Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/402c7a3a-8627-4d6d-9145-42e2b1f544cb.roa
File:                     402c7a3a-8627-4d6d-9145-42e2b1f544cb.roa (raw, json)
Hash identifier:          AC951lMtSVHpzWDggObmyg/8IlDgIihDtESCKF5hHFk=
Subject key identifier:   E8:EB:7B:B3:40:0D:1C:1D:C4:E5:AF:78:6C:6E:B5:E9:A2:19:51:0B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5360C989E652B87DD77C244806403C652835C5D5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/402c7a3a-8627-4d6d-9145-42e2b1f544cb.roa
Signing time:             Sat 16 May 2026 00:20:48 +0000
ROA not before:           Sat 16 May 2026 00:20:48 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:7400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:60:c9:89:e6:52:b8:7d:d7:7c:24:48:06:40:3c:65:28:35:c5:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 00:20:48 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=7c126884c537dddabc24c55e56b2fc783fbf93a376ec1969e0c67cf989dc71a9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:ac:fb:ef:30:dd:17:ad:c9:d4:71:36:1a:
                    a9:43:13:8c:56:ee:ed:93:ac:54:bd:ba:fe:29:3d:
                    f9:13:d8:97:69:f2:23:ba:c1:55:43:1c:08:1d:22:
                    82:8b:83:67:50:78:51:01:f8:39:38:47:27:58:1c:
                    55:73:60:4d:c6:e6:8b:8b:fa:96:8f:db:9a:d4:b6:
                    83:74:24:53:e2:f5:33:3c:cb:2f:3f:c3:71:b8:c2:
                    38:c9:1b:bd:16:1e:12:c8:69:90:8b:62:d9:e2:0c:
                    ec:4b:25:e5:b2:7a:16:60:4b:44:14:aa:a6:99:78:
                    17:3d:47:02:cb:43:58:4b:6b:35:47:b6:93:f4:10:
                    7c:61:21:bf:7d:88:ee:36:ed:81:07:a1:8f:db:06:
                    29:8a:ec:a2:98:a2:03:2e:9e:84:f1:5e:b7:1d:95:
                    de:4b:06:76:36:d5:00:97:ec:77:13:1a:0d:d2:18:
                    9f:05:b3:16:61:70:7d:ff:c9:70:37:83:3c:93:ab:
                    c4:a1:a4:be:61:c5:e8:2b:73:cd:9b:b3:70:25:b0:
                    81:f5:51:45:58:fe:77:5e:c8:d6:63:d6:1a:6b:9a:
                    a1:2d:cf:32:b1:9f:7e:04:8a:eb:cb:99:88:9d:c7:
                    83:2e:8f:bf:b4:16:a8:f1:5b:f7:79:78:07:7b:b1:
                    b1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EB:7B:B3:40:0D:1C:1D:C4:E5:AF:78:6C:6E:B5:E9:A2:19:51:0B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/402c7a3a-8627-4d6d-9145-42e2b1f544cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:7400::/40

    Signature Algorithm: sha256WithRSAEncryption
         be:8e:79:fa:1a:aa:0d:8a:73:48:78:45:34:5e:ea:91:c5:a3:
         71:49:bb:dc:c2:f2:41:d1:5e:95:78:b7:a7:cc:fb:92:4f:d3:
         78:9f:a7:2c:fe:a8:e6:da:0c:6e:67:23:f0:f3:51:57:4d:14:
         63:fa:e7:98:af:74:c2:d2:b4:15:9b:c4:aa:17:ec:4b:e9:87:
         88:57:2c:b2:d0:a6:48:90:d9:8f:3a:14:79:ce:e1:d4:3e:a8:
         bd:6c:e0:11:95:05:e6:04:0e:05:4f:7a:d4:7a:45:14:6f:ee:
         cf:c0:4f:01:b7:9e:6b:c8:03:3e:08:34:97:f9:ba:00:8a:bf:
         1d:e5:f5:28:c0:e3:5a:0b:9f:25:37:7b:f0:a8:d5:ce:02:ca:
         65:43:41:23:04:c7:b6:94:24:9d:ec:8a:3a:c7:88:87:2e:21:
         4c:5d:13:b3:6e:f5:8c:a2:76:df:9d:41:c9:bf:5d:6c:33:ee:
         0b:38:92:be:fa:c5:fd:f2:22:e1:ac:96:6d:15:c9:6e:d1:dc:
         f2:64:98:00:1f:8e:5d:a5:7f:bb:f4:78:09:a3:f7:26:af:df:
         5a:f0:d2:94:4e:ab:d1:d3:02:b2:2e:d3:bf:76:fd:02:70:06:
         38:be:3f:6e:63:a6:4d:d6:12:33:fb:e4:74:1b:72:d3:23:18:
         c2:48:70:62
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:48:05 2026 by rpki-client