Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8df2c2c-dc4e-4de0-921f-473e414af165.roa
File:                     b8df2c2c-dc4e-4de0-921f-473e414af165.roa (raw, json)
Hash identifier:          dP1sqXtZwIBDrLot5gMkQHy6lIL69+xFbGJB0weqiKE=
Subject key identifier:   D9:DC:30:C8:B9:55:A7:FD:CA:C3:73:8A:1A:67:CF:FA:FB:78:F1:8A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       453D933EEB97CC073CF216449391B43D8E49601D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8df2c2c-dc4e-4de0-921f-473e414af165.roa
Signing time:             Fri 15 May 2026 01:21:15 +0000
ROA not before:           Fri 15 May 2026 01:21:15 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:40c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3d:93:3e:eb:97:cc:07:3c:f2:16:44:93:91:b4:3d:8e:49:60:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 01:21:15 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=2fc41097761da181193148cce06fa237151823824feec59f40799faa16b0d4b7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:9a:d7:f0:ca:05:35:46:08:d4:2b:c4:1e:1d:
                    fd:df:95:41:d7:7e:6d:d2:22:ec:00:f9:30:9b:5d:
                    dc:42:3e:dd:4a:c8:65:89:cf:c2:da:c8:d6:ac:d0:
                    a2:88:2f:05:b0:40:60:25:fa:0d:6d:eb:c5:84:f3:
                    70:30:0f:d7:79:ce:19:b1:84:50:eb:3a:74:19:b4:
                    ea:63:5f:b4:8f:9f:c0:1e:10:96:fe:df:17:eb:7a:
                    75:5e:8a:cc:1a:37:72:d8:76:53:9e:f7:81:7c:aa:
                    21:ba:74:12:b1:61:84:85:00:5f:23:c7:08:a8:2d:
                    d7:f9:a3:04:21:76:54:b5:1a:05:9b:56:2e:1c:58:
                    56:80:cd:ad:27:06:56:95:6d:39:41:1f:54:e0:b2:
                    da:b8:79:f9:9f:c6:f0:af:e3:e1:08:f6:ad:c9:5f:
                    66:5b:5e:46:b9:2f:d5:8d:64:25:a9:a2:8a:30:f3:
                    e6:0b:37:20:9a:ab:24:2f:41:c9:4a:76:f4:46:cd:
                    7d:15:7e:2b:c8:15:14:ea:38:dc:36:15:d1:ad:e3:
                    8d:c3:d1:a3:da:07:4b:9d:34:67:02:75:4f:ef:18:
                    df:be:ab:69:c0:64:95:5e:3d:8a:67:97:d0:09:6c:
                    37:77:b9:28:8a:b0:9a:30:25:a9:bb:cf:bc:23:3d:
                    17:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DC:30:C8:B9:55:A7:FD:CA:C3:73:8A:1A:67:CF:FA:FB:78:F1:8A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8df2c2c-dc4e-4de0-921f-473e414af165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:40c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:09:96:7e:94:6d:90:23:1b:f9:f6:49:7d:0e:a9:c5:71:ae:
         d6:86:d9:f2:a2:57:7f:2f:23:a3:13:ff:f0:21:83:53:83:93:
         3d:14:a6:c5:8b:c9:e1:43:81:7d:9e:6b:4a:8f:d2:5b:c6:5c:
         cd:27:1e:ba:1c:24:9f:28:01:e9:3a:58:35:56:7a:25:af:27:
         95:a0:79:af:89:83:21:0c:70:b5:8d:1a:f2:ba:10:90:3a:a7:
         26:08:dd:bb:94:2d:b9:a8:55:67:c7:93:4e:ad:7d:ff:59:04:
         ad:f5:51:25:1e:e1:e0:1b:e1:f7:a3:ab:22:d9:9d:b5:ab:9c:
         7f:b9:5c:4f:8b:f1:22:70:30:9e:f2:b5:29:bc:88:33:2b:75:
         24:63:16:90:d2:4c:35:76:ac:5c:a4:3b:00:5c:89:36:5f:2a:
         bc:4d:23:89:a0:1f:74:b8:87:05:30:fc:ce:b6:a8:32:2a:7b:
         e4:99:0a:c7:5e:2c:bc:c9:0b:c8:6d:3d:a7:6d:a6:06:4c:a5:
         4e:e4:93:4f:15:12:db:9d:b3:58:4e:89:2f:94:75:44:14:3b:
         f3:f7:45:4c:9b:7a:16:2a:e3:74:48:2f:18:18:07:f2:9a:53:
         da:69:f5:bd:f7:7b:4e:ee:11:1c:ee:0e:28:15:c2:10:2c:99:
         fe:54:8d:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:01:34 2026 by rpki-client