Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7be35c68-c17d-4422-9121-54c46a7b3669.roa
File:                     7be35c68-c17d-4422-9121-54c46a7b3669.roa (raw, json)
Hash identifier:          09KqhEgQ0UOnd6Ry1oPWk9NLw7Gp2uhCQ26dWJG4Zys=
Subject key identifier:   51:6E:34:08:EB:D1:AD:02:3D:FF:37:60:BD:E6:DF:63:00:D0:3C:4D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       496C50CB9F48F59F5B366DD1B12C8AFC0A189F32
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7be35c68-c17d-4422-9121-54c46a7b3669.roa
Signing time:             Sun 31 May 2026 00:40:46 +0000
ROA not before:           Sun 31 May 2026 00:40:46 +0000
ROA not after:            Sat 29 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fba:60c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6c:50:cb:9f:48:f5:9f:5b:36:6d:d1:b1:2c:8a:fc:0a:18:9f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 31 00:40:46 2026 GMT
            Not After : Aug 29 23:59:59 2026 GMT
        Subject: serialNumber=33d8f2f7cc88e1c5a8467044d2e2dff05684e03e41cb0fb909ded689836b98a9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:57:96:d2:30:ef:f1:0d:8f:15:76:ab:07:ac:
                    e2:a7:7e:66:15:2e:0d:cd:db:c1:f3:a8:f3:62:3c:
                    c9:a4:a3:81:42:ca:8d:d7:2f:56:f1:0c:60:0c:dd:
                    ba:d7:be:7f:ea:a0:22:4d:b3:f1:27:ea:73:b1:df:
                    0f:fd:78:64:bb:17:93:84:42:8f:1e:2b:3a:6e:4f:
                    58:1d:e0:02:64:5b:b7:a3:d8:c3:60:b9:9e:10:a4:
                    4b:06:96:83:21:f0:36:7e:84:75:dd:b9:a0:77:a5:
                    f9:80:71:3e:b0:8a:1d:bf:76:6d:8b:2d:e3:34:e1:
                    3a:d8:8e:74:74:d6:47:7d:a7:7f:92:3d:2d:60:75:
                    ee:7f:ef:4f:30:b6:f6:22:a8:c4:12:9b:cd:fb:d1:
                    83:37:08:c6:05:a3:c6:df:81:10:2c:85:68:2a:df:
                    94:76:3f:1a:a9:04:6a:7a:2b:79:6e:27:9d:b2:0e:
                    c6:8d:80:83:a7:a5:5c:56:23:e7:f7:31:26:54:77:
                    3c:b6:77:60:46:c9:5c:57:6f:0c:7d:08:07:02:79:
                    2b:d0:cc:9c:a4:7c:73:a9:24:e1:a6:37:0d:1a:82:
                    6a:a0:f8:17:4a:8d:f3:79:a3:b6:a4:e3:e6:ed:4e:
                    30:ee:0a:3a:47:f9:5b:94:a5:1a:64:18:a7:17:44:
                    24:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6E:34:08:EB:D1:AD:02:3D:FF:37:60:BD:E6:DF:63:00:D0:3C:4D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7be35c68-c17d-4422-9121-54c46a7b3669.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fba:60c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:df:34:58:7f:c5:a1:7a:4c:da:36:3d:7a:ec:50:e9:76:a1:
         05:2b:e4:19:e2:78:74:f7:57:48:64:75:06:2d:6e:3b:37:e4:
         b8:b4:39:34:43:6e:7d:ea:9f:bf:ad:52:e9:67:e9:c4:01:74:
         a3:7b:02:ec:29:5c:c9:20:24:ce:f1:dc:f0:7c:98:bd:63:c2:
         4f:97:4a:4c:63:67:6e:d8:56:07:b8:15:5c:81:77:8e:61:b4:
         7a:25:aa:be:be:5b:38:dd:71:b6:57:f2:e2:88:25:a3:1e:bc:
         9b:ec:81:40:9b:08:44:dc:d8:bc:de:36:af:11:eb:77:06:47:
         ae:66:09:e4:7c:99:ee:be:21:f5:ae:b6:01:d3:2c:67:de:d9:
         38:40:9b:21:a4:02:12:4a:68:64:93:5d:c4:a6:09:96:71:07:
         88:80:d1:46:d0:cf:47:9f:f4:05:49:07:61:14:1a:af:e3:d2:
         4c:ea:ac:2d:c8:dc:0c:7a:bd:ca:c6:c4:05:a5:52:9a:f9:7e:
         13:7a:60:51:d2:56:45:dd:65:4f:1d:c7:4c:fe:87:ce:83:5d:
         64:8a:87:e4:ac:d1:70:c3:81:0a:0e:b0:d8:ed:6c:1f:3a:66:
         67:33:7d:e6:c9:90:67:f1:62:ac:90:67:f3:81:3d:ed:28:86:
         2c:91:66:7a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:51:32 2026 by rpki-client