Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8babeb51-8816-4ffd-9a50-4f2bca25daf0.roa
File:                     8babeb51-8816-4ffd-9a50-4f2bca25daf0.roa (raw, json)
Hash identifier:          p0d0Rw7rbeyAS+dS9onNmKTAzHXvucFDDyM8AKtB1AU=
Subject key identifier:   05:98:D5:D0:8A:F1:79:8C:80:B6:A9:85:AE:9D:80:D3:02:E4:BE:6A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1A7EF1526BD0B87E2059399C68B3C611205DB3BB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8babeb51-8816-4ffd-9a50-4f2bca25daf0.roa
Signing time:             Sat 16 May 2026 01:20:59 +0000
ROA not before:           Sat 16 May 2026 01:20:59 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     7224
IP address blocks:        2600:1ffd:1700::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:7e:f1:52:6b:d0:b8:7e:20:59:39:9c:68:b3:c6:11:20:5d:b3:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 01:20:59 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=97b1da4b8af72b56b0ad63403036e6ac2757d9ab4d77036d933f5b67efccfb9d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0f:bb:d9:ee:4b:b5:9b:2a:14:2e:03:d3:4c:
                    49:96:45:db:c8:93:24:14:90:58:0f:48:c8:5a:aa:
                    37:a7:73:43:4f:a3:60:d4:8f:53:b8:48:23:1f:16:
                    5c:54:c8:c8:60:b1:1e:a0:03:84:0c:8b:44:fb:b0:
                    7f:8c:96:2e:b9:c2:5a:83:91:80:fc:9f:be:13:84:
                    64:6e:ee:c8:46:e2:5c:47:5e:05:37:6f:49:f7:57:
                    a9:20:10:be:c1:ab:1c:c8:1c:a5:b7:00:a4:95:8a:
                    6a:e9:1f:51:a6:b2:02:1f:3d:1e:5b:9c:98:3e:2d:
                    ac:2b:44:b6:a3:f6:3c:fa:b0:be:c4:b0:c4:c7:24:
                    20:cf:e5:98:65:aa:99:30:e5:d6:f7:cf:ab:44:53:
                    65:ad:4b:07:d6:fb:52:d7:3d:8b:82:46:51:4e:24:
                    53:f0:8c:b6:18:0d:30:70:30:55:2a:bb:89:4a:fc:
                    e7:29:16:87:3d:21:c8:63:f5:38:22:9e:a4:2e:1e:
                    ee:17:33:6c:68:db:2f:f6:f0:7e:cf:d7:e3:80:a8:
                    b1:d0:2d:1e:09:49:1f:f3:dc:b8:fe:6d:ae:8b:66:
                    c0:1c:1a:64:80:e4:e0:aa:d7:84:9e:c4:59:63:76:
                    c0:bb:9c:11:ca:32:cf:8a:6e:b1:ac:24:e2:a0:9a:
                    00:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:98:D5:D0:8A:F1:79:8C:80:B6:A9:85:AE:9D:80:D3:02:E4:BE:6A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8babeb51-8816-4ffd-9a50-4f2bca25daf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:1700::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:c3:1a:ba:60:b7:f4:1e:2d:b9:55:23:d2:ba:e2:59:fd:19:
         c8:b1:7b:23:f9:1f:4b:80:b9:43:b1:96:82:e7:a0:d3:34:fc:
         5c:98:2d:4d:2c:ff:5e:b0:37:ef:36:9c:c7:b3:8b:c2:c7:3f:
         38:7a:24:4b:71:12:22:6b:ac:c2:8e:c8:03:33:12:af:11:a2:
         e7:e6:03:05:a7:14:0b:ec:14:ac:4a:f0:66:90:fb:10:4c:2f:
         e3:a7:40:24:ad:b4:e3:ce:20:34:82:82:38:5c:b9:fa:8c:7a:
         93:1c:87:b9:5f:07:8f:d2:49:8c:6b:30:3e:ea:93:6b:2b:f6:
         f2:b9:4f:15:1f:98:f3:6f:1c:e9:ae:64:fb:a5:06:a9:a6:f8:
         57:45:4c:55:5c:5e:0c:f1:cb:e9:d7:c5:d7:53:03:67:03:cf:
         f8:5b:09:0c:30:ff:90:7c:c4:a7:f7:10:2d:65:4f:6a:5d:9f:
         61:47:fa:da:c9:24:7d:20:fd:bd:5c:33:1b:f4:12:da:cf:ab:
         61:8f:50:57:0b:42:a0:17:87:08:88:80:e0:5a:3e:d7:6d:dc:
         ac:e6:ee:79:c6:36:a0:d2:0d:03:d3:42:42:59:af:76:1c:d6:
         10:37:fb:e7:8b:64:ec:f6:d0:e3:ff:f3:63:fc:45:ba:c6:b8:
         c6:e9:3d:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:07:20 2026 by rpki-client