Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/461f71a9-2277-49e2-85ce-ca48077f1cfb.roa
File:                     461f71a9-2277-49e2-85ce-ca48077f1cfb.roa (raw, json)
Hash identifier:          504upExAvjM+8X7TIwCuxpLEJKYjGGccg3CV5YFu+hc=
Subject key identifier:   00:A6:C6:D9:6F:6A:83:39:8C:13:36:9C:45:C6:F1:14:EF:FD:7A:F5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       742A33E4A0EA34CE9FA9282AAF5C8BB30D49E7F5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/461f71a9-2277-49e2-85ce-ca48077f1cfb.roa
Signing time:             Tue 19 May 2026 00:41:03 +0000
ROA not before:           Tue 19 May 2026 00:41:03 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fef:4000::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2a:33:e4:a0:ea:34:ce:9f:a9:28:2a:af:5c:8b:b3:0d:49:e7:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 19 00:41:03 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=484f4f9ea1f23767c0c6dadbe19febdcfa7f60cf65b2c4495dd358a20bcd6849, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b2:68:9e:80:7e:36:82:68:aa:26:4a:49:e6:
                    d3:fe:88:67:47:cf:9b:4d:82:c7:b8:66:97:49:f4:
                    56:e6:55:16:a2:b6:e4:0c:be:a7:a9:c4:9d:b7:4e:
                    f2:48:d4:e4:0f:02:ac:d7:52:8d:7d:19:69:f1:ce:
                    4d:bf:47:bb:54:4a:d6:5d:b0:4f:21:6f:6f:84:14:
                    4a:9f:4e:91:0b:06:60:fe:83:ca:62:35:fa:c9:fd:
                    d1:07:d8:99:54:aa:42:5a:12:62:a7:0f:b7:03:28:
                    f1:24:3f:f9:8e:f7:e5:99:f3:de:96:3c:f7:70:aa:
                    00:61:29:c1:69:e8:5c:85:7a:11:0e:1f:af:33:66:
                    36:fd:1f:f5:30:71:a9:c8:98:9b:6f:6a:96:02:09:
                    14:77:19:e8:4a:ea:62:7f:01:1c:d7:a9:18:ef:4d:
                    b3:1d:cb:74:7e:98:8f:a2:fb:d1:24:50:f6:40:de:
                    43:f1:42:e8:d9:3a:3f:f7:f7:29:f7:2a:52:d6:15:
                    22:6f:95:d1:30:37:b0:53:ed:d3:c3:68:9c:5c:3a:
                    26:17:57:53:55:9e:fc:69:5b:60:7d:13:96:20:a4:
                    da:f4:5c:9d:4d:ea:f7:ad:d1:d0:06:3e:16:20:41:
                    9b:a7:1c:6e:35:2e:47:b8:c1:1a:6f:ce:8d:d7:9d:
                    7c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A6:C6:D9:6F:6A:83:39:8C:13:36:9C:45:C6:F1:14:EF:FD:7A:F5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/461f71a9-2277-49e2-85ce-ca48077f1cfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fef:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         c8:c1:82:eb:60:f8:80:f4:86:47:9e:d8:9a:9c:64:8b:f7:2c:
         a9:82:74:d7:a8:2f:e0:86:0e:06:6b:ef:89:b4:09:07:58:9d:
         d8:7c:94:e8:8f:39:50:57:18:6c:a8:96:a5:13:29:3b:5d:de:
         1b:93:cf:69:3b:28:4b:34:00:55:a5:60:5b:9a:87:a2:d9:d8:
         29:ac:ad:af:78:5e:98:a7:ba:6f:99:b4:02:fa:f5:4d:6e:d8:
         80:53:39:22:4f:0f:57:97:6f:c0:a9:31:b5:54:8b:94:d3:95:
         88:db:9a:d1:2c:e2:a2:f7:89:94:d8:1b:b6:0b:8c:12:7a:61:
         d0:6d:c6:45:42:67:19:70:be:30:21:87:cc:89:15:17:ce:52:
         d3:40:0a:ca:24:a3:95:92:80:92:4a:22:ed:df:de:3e:7e:c0:
         38:cd:89:c6:a2:16:35:4b:be:3a:e8:60:c0:86:ee:83:36:6c:
         d2:fc:85:a4:02:ab:bc:b4:81:d6:3a:6d:10:5e:04:c8:0f:64:
         e4:13:1d:f0:1d:f2:10:70:d0:f9:01:c8:90:a9:62:15:90:e8:
         2f:d6:59:0a:43:92:c0:bd:71:1f:e9:93:23:e3:3f:fc:64:e1:
         f4:0b:be:cc:b5:4f:e9:73:ad:58:be:64:6f:cc:f1:25:a9:54:
         ae:4f:e0:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:06:33 2026 by rpki-client