Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b700ba59-e7b4-4735-adc4-f2dba045282c.roa
File:                     b700ba59-e7b4-4735-adc4-f2dba045282c.roa (raw, json)
Hash identifier:          tImNsI+GcvcPOVyrMlCQV1kVBQizHS8uoke9VSFgTlY=
Subject key identifier:   B7:8E:FC:9F:12:3D:70:78:73:DE:50:2A:DE:74:EE:2C:EF:FA:53:00
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1A0CC07529EF968AF2B0D53C89329A26BA9D5804
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b700ba59-e7b4-4735-adc4-f2dba045282c.roa
Signing time:             Fri 15 May 2026 01:20:08 +0000
ROA not before:           Fri 15 May 2026 01:20:08 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f00:80d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0c:c0:75:29:ef:96:8a:f2:b0:d5:3c:89:32:9a:26:ba:9d:58:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 01:20:08 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=51b4174464b6039650fa9ba13ec7cf12a8ea3dbf19efd6a58978134a05adfa77, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e3:db:11:3c:14:fb:1b:c0:8a:96:30:d7:71:
                    29:62:7c:1f:52:58:b9:31:98:cd:cd:1d:69:c7:87:
                    ea:e7:8f:cf:a0:1b:a1:dc:c4:c7:f8:c6:60:29:10:
                    76:e1:03:07:63:d5:4b:b2:de:d6:60:a3:bd:37:84:
                    c4:df:7c:88:71:f1:1f:9f:8e:53:5c:97:c8:17:14:
                    be:c8:ba:76:21:7b:f5:02:3d:9e:ef:ce:c7:d2:d8:
                    bb:f9:ed:b6:96:9b:9b:bc:67:dc:47:6a:ea:30:bd:
                    a8:e5:0e:04:24:da:a2:5d:ef:c8:2c:4c:17:f1:2d:
                    ca:e3:be:e4:2b:c7:0d:67:0a:a1:a8:e1:9e:30:70:
                    43:14:bf:59:ef:04:29:73:21:f8:89:9d:b7:55:48:
                    7d:43:88:47:5e:75:e0:53:49:82:97:27:84:46:71:
                    33:da:4c:eb:a3:72:8f:76:f8:1d:e7:f2:67:1b:59:
                    b6:ab:24:68:bb:9d:3c:ec:33:57:33:9d:4e:8c:3a:
                    33:85:4e:8e:01:58:c2:ec:48:7f:2a:7c:66:cc:4d:
                    b5:d1:5f:85:11:2c:ce:40:5c:9d:dd:a2:91:0a:21:
                    03:2d:8b:97:73:d0:57:17:ab:b9:da:e9:fa:5b:6f:
                    5d:cf:5e:13:58:3f:de:c3:74:33:7f:ef:f3:94:86:
                    d9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8E:FC:9F:12:3D:70:78:73:DE:50:2A:DE:74:EE:2C:EF:FA:53:00
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b700ba59-e7b4-4735-adc4-f2dba045282c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:80d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:5e:e6:bb:f8:1d:85:96:69:d6:fa:05:2d:5b:5c:cf:33:57:
         ae:ad:d9:3b:7d:1e:bc:db:88:21:22:91:d3:06:02:22:cc:27:
         0e:a5:09:42:ef:3e:50:9f:92:e4:57:92:c4:af:2f:9b:c4:8b:
         1f:b5:fb:41:43:73:2c:76:ba:ed:41:b2:e7:fb:9f:6b:40:4c:
         6d:fe:d1:86:78:05:a1:1e:b0:e0:d4:a8:15:12:ad:4d:4b:52:
         be:08:f5:62:a0:f4:ce:90:26:05:e5:de:c0:5d:0d:ef:dd:28:
         83:45:45:6f:b2:d3:8e:9c:0a:ea:25:81:6f:30:28:7f:00:0f:
         ae:5d:e6:2b:1e:9b:19:20:3e:3f:83:83:20:5d:f5:6f:c1:ed:
         05:ca:a2:30:40:ae:46:1e:93:50:dd:b9:ec:d8:fa:4d:d7:c6:
         86:74:fe:90:b6:80:f1:35:3e:2c:1c:42:1b:d3:c1:2a:5b:8b:
         10:c4:93:df:a6:d0:be:87:d1:a7:94:8d:13:91:52:fe:88:d5:
         c2:69:32:73:9e:2f:4f:8d:84:67:fe:04:3f:c0:c6:97:74:90:
         c5:4d:b9:1a:9a:ca:db:c0:dc:9c:f4:37:47:1c:2e:97:db:4f:
         8e:d5:37:f0:e2:4b:54:86:1e:6b:63:c8:91:51:0f:83:85:45:
         79:cd:af:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:49:27 2026 by rpki-client