Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ba3a8c3-70d5-4904-a577-21c82932ab95.roa
File:                     9ba3a8c3-70d5-4904-a577-21c82932ab95.roa (raw, json)
Hash identifier:          GNAvXMfIe3uWHz6fmCL94wdNQNZTDugMtATPj8I9BFg=
Subject key identifier:   D8:B8:62:F0:67:54:12:99:C2:5B:A7:E8:BD:8D:AA:45:11:59:F2:62
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1BE4291208CFDC13C28C3AC03C8268675E5A83AF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ba3a8c3-70d5-4904-a577-21c82932ab95.roa
Signing time:             Sat 16 May 2026 01:51:06 +0000
ROA not before:           Sat 16 May 2026 01:51:06 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f14:4800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e4:29:12:08:cf:dc:13:c2:8c:3a:c0:3c:82:68:67:5e:5a:83:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 01:51:06 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=b11a6abbcbc8c60edbb971a155da342d7aba97bd1f581232ef1267dcdfa56143, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f7:ab:d0:c3:fd:fe:c5:55:d5:01:ed:99:68:
                    23:dd:21:06:97:2b:8c:63:72:9b:71:78:aa:a1:07:
                    56:70:aa:c2:1a:57:a1:72:55:56:f4:ac:b2:93:04:
                    a7:c0:42:5e:bf:1e:90:6a:20:df:45:42:3d:27:6b:
                    4a:2e:2c:c2:0c:cd:0d:3c:82:d0:4d:1b:fa:14:47:
                    11:4c:a7:3a:71:77:c5:6d:1d:cf:09:6e:50:50:db:
                    62:ad:be:e9:3c:b8:01:47:8b:74:61:4e:7b:1d:b4:
                    6c:a0:16:54:4e:aa:fc:25:d2:bd:f3:db:b1:56:cc:
                    82:f5:10:1b:8a:9d:47:71:d9:8d:06:e3:e0:99:3b:
                    f5:2c:f5:68:3a:f8:f4:84:20:ac:7d:bf:09:df:70:
                    b1:14:d6:dd:42:95:d2:41:63:c5:cb:b8:93:f6:d1:
                    47:5f:af:2d:46:8d:9f:a7:a8:15:42:81:81:d9:47:
                    f3:b6:90:af:06:dc:29:b8:de:f4:d1:05:ae:cd:93:
                    b3:8a:49:08:3f:ed:71:ac:bd:92:49:79:3b:55:8d:
                    65:49:58:45:bf:8b:bf:93:5e:85:6d:e0:6d:5d:cf:
                    cb:81:47:1b:6f:ce:9f:f8:f7:d4:cc:3a:41:53:4b:
                    33:01:10:b6:b4:2c:79:04:c5:f6:24:d5:57:57:36:
                    16:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B8:62:F0:67:54:12:99:C2:5B:A7:E8:BD:8D:AA:45:11:59:F2:62
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ba3a8c3-70d5-4904-a577-21c82932ab95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f14:4800::/37

    Signature Algorithm: sha256WithRSAEncryption
         d1:50:e3:22:e4:b8:67:fd:fc:99:0f:2b:19:fd:7f:84:27:54:
         b7:d3:2c:e6:f3:36:77:6e:51:f0:33:97:13:26:27:5b:20:63:
         04:64:ec:54:18:1f:91:80:eb:b5:fb:f9:b6:f6:35:43:9d:da:
         d9:cf:d6:29:50:c7:fe:a4:29:8a:0c:c1:7b:76:4b:1d:0d:cf:
         33:76:da:20:08:82:1e:6d:49:28:5e:29:ae:94:a1:eb:c9:24:
         c0:3a:16:55:2d:4b:a2:30:91:6a:47:eb:1a:3f:e7:5b:af:d7:
         10:d1:d9:51:09:5c:b8:38:2f:08:a1:80:e7:78:53:32:b6:bb:
         21:19:8c:f8:ea:08:6f:cd:d8:db:9c:57:94:18:7c:10:98:70:
         9f:1f:06:c1:42:26:83:a0:c9:b6:ff:b1:0f:33:cc:40:59:ba:
         11:b3:9f:f5:ad:75:0b:60:77:31:bd:26:e5:b5:20:d0:7f:85:
         0a:47:e0:3e:41:84:e8:58:ad:2d:09:2f:59:25:98:3d:ce:b5:
         36:05:d1:4a:6c:45:00:90:f1:13:66:f9:02:1c:4d:23:1f:a7:
         9e:3a:1b:45:44:05:14:2b:71:91:9e:af:2d:94:41:80:69:29:
         b7:87:83:24:69:9a:c2:be:c7:7b:05:e7:9d:0d:21:cb:80:6b:
         a8:30:14:4b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:54:22 2026 by rpki-client