Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dc411d9-6915-49ea-8d8e-e0fbdb7782a2.roa
File:                     5dc411d9-6915-49ea-8d8e-e0fbdb7782a2.roa (raw, json)
Hash identifier:          7eC4qIuBnzZ2yfeYLftqq11Z7jglkXqVdwtkw/NGQtI=
Subject key identifier:   E8:98:2E:03:6A:33:D5:86:72:76:84:FB:11:3B:2A:05:63:3F:B1:8B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       79270E69265C378471F5B7C597552D778B28E880
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dc411d9-6915-49ea-8d8e-e0fbdb7782a2.roa
Signing time:             Sat 16 May 2026 01:11:14 +0000
ROA not before:           Sat 16 May 2026 01:11:14 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff1:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:27:0e:69:26:5c:37:84:71:f5:b7:c5:97:55:2d:77:8b:28:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 01:11:14 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=fd328eba6fe350d8bb80cec720dd578c6697bdc42db0f4ded991489ac707341d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:51:a9:07:6b:f8:be:d9:86:04:ae:98:dd:66:
                    3f:f6:7d:12:16:85:cd:b8:7e:bb:30:6e:d5:81:bc:
                    b8:64:cd:f0:ac:9d:ed:e6:5e:d2:0d:ec:9d:97:50:
                    96:60:28:31:85:1a:9b:dd:91:7a:8a:43:4c:67:55:
                    d4:d9:1a:16:f1:67:8e:5d:53:da:c4:3e:ca:bf:47:
                    c9:4d:62:f3:d2:65:94:69:b5:3b:55:22:6e:fd:65:
                    8f:4b:fe:a1:84:c9:da:c1:ec:80:d0:b7:9b:2e:91:
                    7d:69:a1:7c:cd:75:ba:e2:b4:b4:48:75:84:9e:47:
                    b6:8d:b7:fa:f0:5d:e9:6b:31:39:98:f9:64:5d:4d:
                    72:43:55:d7:f7:bb:df:05:69:87:cf:8d:41:3c:a8:
                    f4:2a:57:64:e4:1c:da:58:11:d7:36:7a:cb:51:d6:
                    a3:be:51:8c:dd:4f:b8:53:16:a0:be:35:61:a9:69:
                    e1:f0:e1:23:54:0e:47:8f:3b:0d:05:8b:1d:5d:73:
                    9e:98:0f:d5:01:46:58:7b:8c:31:07:98:57:df:0a:
                    55:94:6a:40:eb:e4:28:ce:56:e1:f5:87:be:28:8d:
                    26:5d:e1:73:7a:28:17:35:0d:ee:fa:54:6a:51:03:
                    6d:5c:19:7b:07:8e:ad:2f:da:47:b9:ab:ca:ae:05:
                    cc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:98:2E:03:6A:33:D5:86:72:76:84:FB:11:3B:2A:05:63:3F:B1:8B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dc411d9-6915-49ea-8d8e-e0fbdb7782a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff1:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b7:ba:9e:cf:1e:7e:34:4a:4f:8d:23:23:38:8c:f2:e9:a8:29:
         eb:ed:4d:c2:9c:10:a9:d3:e5:ca:54:81:5f:d3:c0:dc:fb:ca:
         36:94:6c:cc:33:86:7b:33:81:c5:9c:42:2d:0a:de:b4:30:4d:
         aa:4d:1b:31:78:95:69:8f:34:2a:e4:f2:44:36:87:87:eb:39:
         0d:c9:15:78:f8:79:5c:25:b2:bd:27:37:55:70:05:6a:4f:90:
         a8:51:71:1a:f8:ae:7b:f0:72:2e:27:f8:e6:99:37:db:90:9d:
         d3:1d:ab:22:81:3e:88:5a:d0:b5:54:3c:f2:fa:13:2f:e8:9d:
         95:e6:2a:3b:4d:17:63:3e:02:7f:66:87:fd:31:63:4e:44:cf:
         63:8d:3c:b2:ea:84:cb:67:1d:1e:10:62:93:18:23:f6:de:cf:
         7e:67:04:49:a5:5c:34:ea:b8:85:35:5a:60:8b:35:0c:1e:11:
         8f:0d:15:f4:20:0b:ac:de:9e:ee:e3:7b:6d:95:f0:dc:93:17:
         8b:fb:d8:cb:83:f0:7b:02:f9:e0:59:71:79:4b:fd:0e:fb:a3:
         6f:31:05:af:f2:98:c9:e0:57:b2:7a:f4:cb:56:6a:eb:0d:ac:
         7b:be:8c:4d:b4:1b:0c:f7:59:25:ad:13:6a:4f:40:2e:a5:c7:
         63:6e:a7:41
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:03:56 2026 by rpki-client