Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f17303e-fb3f-43d5-8067-de8367b1fc63.roa
File:                     4f17303e-fb3f-43d5-8067-de8367b1fc63.roa (raw, json)
Hash identifier:          7G8ywkwWIO4fr+wZnGXiSTVtoJa8CzjZpnHrGeKP61E=
Subject key identifier:   9C:2A:5E:42:09:5C:27:65:4B:89:10:3A:5F:EA:C0:AA:B9:16:47:8B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3C883D5F014C469B39443D3D388B713664CC252C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f17303e-fb3f-43d5-8067-de8367b1fc63.roa
Signing time:             Sun 17 May 2026 01:01:34 +0000
ROA not before:           Sun 17 May 2026 01:01:34 +0000
ROA not after:            Sat 15 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fed:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:88:3d:5f:01:4c:46:9b:39:44:3d:3d:38:8b:71:36:64:cc:25:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 17 01:01:34 2026 GMT
            Not After : Aug 15 23:59:59 2026 GMT
        Subject: serialNumber=508a138c3d404f776f3805fd8562ba224a94de4b6ee7d463d78a9942c2c3af1a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e6:bb:1e:8f:8e:d0:1e:57:15:33:a9:1d:ef:
                    c0:f6:cf:4c:ec:32:e3:ac:3a:9a:c1:e1:91:a3:88:
                    8a:8d:6b:17:07:48:33:ed:5e:18:55:72:13:bc:63:
                    92:7b:aa:32:e6:8b:50:2e:40:f4:72:9c:58:b0:3d:
                    82:45:94:a7:79:38:1c:d9:4a:8d:3e:3b:40:85:5b:
                    7c:07:8b:62:3e:70:ef:3e:17:10:6c:72:04:f8:c5:
                    f5:4f:dd:f7:d6:52:d5:4c:41:b8:e5:36:a9:21:12:
                    78:ff:8b:13:23:34:48:9d:83:d7:76:cc:2b:d2:d4:
                    e7:2c:73:e4:32:7e:ed:6c:8e:3f:d6:e4:5f:75:75:
                    ea:44:d2:52:04:cf:45:4a:f4:c0:bd:a4:39:c3:cd:
                    77:86:78:36:42:83:da:67:22:7f:d1:7b:ee:1d:da:
                    8c:98:2c:e1:e9:60:49:31:af:da:2f:6d:19:08:5b:
                    c7:10:36:72:4a:0d:7c:54:a0:d9:94:43:00:ee:61:
                    53:8e:9a:76:20:e8:c8:83:22:69:e1:59:bf:5c:0a:
                    af:56:0f:4c:3e:a8:40:dc:1c:46:8b:5f:c4:54:f4:
                    d7:b2:70:da:af:2a:75:15:30:f8:f1:8e:01:d2:32:
                    d2:24:ed:6f:e5:91:b4:78:3f:3b:53:58:4c:2c:97:
                    ec:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2A:5E:42:09:5C:27:65:4B:89:10:3A:5F:EA:C0:AA:B9:16:47:8B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f17303e-fb3f-43d5-8067-de8367b1fc63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fed:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         31:ef:a5:27:b7:99:b8:2b:16:cd:e9:28:de:18:f0:27:52:a6:
         4e:7a:33:73:62:0b:cb:42:91:8c:6c:b1:90:dc:f2:39:5c:26:
         35:5e:9e:da:42:e7:81:9e:40:5e:18:11:41:42:07:2b:33:c7:
         02:35:ba:a1:d5:94:db:4b:e8:f1:7b:41:ed:32:27:ed:7a:94:
         66:ed:f8:e4:a2:a2:f2:d6:01:7b:dc:0d:c4:2b:32:6f:76:73:
         57:46:ff:85:4e:ad:74:0b:0a:aa:7e:2e:24:f0:d1:cb:4f:75:
         e9:9c:a2:1a:0a:07:6d:8d:23:48:24:d6:6d:29:32:24:c3:41:
         f0:2a:7f:87:95:9c:32:9c:e4:f2:5a:72:f3:ef:07:58:37:c0:
         73:1c:11:a1:1e:2d:0a:75:74:19:c8:27:20:d3:b9:b3:a2:40:
         79:5c:67:4b:1b:96:a0:53:17:22:39:1e:a2:9a:56:85:90:ea:
         13:9d:c7:b3:dd:de:df:7d:c2:59:a1:60:6a:85:48:1e:e8:be:
         4d:c9:65:f8:af:1c:7f:25:ac:67:85:9a:bc:3e:72:0e:a9:46:
         e4:ee:35:e5:9b:ba:9a:b9:5a:9d:96:86:b3:9d:35:4c:0a:74:
         cc:7e:01:b1:57:c2:18:ab:9e:9f:63:fd:51:2d:73:31:60:ff:
         0c:10:7c:7c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:17:25 2026 by rpki-client