Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cc58e44-390c-409c-956a-31b9dc974d53.roa
File:                     3cc58e44-390c-409c-956a-31b9dc974d53.roa (raw, json)
Hash identifier:          vTgmXG7O0aUj4UwX3jmlmn0OV/Oi2uUG5FkQJQR8/GE=
Subject key identifier:   D0:2D:0F:C1:E0:A2:19:91:55:78:97:C7:31:16:BE:70:6A:10:15:34
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3F8B3BC2E52E21D3D9C5C8A5AA6BFC17168E48D9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cc58e44-390c-409c-956a-31b9dc974d53.roa
Signing time:             Sun 31 May 2026 00:20:06 +0000
ROA not before:           Sun 31 May 2026 00:20:06 +0000
ROA not after:            Sat 29 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fe9:6000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:8b:3b:c2:e5:2e:21:d3:d9:c5:c8:a5:aa:6b:fc:17:16:8e:48:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 31 00:20:06 2026 GMT
            Not After : Aug 29 23:59:59 2026 GMT
        Subject: serialNumber=280c7b0796ef492073c200576b19ea270770ee32cf68155806f288f04df056f0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:ef:4e:fa:70:c1:85:57:e8:e1:a2:50:40:
                    92:f1:ce:d7:47:47:09:32:b1:bc:56:e1:c3:c1:a1:
                    c2:9e:3b:d7:4d:5a:85:d4:3f:2a:a2:a4:1b:16:ed:
                    05:c7:b6:b2:18:3b:03:21:33:c0:46:f7:e5:5e:a5:
                    61:47:38:46:f1:e1:44:2c:60:d6:90:b3:26:22:f0:
                    f6:cd:8c:52:6c:02:3c:73:ae:f5:33:75:ec:8c:66:
                    03:80:a9:59:d4:66:6d:fe:ba:3f:02:7d:45:5c:e8:
                    62:0f:70:a5:9e:38:41:de:ee:9c:fc:77:95:b9:10:
                    ff:9e:64:01:a8:4e:fc:cd:80:59:a2:b5:59:62:00:
                    a6:28:ab:dc:2a:6f:cb:68:64:67:09:50:85:90:f7:
                    d7:88:0d:cb:80:e1:32:a2:71:ae:33:42:92:f6:ae:
                    f6:a7:2d:e9:e8:cc:26:09:75:f5:92:60:a0:e8:0e:
                    63:c2:f1:14:08:ff:b5:0d:b1:41:cc:a3:42:64:7a:
                    ee:a0:c4:2a:a2:bd:74:fd:2c:90:83:20:0b:68:17:
                    fe:d8:48:f6:c7:55:b2:b1:65:fa:96:db:ff:d2:63:
                    81:cd:86:de:7c:e8:34:8d:ae:b5:02:dd:42:4b:ec:
                    28:43:06:07:2c:a3:94:d4:f8:92:79:62:90:e7:3f:
                    da:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2D:0F:C1:E0:A2:19:91:55:78:97:C7:31:16:BE:70:6A:10:15:34
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cc58e44-390c-409c-956a-31b9dc974d53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fe9:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2f:3d:b7:c6:e4:2c:16:47:f5:f9:ee:f2:44:4a:2a:0d:c5:bc:
         de:80:15:70:13:16:58:2e:54:97:41:ac:b1:53:e9:6b:ce:b3:
         ce:93:4f:3e:ff:7b:42:5d:64:31:87:52:51:cd:28:7d:b2:2e:
         16:57:39:d7:ea:c2:8d:9d:b6:b7:37:d8:4b:3d:0d:b8:40:54:
         d6:41:67:80:80:4f:10:bc:13:d9:07:14:d4:61:d6:a6:fd:49:
         cd:0f:59:20:01:2c:d7:21:25:ca:2f:41:c5:62:76:f3:90:7d:
         c9:4d:41:09:6a:f0:24:c7:f6:d9:e0:6b:e4:aa:e7:a2:da:62:
         9f:18:68:7d:16:52:aa:04:00:59:58:e1:0d:cd:35:b8:8f:56:
         a4:13:1a:63:75:a4:f2:f1:55:ac:48:7f:9c:cd:7f:c8:55:1f:
         b7:a7:e2:a4:5d:6b:d9:d8:97:41:b1:46:28:0c:82:a7:a1:0b:
         68:e8:02:12:f2:ad:d5:ea:7e:06:9f:b9:c4:06:3f:08:f6:86:
         83:29:21:ae:2a:be:1c:65:96:17:99:3b:8d:f3:a7:16:fb:37:
         a7:d2:55:96:d1:07:47:02:a3:9d:f6:9c:73:fa:6f:0e:31:d8:
         90:17:f9:e0:fb:af:25:11:91:e7:0c:32:1d:b5:31:76:de:42:
         a9:3b:d7:bc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:15:46 2026 by rpki-client