Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9feffd0d-e576-4cbf-b7df-313288e2c8e2.roa
File:                     9feffd0d-e576-4cbf-b7df-313288e2c8e2.roa (raw, json)
Hash identifier:          yLiJHbGxuGNQC+v7PZBIgaBxI0WUaFTJaUgU+uSHWdo=
Subject key identifier:   AA:FD:4C:37:E3:87:31:F3:64:11:59:83:E5:90:B4:3B:B3:72:2A:65
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5674F6DD105C8D91705D7F7F56D7F66399CD0EF9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9feffd0d-e576-4cbf-b7df-313288e2c8e2.roa
Signing time:             Sun 31 May 2026 01:00:03 +0000
ROA not before:           Sun 31 May 2026 01:00:03 +0000
ROA not after:            Sat 29 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fba:4080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:74:f6:dd:10:5c:8d:91:70:5d:7f:7f:56:d7:f6:63:99:cd:0e:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 31 01:00:03 2026 GMT
            Not After : Aug 29 23:59:59 2026 GMT
        Subject: serialNumber=5c0bd8d107bc0d8f2d6968cc24d595c02ded0fcaf2d580d042bbee7795a558d8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:89:d0:8d:86:ed:af:e6:5a:36:57:f6:03:0f:
                    42:92:df:0a:b2:24:24:5a:c0:57:a4:1f:77:61:bd:
                    20:3d:18:28:fc:3f:96:26:38:3a:46:a4:92:be:76:
                    57:10:35:55:bf:28:43:02:b2:20:9b:d3:c1:6b:35:
                    70:ca:00:d2:dc:0f:43:23:fe:05:ab:97:6c:9b:c0:
                    c3:2b:ad:37:65:a5:bd:16:3a:0b:6f:cf:d9:f2:f9:
                    89:3e:7f:65:34:5b:f7:49:22:6a:3f:94:0b:3e:88:
                    ae:ed:6b:ca:62:54:8a:6d:20:78:be:7d:da:5c:91:
                    8e:45:0b:01:da:c7:f9:8c:ec:00:ee:4d:c1:d1:15:
                    01:9d:b4:7e:f7:0b:05:1a:ed:e4:8a:45:81:77:6e:
                    6f:de:be:7e:0c:50:73:cf:02:23:d6:9e:ef:34:6d:
                    39:23:48:21:9b:40:06:b8:76:02:fa:44:5e:a4:e4:
                    f5:c6:cf:1c:b2:02:99:b4:df:64:43:b2:be:41:69:
                    28:4e:c6:21:40:0f:e2:9d:a4:4d:85:c6:b9:ed:df:
                    45:de:c2:f5:44:1f:ce:ec:51:85:80:d8:c3:55:d0:
                    36:5b:93:08:6f:0b:79:5f:9e:2f:75:95:05:82:4f:
                    a6:bf:97:ec:7d:8d:53:aa:26:2d:50:47:39:e8:0a:
                    15:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FD:4C:37:E3:87:31:F3:64:11:59:83:E5:90:B4:3B:B3:72:2A:65
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9feffd0d-e576-4cbf-b7df-313288e2c8e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fba:4080::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:98:a8:57:0b:42:21:7e:ad:e5:93:8d:da:24:19:95:2a:cf:
         1c:c4:6b:75:4b:fd:61:10:38:83:e1:54:5e:cf:1c:1c:73:ab:
         47:08:39:3b:15:a8:21:e2:05:e2:5e:d0:54:65:cc:90:b0:ac:
         2c:57:7b:00:17:47:d0:07:ba:4a:ef:da:43:6d:83:ea:26:a2:
         9a:5a:ac:69:96:28:69:d6:f8:85:97:2e:16:ee:0c:f8:eb:04:
         c1:70:6f:5e:7a:dd:2c:da:b5:86:de:57:64:dd:02:c9:34:29:
         df:1d:b9:9b:33:59:c4:3d:62:42:be:3f:d4:f8:94:79:03:18:
         ce:58:f0:d5:3b:b5:15:5b:e6:3f:e9:7c:4f:54:16:d2:b8:56:
         6e:12:11:d5:35:f3:40:bc:0b:95:8e:fa:ee:d0:39:4c:8f:36:
         a7:07:61:ae:0b:fd:ca:60:4e:6a:73:2d:4c:fc:6d:1e:83:8c:
         9a:7f:d5:91:17:0b:97:7a:c5:9b:a4:32:c3:32:f5:fe:39:cc:
         d0:d2:7f:fc:0e:7c:5b:aa:ea:47:98:f6:f4:c2:00:bc:70:16:
         29:5d:39:f4:ff:6d:f8:42:e0:0c:f6:db:52:7d:4b:4f:e5:b8:
         f1:b2:ac:f6:b5:63:04:eb:3b:2d:64:69:9a:96:74:64:29:e4:
         ad:c5:ee:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:46:16 2026 by rpki-client