Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b09216c9-3aa9-468d-b6d7-5476b5c3e5c2.roa
File:                     b09216c9-3aa9-468d-b6d7-5476b5c3e5c2.roa (raw, json)
Hash identifier:          F2gAQ6enkQxl75ZjO8QhO5j7RYf/19T/N+9lCedjPdU=
Subject key identifier:   CD:BF:C3:CB:9B:D5:5E:5F:01:A1:AC:B4:67:5B:C8:76:79:31:D7:BC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       509A00A54772C04155C795A8D6A6167CF1EE9F20
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b09216c9-3aa9-468d-b6d7-5476b5c3e5c2.roa
Signing time:             Sun 17 May 2026 00:40:07 +0000
ROA not before:           Sun 17 May 2026 00:40:07 +0000
ROA not after:            Sat 15 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:80a0::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9a:00:a5:47:72:c0:41:55:c7:95:a8:d6:a6:16:7c:f1:ee:9f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 17 00:40:07 2026 GMT
            Not After : Aug 15 23:59:59 2026 GMT
        Subject: serialNumber=a18151124936fbf90a7c302ad69f244e45cc18cb1510b8e73384c38b14f71b3a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ce:c6:dc:5e:91:59:da:bd:9a:36:5e:b4:30:
                    e0:ac:dc:9f:c4:d8:c8:87:fa:33:59:ac:e9:0a:67:
                    a0:5c:2f:ae:3d:47:b2:35:ea:ca:3b:05:37:fa:9f:
                    80:c0:84:9a:13:a2:66:41:33:66:8a:46:af:67:14:
                    7e:47:21:1e:e5:1e:38:72:b3:35:d9:cb:81:88:bd:
                    3a:47:88:2c:93:53:27:04:34:f6:d5:ac:45:cd:c3:
                    46:79:c3:c9:5a:40:63:49:54:44:0e:20:89:8c:81:
                    a3:5a:57:c5:ac:50:c2:7d:cc:1f:85:10:79:51:66:
                    38:ec:cf:8c:52:58:54:b5:b4:65:03:cc:18:f6:11:
                    88:dd:4e:e8:9e:4a:82:dc:22:be:78:a0:b1:25:b7:
                    b0:ef:07:98:d6:01:1b:31:09:b9:78:f1:f3:6b:c5:
                    b3:39:eb:e9:e5:1c:a6:3e:c3:7c:15:ba:8c:14:b0:
                    0d:af:e6:c1:47:93:4b:b3:09:a2:2f:eb:ff:63:75:
                    b0:b9:6d:c2:d1:4d:3b:f9:b0:4f:eb:5c:7d:11:19:
                    2f:c3:75:de:42:cb:36:84:8c:e8:a1:01:3d:0a:4e:
                    c9:54:fe:5c:d0:fd:cf:c1:6a:c9:db:7b:cf:47:b8:
                    04:60:21:8f:92:cb:db:46:ef:1c:5c:31:28:53:06:
                    df:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BF:C3:CB:9B:D5:5E:5F:01:A1:AC:B4:67:5B:C8:76:79:31:D7:BC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b09216c9-3aa9-468d-b6d7-5476b5c3e5c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:80a0::/46

    Signature Algorithm: sha256WithRSAEncryption
         4d:f1:a5:d6:2d:c4:47:9f:a7:da:57:85:28:b6:d0:74:7f:89:
         1a:57:91:bf:0e:05:be:1d:40:de:69:01:29:3d:ba:92:28:e6:
         2c:af:57:dc:a2:33:49:58:17:92:ce:6b:02:b8:b4:c2:64:d1:
         a1:45:65:25:9f:3c:d7:15:34:4b:bc:ef:4b:15:75:e9:b1:27:
         6b:dc:5f:ab:7e:0e:15:61:b6:7f:00:6e:f7:ad:12:3d:ea:a0:
         4b:e9:40:b7:b7:b5:65:30:b0:ce:1f:24:ba:1e:04:7d:bf:7a:
         1e:f2:ae:68:a6:66:ce:a2:db:df:5c:16:76:7c:54:73:73:53:
         a8:0d:d1:97:7b:d9:bc:64:ee:a8:6c:b7:36:4e:e0:84:c7:fb:
         8a:9d:23:81:6c:f4:2a:45:81:4d:78:14:19:37:71:cb:02:b2:
         40:78:25:2f:d1:97:d3:ae:a2:78:91:b3:58:ca:be:78:67:4a:
         8d:f9:83:3c:2d:ac:f9:cc:81:32:61:c6:4f:1f:84:f1:7e:c5:
         36:b0:48:19:e0:ac:bb:83:c7:b0:37:27:03:12:b5:d4:8b:b4:
         b5:95:5e:24:72:bd:ed:77:0d:b8:88:de:ff:c5:3e:10:3b:f4:
         12:73:bd:69:58:f8:3f:ed:4a:3e:53:ce:e1:7e:4b:35:6f:d8:
         dd:59:0c:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:00:03 2026 by rpki-client