Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92d593ea-9a2d-4cb9-95b8-cfe741a70127.roa
File:                     92d593ea-9a2d-4cb9-95b8-cfe741a70127.roa (raw, json)
Hash identifier:          Rug5MQ06pg6jDCaOo1b39OXJagVGfsIXmcNXtnX714Q=
Subject key identifier:   BD:CF:FC:1B:05:7D:5F:13:69:5B:93:DD:E4:8A:84:FE:FB:28:1C:D4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       599909B704286F4B383428CB0AFECD568A6E6620
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92d593ea-9a2d-4cb9-95b8-cfe741a70127.roa
Signing time:             Fri 15 May 2026 00:40:45 +0000
ROA not before:           Fri 15 May 2026 00:40:45 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1f38:5040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:99:09:b7:04:28:6f:4b:38:34:28:cb:0a:fe:cd:56:8a:6e:66:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 00:40:45 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=1c7733df564295ef7bbd43cd1269d508c51994df1ac7dc37b0fa1c382ea1cda1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3a:db:e4:40:df:99:11:2f:f2:4e:ec:69:62:
                    8a:20:0f:6f:03:27:d5:cf:ec:3f:d8:13:56:af:52:
                    5a:9f:b5:39:3e:e3:46:25:c0:f1:f6:97:a5:fb:db:
                    47:f9:88:56:91:62:b7:d7:b3:e0:8f:c2:c4:33:c6:
                    8c:31:31:d6:0f:d3:47:e0:9d:b6:40:aa:f8:e6:ba:
                    90:74:50:9e:60:5d:5f:70:db:c2:81:61:c2:6c:73:
                    11:f3:e6:77:6e:c5:67:8d:d7:96:2e:2e:90:46:72:
                    a7:a7:fb:e2:0c:61:b6:79:12:22:5c:4f:33:76:91:
                    e5:6e:e7:9a:1e:5c:c0:69:f9:90:5d:de:f1:97:30:
                    b4:00:8b:ce:d1:9a:aa:90:3d:6c:56:c6:f3:95:85:
                    a6:af:69:68:18:b8:37:a5:91:fa:3a:99:94:db:55:
                    77:3c:ae:7b:b2:92:53:43:7e:ec:30:58:45:9c:ae:
                    8c:9c:ad:e7:d5:e3:b3:f4:26:22:58:80:7f:e5:a7:
                    df:6f:8a:18:0e:71:7a:be:fc:cc:81:a1:7a:a7:98:
                    83:01:d8:d9:e8:3f:db:b7:5a:5b:16:ee:db:1e:88:
                    93:3c:7d:f2:f3:4a:e3:a4:13:f1:17:fc:42:76:a0:
                    ed:7f:18:3f:9c:fb:de:a3:9d:09:30:ca:95:7c:3d:
                    d9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CF:FC:1B:05:7D:5F:13:69:5B:93:DD:E4:8A:84:FE:FB:28:1C:D4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92d593ea-9a2d-4cb9-95b8-cfe741a70127.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:5040::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:9b:56:a2:f0:23:54:80:66:84:cd:11:4a:7e:15:27:09:68:
         18:4d:33:3a:6d:bc:a7:9a:ac:d5:e4:fb:13:14:b8:aa:84:6e:
         0e:44:3c:60:7a:9d:61:bf:76:da:16:47:a4:d1:bd:9f:2f:71:
         2b:da:4f:08:3e:bc:ab:cd:76:1a:eb:f5:1c:13:87:ee:92:ea:
         c0:ec:17:60:7d:ce:31:0e:74:e4:12:65:8f:da:42:85:fe:f6:
         b3:9a:60:c6:bb:84:04:d1:46:c8:5a:64:79:68:96:fd:80:ab:
         4d:81:7f:df:f9:98:32:71:29:bf:44:f9:e0:62:eb:e4:1e:5a:
         46:bb:96:3a:31:af:49:17:1a:1a:7f:2a:1a:4c:7d:79:d9:ff:
         53:bc:03:36:5b:67:3e:66:4a:9b:2a:ae:46:3e:a7:32:0d:45:
         49:3c:15:0a:a4:d5:50:fb:20:67:14:1c:19:a2:8a:fb:25:6b:
         48:70:d7:b3:db:f9:fe:68:6f:6a:59:f0:f2:ad:60:6b:ef:95:
         c0:1b:4b:97:61:8f:72:15:9e:b8:d7:da:c4:90:b6:7f:01:e4:
         64:1f:9f:73:98:62:ca:93:24:c2:83:18:a0:2b:18:0c:ba:fe:
         4a:23:b5:84:6d:8c:fb:cd:49:21:fe:6d:03:4b:9c:62:74:ac:
         1e:10:f6:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 17 08:57:11 2026 by rpki-client