Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a83f5a56-9f35-4d82-9ebc-eae61856282f.roa
File:                     a83f5a56-9f35-4d82-9ebc-eae61856282f.roa (raw, json)
Hash identifier:          J2qwSXvEfVEiNfvkO4FAZp9+ltUfXuVLczm9zRjF6Lk=
Subject key identifier:   BD:4B:66:0A:0B:84:3E:06:F5:9E:F0:76:51:14:E6:C0:48:4B:2B:25
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       532F9767E0141256E70AE7041EBDF7CF6B4B4DBC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a83f5a56-9f35-4d82-9ebc-eae61856282f.roa
Signing time:             Fri 03 Apr 2026 00:10:08 +0000
ROA not before:           Fri 03 Apr 2026 00:10:08 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1feb:7480::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:2f:97:67:e0:14:12:56:e7:0a:e7:04:1e:bd:f7:cf:6b:4b:4d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  3 00:10:08 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=83e6abf21fbbacfd49fcb2c88170270d6cd836130ec1e337395d7e59f575cde5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:1c:27:0f:94:e5:0d:7b:f0:e7:ba:b5:6d:
                    28:75:2e:3e:71:02:f5:6d:c6:92:f0:ea:8c:2d:cd:
                    e9:f2:98:a3:03:79:ff:b2:81:05:1a:51:8f:c1:16:
                    46:63:12:cd:48:e0:65:57:45:67:25:6d:03:08:a1:
                    b9:4d:59:b6:35:93:15:6d:10:bb:5b:73:58:e0:8d:
                    4c:9c:11:f1:e5:90:57:a9:60:2a:ec:a7:a2:3a:a4:
                    ab:06:a2:c0:b4:2a:78:cb:46:44:b0:b0:74:2f:9d:
                    d7:97:6c:f6:ac:00:37:2a:81:ab:76:0f:3d:05:11:
                    92:2b:78:ca:80:0f:3f:1e:2f:de:21:8c:9b:bb:cd:
                    79:23:11:6c:85:ee:86:46:96:da:f8:66:29:a8:02:
                    a3:4a:00:bb:6f:7b:9c:ce:ad:3b:89:bb:90:f9:52:
                    16:5b:53:db:5d:11:63:91:83:bc:42:58:ac:75:6c:
                    2f:48:19:65:e0:c7:06:88:20:da:31:f8:07:f1:5d:
                    2d:63:b8:4a:1d:32:d2:8b:5e:e9:23:c8:e1:1c:6d:
                    f8:93:51:eb:89:71:a7:7f:80:59:f3:b0:c0:61:51:
                    ff:ee:6d:07:58:96:5e:0f:12:11:77:27:a0:eb:2a:
                    64:59:ef:7a:d1:44:a3:fb:2b:03:32:99:c8:47:8f:
                    d8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4B:66:0A:0B:84:3E:06:F5:9E:F0:76:51:14:E6:C0:48:4B:2B:25
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a83f5a56-9f35-4d82-9ebc-eae61856282f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1feb:7480::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:07:f1:ec:5c:03:df:13:75:0a:ac:50:3a:c4:43:21:8c:34:
         8c:8a:6f:4d:3d:99:1b:f8:20:65:71:8a:bd:da:78:ba:23:97:
         a7:a1:15:2f:ae:f8:99:16:f0:22:97:20:8d:b5:1d:81:e1:a3:
         6e:74:21:7d:69:f1:a2:0d:1e:2d:5c:2f:19:20:ae:e9:a1:ab:
         a3:59:b3:24:56:70:03:7d:e2:ab:64:47:d4:3e:a7:98:ec:bd:
         7e:89:dc:c3:49:a1:1d:4f:a2:d3:24:c2:5b:dc:e0:97:30:43:
         44:bb:ac:d2:d6:81:45:b2:ed:da:94:77:63:ec:5c:ba:dd:de:
         89:ec:c7:e0:ae:8c:df:72:7c:a8:80:f6:fb:e9:d5:1f:1f:92:
         6e:c3:39:da:64:7b:6d:c3:a0:ad:9c:00:29:39:e6:99:1d:76:
         be:ed:25:49:6c:2c:65:21:7d:df:ad:87:0c:e8:a2:f9:8f:a2:
         47:4c:4b:86:db:29:5e:ee:8d:16:c7:a7:04:71:02:65:1f:10:
         0f:8b:af:f8:f3:5a:15:75:1b:ab:a3:48:e7:2f:77:58:5b:63:
         e7:74:25:01:59:41:b1:55:39:6a:11:49:ee:52:22:0d:7f:8b:
         bb:2f:fc:85:77:c0:b9:1e:69:ea:1a:ed:2d:c3:66:58:ea:7d:
         11:62:20:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:37:12 2026 by rpki-client