Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e9ea69d-4b33-4a85-894c-5620e610e709.roa
File:                     6e9ea69d-4b33-4a85-894c-5620e610e709.roa (raw, json)
Hash identifier:          WQBN4mWudQ7sONwzlkc7/kLB8ZMHX603Xz81fCdDt6I=
Subject key identifier:   47:4C:81:A9:C8:29:F6:7D:2E:53:C8:C4:F1:25:88:7E:7D:61:4B:45
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       32A0DF7A246AACBD83766E5F61870DBC909AC1A7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e9ea69d-4b33-4a85-894c-5620e610e709.roa
Signing time:             Wed 20 May 2026 00:00:46 +0000
ROA not before:           Wed 20 May 2026 00:00:46 +0000
ROA not after:            Tue 18 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:85e8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a0:df:7a:24:6a:ac:bd:83:76:6e:5f:61:87:0d:bc:90:9a:c1:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 20 00:00:46 2026 GMT
            Not After : Aug 18 23:59:59 2026 GMT
        Subject: serialNumber=ed50011e481e6727ccfed1755de20940357a2366b3606d7cfdb498b924e4e150, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a4:6c:42:58:73:91:ec:e5:be:41:e0:fc:ea:
                    8e:45:fd:c6:ed:79:35:e2:fa:3a:a8:3b:d0:a4:78:
                    7e:35:d5:90:f7:1d:d7:69:79:99:c5:a9:65:0e:73:
                    f3:30:f3:05:78:ca:c7:d9:ea:97:86:6c:ea:aa:e2:
                    a9:29:b8:aa:e7:29:d3:34:b5:da:43:3f:45:1f:9f:
                    0b:a7:cb:db:5e:4a:15:74:fc:a9:1e:0c:25:88:e4:
                    8f:f2:de:8b:e1:b2:d4:6d:41:f1:7f:af:8f:74:b8:
                    3a:72:c1:51:7c:57:09:86:82:c0:1c:8a:21:06:29:
                    f3:fd:cd:87:d8:3e:26:01:db:58:3c:51:f7:ca:9b:
                    81:bf:b9:0a:fb:94:52:d7:6b:02:96:98:21:2e:bb:
                    f1:b4:d5:26:87:bb:a6:9f:84:c8:e1:4f:2c:f3:a9:
                    c6:2e:86:46:bd:3c:22:d3:86:dd:83:80:dd:b5:a0:
                    79:3c:39:05:62:66:f6:54:f8:86:57:44:d5:57:5f:
                    f9:a1:f8:34:bb:68:00:5d:ac:8e:2e:4d:54:73:22:
                    d3:2c:3d:8d:cd:19:90:86:70:86:0f:70:5f:c1:a4:
                    90:d2:a8:48:f9:7f:46:1b:de:a2:bd:54:d3:52:fe:
                    4f:8f:93:a4:ef:e7:42:33:44:0c:52:26:e9:29:69:
                    81:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4C:81:A9:C8:29:F6:7D:2E:53:C8:C4:F1:25:88:7E:7D:61:4B:45
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e9ea69d-4b33-4a85-894c-5620e610e709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:85e8::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:6f:b3:69:16:8e:85:da:74:ff:5c:66:0f:7c:82:20:93:2a:
         94:c7:87:ad:f7:96:95:3b:88:41:6e:37:27:08:b9:f4:6e:63:
         11:61:85:34:51:d2:c1:a2:fc:ce:d9:08:06:75:7b:8e:33:5b:
         82:57:be:0e:8c:60:6c:3a:5c:f7:d2:ca:e2:ef:5f:de:5b:67:
         4a:89:0f:9c:01:62:83:94:e2:58:58:19:b2:85:e0:da:4a:d2:
         57:6c:27:70:aa:6d:27:0c:e1:11:20:90:25:71:2e:5f:91:14:
         1f:fb:78:9e:35:19:f8:13:1d:86:fa:fd:09:b5:c9:fb:c5:49:
         fe:d9:bc:a8:ea:d1:fa:8a:99:b8:29:2e:b2:dc:7f:31:f3:3b:
         4e:fc:ec:6f:33:f9:0f:01:3b:53:8a:6c:7b:15:9f:7f:0c:03:
         91:4d:e9:73:c2:98:56:a1:c1:c9:29:02:08:03:f9:6e:70:64:
         32:5e:73:52:b1:52:fd:5e:21:6e:67:3b:52:da:97:a5:76:2f:
         87:76:b8:dd:89:e8:90:18:61:68:6a:bd:39:d2:f6:55:bd:e0:
         69:a8:51:7d:56:49:00:5f:17:ec:da:42:3d:3d:ac:25:53:93:
         db:91:51:7e:88:78:e1:0b:58:fd:1f:63:f2:20:26:f0:69:9d:
         88:bd:a2:69
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:11:02 2026 by rpki-client