Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a10504c7-d7d2-4fa4-8acd-4ec870814545.roa
File:                     a10504c7-d7d2-4fa4-8acd-4ec870814545.roa (raw, json)
Hash identifier:          qJN3YC30opy8U10sL8WGRvuwHzrM/bpakyfmlDEGObA=
Subject key identifier:   E8:3B:C0:EB:D9:10:F7:52:4D:BD:EB:D7:56:50:57:35:BD:5F:51:C8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2A21CDEADF7B133CB7AE9E748BF09EC3F7787B97
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a10504c7-d7d2-4fa4-8acd-4ec870814545.roa
Signing time:             Fri 03 Apr 2026 00:21:23 +0000
ROA not before:           Fri 03 Apr 2026 00:21:23 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1feb:2080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:21:cd:ea:df:7b:13:3c:b7:ae:9e:74:8b:f0:9e:c3:f7:78:7b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  3 00:21:23 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=99c71db366971e7b9f21d2288d76977799ebd345ba42c51984894b81c97839bf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:17:44:ce:2f:6e:a5:60:9c:4e:34:cf:d8:bc:
                    b5:e0:cf:3f:03:09:81:a4:a7:b2:80:af:ac:6d:cf:
                    4a:65:41:04:fc:d9:39:a6:be:db:23:0d:ab:3e:91:
                    3a:b0:cb:e7:ae:a5:25:1f:3d:c2:a7:c2:3c:d4:c3:
                    63:b0:85:fc:42:df:8f:ff:6f:e0:20:96:6b:81:ba:
                    f6:a6:4c:b8:1c:43:d0:35:6c:36:a8:d8:e7:a7:18:
                    20:ea:ca:a1:57:82:75:3f:96:25:c9:df:b2:bd:c3:
                    85:d2:0d:dd:54:c1:e3:9c:6f:47:70:4c:29:44:e6:
                    5f:ac:38:9e:30:05:2e:8a:f1:1c:5e:ff:4d:07:ef:
                    8c:cc:29:b4:94:f5:e1:a8:69:fc:d7:ad:ab:94:0a:
                    63:f5:63:f6:a8:ae:29:e0:95:ec:50:cc:37:78:ae:
                    93:92:52:e2:77:7b:30:4a:eb:ad:1b:b3:d7:ce:0d:
                    58:99:f5:aa:e2:35:ec:3a:46:6e:a7:81:49:2c:46:
                    c4:72:07:f0:1a:1b:8b:15:51:2a:43:2d:e9:12:5d:
                    36:a4:7a:b9:46:46:28:1b:28:d2:88:6d:e4:82:1c:
                    f2:b8:4b:00:18:9c:df:9c:9e:bb:f7:c2:8b:6d:d7:
                    71:4f:7f:19:32:80:e2:49:9b:df:4d:5a:d5:68:22:
                    04:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3B:C0:EB:D9:10:F7:52:4D:BD:EB:D7:56:50:57:35:BD:5F:51:C8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a10504c7-d7d2-4fa4-8acd-4ec870814545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1feb:2080::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:ea:0d:93:87:ca:47:ea:bf:2f:8b:bf:d4:10:18:55:76:08:
         da:e1:2a:22:12:75:93:6f:e1:82:43:0d:29:a4:f4:e5:0c:6d:
         27:30:ca:b9:f0:69:e3:60:86:b0:cb:78:5d:f2:46:f7:f3:1c:
         a6:2e:5b:ae:98:d3:f0:c4:29:3c:62:e3:3a:55:f8:b2:91:90:
         a0:76:17:88:45:8c:94:26:fd:1f:9f:fb:c0:47:29:f4:b0:14:
         96:f2:fa:e9:3c:fe:c3:0a:62:fa:15:a4:16:79:9a:09:1e:fc:
         37:3f:aa:2c:15:80:44:4c:11:6f:a0:5b:25:ab:32:84:ba:62:
         11:11:18:6e:ac:5d:04:da:b9:cf:9c:3e:a6:62:ab:97:13:7a:
         ad:68:da:db:ba:73:89:6a:c8:5f:13:c4:70:dc:0f:3c:7c:54:
         80:46:b4:05:eb:02:b1:aa:fb:c8:63:b6:c8:ff:43:e2:50:57:
         81:ff:1c:5d:09:2b:c5:59:e4:37:07:aa:20:05:77:d5:0b:e4:
         fb:47:df:89:6b:7e:ce:b1:6a:73:67:2a:dd:ad:e0:1e:06:12:
         fe:7e:4b:aa:bc:a4:8d:ec:8f:b8:f8:bb:71:f0:be:03:70:18:
         85:52:23:66:92:f9:6c:69:a4:78:37:75:00:4d:92:6b:6b:ee:
         b9:6f:cd:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:33:26 2026 by rpki-client