Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80d26464-05c9-4f2b-ba80-8facd3bbef1f.roa
File:                     80d26464-05c9-4f2b-ba80-8facd3bbef1f.roa (raw, json)
Hash identifier:          f3A0iiHIY4fP50sl9cwfRab+NWv0qN+83ugiwXc3hro=
Subject key identifier:   27:93:12:F1:64:EB:BC:4E:98:1C:FC:DA:A1:C0:6E:15:4D:78:7A:89
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       08E0B8A1371055630B8A121ADE41D31B9E6F6F24
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80d26464-05c9-4f2b-ba80-8facd3bbef1f.roa
Signing time:             Sat 16 May 2026 01:11:10 +0000
ROA not before:           Sat 16 May 2026 01:11:10 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f38:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e0:b8:a1:37:10:55:63:0b:8a:12:1a:de:41:d3:1b:9e:6f:6f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 01:11:10 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=197dec53e41d655ab2adba4b92b9017091c152bb2f69b14f6a5942f7717a5786, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6b:e5:bd:60:f9:2e:55:5e:98:c2:6e:f8:08:
                    0f:e8:1f:13:f6:30:d0:03:18:76:fe:56:60:0e:b1:
                    cf:75:a8:57:78:d2:e1:41:92:ee:df:79:c4:ea:dd:
                    a5:1c:0d:c8:d6:dc:eb:9b:23:40:20:0a:08:86:5d:
                    41:e9:05:2f:38:5f:70:ce:c2:c0:5f:a9:38:af:84:
                    92:34:f1:2c:58:36:1f:27:14:ca:43:f1:2e:f2:b8:
                    83:2a:aa:eb:c1:b1:c4:d1:2a:89:e3:69:45:f3:35:
                    bd:53:80:31:f1:d5:75:22:56:49:7b:dc:94:00:1c:
                    7b:e1:fd:97:52:b3:a9:8f:64:14:52:4c:12:00:b1:
                    69:a0:75:02:ca:01:1f:6a:a7:d0:75:69:9b:98:46:
                    95:e7:28:91:88:40:b4:09:7a:4b:f0:2d:42:3c:dc:
                    a6:66:59:22:44:05:bb:26:a1:cb:a3:b9:b3:67:73:
                    e9:a0:3f:0a:72:e1:64:4c:6d:3e:d5:a4:cc:4b:26:
                    5a:02:40:39:1f:d8:91:ff:c7:19:22:dc:23:29:fe:
                    3c:d9:e9:a3:41:58:dd:0c:b9:f4:8c:86:8d:0c:00:
                    cc:9a:57:a4:3f:c9:43:74:1c:46:40:fd:69:79:de:
                    02:a6:ef:c9:3b:ec:f1:1c:b9:00:46:1a:db:dc:17:
                    a0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:93:12:F1:64:EB:BC:4E:98:1C:FC:DA:A1:C0:6E:15:4D:78:7A:89
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80d26464-05c9-4f2b-ba80-8facd3bbef1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         85:3b:12:be:29:58:68:55:5d:b8:6a:ef:0e:ea:c8:86:9e:84:
         4c:60:a9:1c:78:de:e5:f1:35:f8:46:16:89:f1:c6:28:59:a0:
         54:13:e5:93:a8:3c:b5:e8:53:26:85:c7:da:a9:a2:8b:3f:cc:
         5e:d1:d6:13:34:26:f8:f8:c3:fc:62:e3:ef:52:9f:34:8b:d9:
         ce:91:ae:7b:20:cf:85:71:ee:20:5d:b6:e8:00:e5:88:e2:14:
         fd:de:98:9f:42:05:00:09:63:54:dd:1d:ef:9c:87:a0:40:6c:
         2a:39:71:66:7d:f1:40:78:ff:88:93:b3:94:2e:1f:26:88:f9:
         51:f4:62:93:85:f1:24:91:b5:39:98:2e:44:0f:81:88:4f:7e:
         51:75:57:3e:64:b8:00:6a:31:a0:4f:c1:b7:20:0d:b6:c5:4e:
         cb:70:2a:57:cc:c0:63:3a:5e:fd:fa:0b:7f:96:ed:8d:bd:c2:
         c4:63:1e:ce:47:2f:c3:2c:45:8a:88:ae:ab:14:b7:af:d7:4e:
         54:a8:de:eb:e6:16:05:78:85:57:69:a4:c5:d7:55:af:07:c5:
         ac:fa:8e:0b:19:5c:ae:4b:45:93:98:fb:63:3d:dd:5b:e6:77:
         0f:e3:0f:dc:d7:20:22:99:17:78:a8:06:51:27:e9:cc:b5:6c:
         98:d1:84:4d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:05:26 2026 by rpki-client