Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b794d494-1a2f-42c7-88a6-1b7352f18f53.roa
File:                     b794d494-1a2f-42c7-88a6-1b7352f18f53.roa (raw, json)
Hash identifier:          x6d6trLaPi9ZCKguSx3E1UmP9+qZj3BaUsUZCGWcBbg=
Subject key identifier:   53:FF:3E:9D:8D:39:1E:B5:BE:CD:CA:8A:86:6D:B9:E1:47:88:E9:98
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7DF77739D13944411D877EBB88DBA2AEF80115BE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b794d494-1a2f-42c7-88a6-1b7352f18f53.roa
Signing time:             Sat 13 Jun 2026 00:00:05 +0000
ROA not before:           Sat 13 Jun 2026 00:00:05 +0000
ROA not after:            Fri 11 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f16:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f7:77:39:d1:39:44:41:1d:87:7e:bb:88:db:a2:ae:f8:01:15:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 00:00:05 2026 GMT
            Not After : Sep 11 23:59:59 2026 GMT
        Subject: serialNumber=9d54f89c69db1f19bdc9b128ecae52231a3807d9d2f96117cc3dea437a40acdb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f9:f3:34:80:8d:09:85:ce:a8:7c:8e:d4:59:
                    f9:f9:32:89:2c:f1:f5:9a:b7:7c:9d:f2:12:6a:de:
                    b1:cc:a4:00:4a:32:be:4c:28:f7:a4:d1:9d:7d:40:
                    52:de:60:f9:82:0b:ca:5a:11:0f:c7:f4:7c:65:a0:
                    26:d7:a6:c0:1a:63:08:45:15:6e:b7:58:7e:7f:74:
                    f7:fb:8e:0c:e7:67:57:c9:0f:1f:45:e6:7e:79:ab:
                    c8:1f:a4:bc:66:3a:9a:39:a9:0a:ec:43:55:e8:01:
                    f1:9a:17:29:8f:aa:7d:dc:f4:f7:73:12:32:f0:ac:
                    52:bc:fb:ad:4c:d6:ab:63:d8:24:69:b9:99:05:07:
                    d8:83:78:72:e6:5b:a5:44:8c:4e:c2:79:3b:02:82:
                    42:00:ea:c9:14:9f:8f:74:a2:67:01:06:84:7e:39:
                    b5:e3:bb:78:e8:35:6e:7e:a0:55:7a:6d:07:85:65:
                    91:04:23:af:98:02:cc:1d:cd:8d:84:e0:04:be:a9:
                    eb:c8:6d:4f:10:c0:1e:91:9c:b1:9e:bc:70:c2:02:
                    b3:6e:62:7e:06:2b:a8:f0:90:a3:8f:6f:11:9e:8e:
                    f9:78:fd:62:af:19:29:bf:d5:56:8c:6e:bd:b2:5f:
                    e2:f8:e1:b8:f1:a0:65:88:f2:62:44:44:08:18:67:
                    8c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FF:3E:9D:8D:39:1E:B5:BE:CD:CA:8A:86:6D:B9:E1:47:88:E9:98
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b794d494-1a2f-42c7-88a6-1b7352f18f53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f16:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         79:a0:0e:e6:13:b4:fc:cb:ce:d9:30:fa:1d:c0:2a:0f:62:e0:
         26:cc:bc:9c:46:18:e3:ff:4f:fa:b8:b2:64:c0:c8:2b:c9:f7:
         92:41:63:09:ae:f1:d4:dd:2c:30:9f:15:5a:18:15:00:bb:fe:
         43:a2:7d:ae:52:e0:ba:2f:c7:16:1f:1f:90:4f:ae:e9:97:1d:
         4b:01:70:ef:25:63:b2:07:0a:98:00:88:52:86:c7:6f:f3:fa:
         43:cd:bc:00:41:21:66:c5:74:f8:8c:99:38:07:b4:d0:50:8f:
         23:cf:ce:4a:15:4e:f6:25:90:01:d4:eb:50:79:17:cd:4d:d7:
         c5:ae:25:9b:d5:55:49:e6:85:78:27:9e:41:3b:b3:03:aa:6f:
         ef:7e:2f:a4:2b:25:6c:39:f9:8c:f4:55:fc:52:50:f9:f8:f5:
         a0:df:c1:4c:b1:cd:b1:fe:09:5a:db:43:de:b7:73:3f:46:40:
         0a:b4:96:13:06:28:b9:f4:59:2e:27:f2:ab:52:08:0f:6f:fd:
         57:6f:34:fc:3d:a1:2e:bf:e1:a3:b2:e1:38:d3:af:03:32:bf:
         9f:c0:3b:d6:eb:a5:6e:7a:bd:35:fa:df:80:d8:33:a1:e7:91:
         0a:fb:49:8e:34:d8:ef:30:b0:e2:1b:94:d5:12:a5:84:28:02:
         04:35:e4:01
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:16:53 2026 by rpki-client