Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75e564e6-dc69-4fde-a5ef-ec9609456180.roa
File:                     75e564e6-dc69-4fde-a5ef-ec9609456180.roa (raw, json)
Hash identifier:          o4yrX0OTRQwHfVPsJNyVMtZ9gmcvPhttpZo/36e+TiQ=
Subject key identifier:   6C:92:3F:3F:5F:22:A6:D5:20:F2:E9:DA:5D:F7:C8:50:97:2E:6E:1C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5D97E03C834092A8FC7B80ECDACDF39FFCA7DD8A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75e564e6-dc69-4fde-a5ef-ec9609456180.roa
Signing time:             Sat 16 May 2026 01:11:33 +0000
ROA not before:           Sat 16 May 2026 01:11:33 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff1:3400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:97:e0:3c:83:40:92:a8:fc:7b:80:ec:da:cd:f3:9f:fc:a7:dd:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 01:11:33 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=20d55f53567261c18397f57822607ab42384a41da77ba3fbc2080fb327278b28, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:17:4a:b2:07:91:3a:17:a8:32:56:c1:d5:51:
                    f2:72:84:5c:bd:08:58:72:d6:4b:03:e1:ba:43:0a:
                    5a:ba:e5:76:d9:b2:02:7c:f7:04:42:2f:13:69:f7:
                    8b:f9:94:58:84:88:bd:b6:ac:47:4a:3c:2a:53:b9:
                    98:d1:bb:96:50:c6:32:43:e8:73:3d:5b:80:43:17:
                    13:e7:1b:96:b1:46:5a:9d:a5:86:ff:e2:c8:d7:1c:
                    b6:3a:5c:5b:e2:42:83:38:2f:b5:5e:f6:70:e3:f8:
                    d5:7a:56:75:3b:9b:7f:3f:a1:8b:45:99:61:7d:f8:
                    06:8d:99:69:39:80:20:cc:6f:87:44:0f:3e:b8:81:
                    c8:b6:8b:d7:e5:c4:77:bc:02:a0:b4:fe:4b:68:d0:
                    1e:39:81:b3:63:32:00:07:9e:5c:71:76:fb:a7:5d:
                    4b:7d:8d:5e:34:77:ec:d9:44:80:fc:dc:01:fd:07:
                    a8:a4:ce:05:0c:9d:c0:e5:12:c6:79:c3:f3:88:89:
                    8a:b3:23:1f:70:ee:9e:f9:cf:6c:76:98:df:37:d2:
                    44:5e:d2:d5:37:36:e3:04:23:0e:5c:19:8a:31:40:
                    5d:f1:f8:c2:d3:74:a9:f2:3e:24:02:68:d3:43:9a:
                    d1:ca:73:52:30:55:2f:e3:a6:e0:e5:8b:c9:3b:ca:
                    60:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:92:3F:3F:5F:22:A6:D5:20:F2:E9:DA:5D:F7:C8:50:97:2E:6E:1C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75e564e6-dc69-4fde-a5ef-ec9609456180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff1:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         32:97:e9:69:66:a7:d4:20:01:b7:07:2b:d8:ea:a5:07:9e:83:
         ea:32:6c:c1:a4:09:6f:55:ce:4c:73:ba:6b:07:b4:e8:e4:bb:
         a2:9d:b9:4b:cb:f7:13:c4:dd:99:ee:c6:f2:d9:f8:68:6d:f6:
         44:80:fc:61:5e:98:e2:6a:da:2f:15:3f:f5:6a:c2:8b:d1:2e:
         73:c4:6a:ae:e5:a5:92:2f:0b:ab:1c:8f:98:47:9f:c7:47:65:
         ed:74:90:a8:95:1a:ef:8c:b5:18:2a:e5:3c:3e:ee:01:a8:de:
         60:07:38:22:01:60:1c:0a:89:f3:bd:ac:45:7e:bc:5e:55:db:
         46:4d:d2:91:b2:84:fc:78:f1:c2:8d:c1:9e:05:04:77:7a:60:
         c0:da:bd:c2:c0:3e:f8:67:96:6d:40:21:75:01:f1:c4:42:ac:
         37:a4:64:26:06:77:f9:07:6b:05:35:8a:0c:ce:e5:12:9a:be:
         1d:9d:42:87:17:2a:2f:46:b6:a0:fe:0c:ad:ce:d1:d8:ad:01:
         3c:86:46:8c:27:58:c6:2e:e6:b9:a0:34:26:27:04:79:c3:2c:
         2e:09:c7:1f:00:55:3a:39:8a:5e:72:80:2f:2e:8d:08:ac:de:
         0a:64:98:45:f0:52:6a:d3:9a:c5:b5:b6:dc:45:58:27:1a:ba:
         4c:a1:bd:93
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:49:24 2026 by rpki-client