b1:d9:
         c3:9d:cd:2a:d5:84:29:81:c1:2e:a4:a5:db:c7:fd:61:40:79:
         14:de:c8:4e:14:bc:6a:55:76:c6:8d:ee:7e:89:76:b3:38:b9:
         5b:fc:be:fb:4a:ec:34:a8:fd:6a:93:e6:cf:4d:0b:ee:e9:26:
         34:43:4d:0d:00:51:32:37:f5:74:4c:31:6c:04:bb:4a:27:7f:
         57:82:4a:d1:16:77:d5:22:3a:8a:69:db:37:d9:df:c8:10:74:
         f6:36:bc:44
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:06:21 2026 by rpki-client