Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42d774db-4edf-4534-81b7-6efa5a744859.roa
File:                     42d774db-4edf-4534-81b7-6efa5a744859.roa (raw, json)
Hash identifier:          6FlXsIcQ1e5zb0RaTItBqqbOG5UdEx35EjuKidF7yIU=
Subject key identifier:   75:74:0E:54:C2:3A:F6:5E:BB:86:5E:01:08:2E:D1:01:C8:84:32:93
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       75F14BAF23B60E298EA78A0808BFF8F5663A30E7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42d774db-4edf-4534-81b7-6efa5a744859.roa
Signing time:             Tue 19 May 2026 20:32:19 +0000
ROA not before:           Tue 19 May 2026 20:32:19 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f10:8c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f1:4b:af:23:b6:0e:29:8e:a7:8a:08:08:bf:f8:f5:66:3a:30:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 19 20:32:19 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=6cffac17f88e330112d2074c15ab374249603daba8647a575158818ad372b30e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a5:ba:08:c1:f0:25:4f:03:7a:d8:24:b6:df:
                    ae:b9:60:8c:c5:5a:83:aa:46:3b:0d:98:73:4b:14:
                    e5:4d:4b:a1:19:f3:cb:12:08:4a:02:88:3b:3e:16:
                    76:1b:cf:4e:d5:35:3c:f9:1a:ac:6a:32:ac:d7:e1:
                    c1:2f:8a:99:c6:9d:03:78:6a:7e:ea:8e:ad:2f:f5:
                    ea:ff:b9:1f:88:ff:2e:06:60:ed:c2:88:46:16:ca:
                    95:fb:38:83:2f:a3:c7:27:cf:a7:48:e4:14:77:2b:
                    d2:16:28:59:81:81:a3:12:d4:b5:e9:05:16:be:db:
                    40:f4:6b:f5:9e:6e:98:a9:78:c9:ee:30:92:73:28:
                    2f:52:f0:22:fd:44:18:ae:ee:33:4d:ce:bd:13:87:
                    14:63:9b:9c:07:83:dd:fb:d5:1c:ee:dd:86:08:a8:
                    b7:94:a3:5a:26:09:c3:cf:2f:87:db:0a:e5:00:4a:
                    d4:53:76:13:c2:7c:cf:69:67:36:f3:c2:5f:2c:1b:
                    1e:29:ed:40:36:0c:3d:05:63:5f:fb:f2:10:6d:87:
                    7a:b2:49:d5:f0:29:47:89:eb:90:8e:53:87:25:0f:
                    02:fc:38:20:52:76:83:6f:95:f0:ab:11:d5:a1:21:
                    51:48:41:05:30:a1:c5:ed:cc:73:14:30:46:50:71:
                    0f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:74:0E:54:C2:3A:F6:5E:BB:86:5E:01:08:2E:D1:01:C8:84:32:93
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42d774db-4edf-4534-81b7-6efa5a744859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f10:8c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         7d:24:00:a8:42:c2:a1:de:4b:82:d4:ac:ce:8f:86:4c:4e:71:
         d6:04:27:98:47:a1:83:7d:3b:52:4e:b3:da:20:70:be:c8:ec:
         6e:46:82:93:b9:ac:1d:71:8a:3f:a4:30:cf:fd:ab:0a:4b:3b:
         73:21:90:11:f7:5c:27:e0:ab:25:da:e6:f1:7b:40:f5:f4:01:
         33:c8:44:3d:3a:60:8a:40:64:b6:cc:f7:4d:cf:34:ff:35:88:
         fc:68:23:b5:e1:d0:fa:e5:b9:8d:5f:4d:ea:56:29:60:cf:e1:
         5e:f5:45:be:a1:e5:6b:b9:76:c2:c4:96:49:34:73:4e:db:01:
         fe:bd:de:b1:a3:5a:d7:69:5c:b7:7a:cf:49:68:af:87:31:91:
         4d:5f:37:4d:6b:d2:59:fa:b6:af:c6:17:26:c9:fd:90:00:1f:
         60:da:d0:80:6a:3d:0f:7f:af:62:54:85:80:26:31:07:ec:b8:
         99:74:63:24:10:8d:b7:b8:74:63:4c:11:5a:0a:ad:e8:8f:9d:
         20:c9:15:b0:21:9e:f9:28:b2:d7:6a:db:5c:03:ec:0c:60:3e:
         90:03:5b:02:6b:79:9b:13:6d:10:f9:9c:77:38:f3:ac:bb:91:
         49:b7:60:3f:4a:e0:52:53:3d:4e:07:c3:ef:00:4d:98:a8:e2:
         be:17:55:ef
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:16:23 2026 by rpki-client