Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d376eed-26e3-4e00-85cd-7b84b5751988.roa
File:                     6d376eed-26e3-4e00-85cd-7b84b5751988.roa (raw, json)
Hash identifier:          fo4MIbadNqkvZ08Gpr3CZHvQHmoIbmeKW/kCPnpYQcI=
Subject key identifier:   56:19:49:F4:EF:54:56:BA:4B:B1:AA:25:D2:37:C4:02:E8:35:C9:47
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0C500FE2F0961467CBE2BC73177364FF3C033D3E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d376eed-26e3-4e00-85cd-7b84b5751988.roa
Signing time:             Sun 17 May 2026 01:00:07 +0000
ROA not before:           Sun 17 May 2026 01:00:07 +0000
ROA not after:            Sat 15 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.210.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:50:0f:e2:f0:96:14:67:cb:e2:bc:73:17:73:64:ff:3c:03:3d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 17 01:00:07 2026 GMT
            Not After : Aug 15 23:59:59 2026 GMT
        Subject: serialNumber=1d6fa98f231e04d11ac733513908f21f081a809fa16011a5d98f49d385e47daf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:62:58:b0:b0:33:41:bc:21:78:0d:98:61:88:
                    d6:a8:1f:2b:a5:63:53:8f:37:7d:1d:49:15:76:8f:
                    1c:e9:2b:1f:65:e9:26:8c:91:d8:24:12:a9:8a:bf:
                    8f:95:16:87:59:24:be:78:5b:f2:89:ec:af:d4:df:
                    97:1a:98:df:7f:1d:9d:60:f5:46:7a:d2:21:8d:d9:
                    f4:cd:09:87:fd:6b:b8:92:d9:18:fc:c8:a1:47:e3:
                    3f:78:57:3f:0a:3d:ed:f9:8a:cf:5c:20:11:b5:15:
                    b3:0c:a4:b7:56:ff:2a:f4:92:3b:59:bb:99:4d:7b:
                    c4:e3:6b:af:ca:ac:5f:b2:40:84:b6:33:15:e1:fd:
                    32:1b:86:1d:a9:91:a8:2f:df:5e:82:37:33:b5:d4:
                    18:04:69:81:7c:af:04:6d:51:bd:03:88:13:a6:6b:
                    9a:d8:a2:8c:fc:ed:2b:6e:7a:ee:ad:e8:ae:61:41:
                    f7:a2:26:3e:51:d6:4e:0d:73:20:d8:2c:9a:b1:8f:
                    ea:b3:b0:a8:93:2c:51:45:74:64:69:e8:a5:87:7f:
                    3b:5a:61:ce:81:fb:02:b3:19:ed:e7:f9:12:96:97:
                    d3:ec:d8:32:87:0d:bb:75:82:3e:b9:2a:34:62:33:
                    1f:d9:6d:a1:75:c8:d7:de:32:e2:12:7a:79:ab:19:
                    64:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:19:49:F4:EF:54:56:BA:4B:B1:AA:25:D2:37:C4:02:E8:35:C9:47
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d376eed-26e3-4e00-85cd-7b84b5751988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.210.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3b:cd:9a:b4:23:56:43:92:f1:33:c6:69:7c:b5:61:8c:a1:fa:
         46:5e:9a:c6:21:bd:d6:48:27:55:b9:8e:b1:bf:c4:ea:10:7f:
         31:4c:0f:31:f5:a9:73:45:a2:d4:d0:83:8a:b6:38:ea:a5:70:
         83:83:31:fa:5f:34:95:94:6a:ba:8c:e7:fa:a6:06:66:65:43:
         86:83:ee:b3:fd:48:e1:cc:bc:64:88:e6:7e:fc:ed:4c:4f:3d:
         50:b3:18:9b:e5:c0:bd:b6:37:3e:b2:75:e5:96:89:62:0c:4f:
         28:f4:bd:22:16:c0:d2:f4:c6:8c:1a:78:9f:bd:24:4f:07:bf:
         55:eb:02:7e:83:de:57:be:9a:f6:0d:96:a9:f3:3c:56:f1:7a:
         26:04:30:60:ca:ee:10:b1:bd:52:54:8d:dd:49:c8:a4:a9:e7:
         94:cb:f3:4f:4e:28:93:bd:3e:11:15:3c:4f:fb:97:5d:9f:b1:
         48:15:47:92:3a:60:8a:d1:41:c7:3c:a4:4a:5d:ee:da:3a:89:
         2b:7c:91:6b:25:42:02:4b:cd:25:b3:bb:a3:91:f8:1f:54:cc:
         9b:57:49:ee:b2:94:ae:27:95:c4:8d:88:98:00:a3:47:ff:4c:
         63:24:b7:55:6f:25:6c:de:02:59:39:6e:d6:c3:cb:d2:24:3b:
         d1:3b:a6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:15:37 2026 by rpki-client