Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfdad287-fca0-4b74-837b-758976407690.roa
File:                     bfdad287-fca0-4b74-837b-758976407690.roa (raw, json)
Hash identifier:          OXUtL4y9CNQUy0/KDd2xS4Ku1rYx845KSd7JD+HBg2M=
Subject key identifier:   A7:66:8C:A1:B2:21:17:95:B3:7E:1A:D9:96:94:66:0F:71:F2:96:84
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7B5532E38F6677216D8E7DCF07F17A6E39084686
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfdad287-fca0-4b74-837b-758976407690.roa
Signing time:             Fri 15 May 2026 02:30:16 +0000
ROA not before:           Fri 15 May 2026 02:30:16 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f17:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:55:32:e3:8f:66:77:21:6d:8e:7d:cf:07:f1:7a:6e:39:08:46:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 02:30:16 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=c8227635f36f730f11b58e10e132495fcfbf3680833ff956b40059411d9e5f28, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2a:e7:25:c5:5f:1a:c3:36:3a:69:85:9b:0d:
                    36:a7:c1:f4:78:14:c0:fa:95:38:26:d2:b4:3b:ab:
                    d0:9c:b6:ab:da:14:4d:84:2a:0e:0e:14:04:ab:c0:
                    94:43:51:3b:0a:7a:b0:c2:ce:9a:ac:9a:dc:75:10:
                    00:61:81:3b:4a:0e:46:e0:48:45:7e:99:8c:c9:64:
                    a9:9c:48:81:1d:14:18:12:8f:c6:95:83:fe:19:06:
                    e8:49:c1:82:f2:db:9c:32:5f:a5:f7:42:d0:c6:f7:
                    32:8f:25:09:2a:4d:ea:8b:78:24:19:dc:b6:99:27:
                    c7:8f:bf:70:00:4d:51:b9:a8:b6:8c:f9:d6:ef:cd:
                    b9:b5:3e:b7:d8:6f:0c:28:09:a0:53:cf:9f:ce:00:
                    c4:e3:26:02:4c:a6:04:b2:ba:ec:e2:8b:7d:22:86:
                    b8:00:3f:b0:89:31:62:e3:2c:eb:aa:56:d3:15:fa:
                    fe:b5:6d:96:f2:08:af:7b:ad:4a:ae:d0:d3:02:24:
                    eb:b5:8c:fa:63:95:18:95:8b:89:ac:90:e5:44:c4:
                    88:92:5f:a3:03:aa:91:ca:3b:7d:16:c3:fd:7e:a4:
                    20:bc:d6:98:61:dd:e5:bd:e4:b7:49:b7:67:b7:0c:
                    06:cb:88:98:27:13:e4:a1:a7:95:d3:b3:08:96:6e:
                    85:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:66:8C:A1:B2:21:17:95:B3:7E:1A:D9:96:94:66:0F:71:F2:96:84
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfdad287-fca0-4b74-837b-758976407690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f17:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         14:0b:88:af:03:12:0f:35:55:e0:f6:e9:e1:1a:51:af:20:e8:
         7c:63:b6:1a:7c:02:33:fe:ed:5f:22:60:4c:e6:77:d7:39:dd:
         92:7a:bc:2f:f1:a7:27:1f:12:42:bb:f2:3c:5a:2f:57:f1:99:
         ca:59:6f:14:db:6f:32:40:ff:8e:0f:75:84:b8:4d:1c:13:d8:
         04:8c:40:85:dd:3b:cd:6c:7c:0e:52:0e:8c:b8:84:9a:6b:a9:
         9d:b3:08:56:b2:15:c8:c7:36:64:4c:ae:4e:20:22:11:f7:58:
         b5:05:81:02:13:c8:d9:4a:c5:af:c7:d8:b5:e2:eb:6d:21:7c:
         9f:7d:43:3e:12:73:15:8a:fa:f1:b7:12:0a:77:a7:6f:ee:e6:
         9f:fa:83:93:b8:38:5a:30:dc:23:83:10:fd:a1:af:ec:20:32:
         7b:78:ed:b4:e3:2a:4d:36:13:e1:a4:ee:18:da:db:0a:b3:da:
         17:f2:11:ba:7f:e1:7a:16:f7:e8:0f:14:ce:55:96:fc:6e:21:
         87:1f:fa:9b:03:23:37:21:90:7f:4f:6c:d8:85:38:b1:ec:72:
         88:fa:9e:f1:c9:c7:d5:43:05:3e:5a:76:a6:f8:3e:fc:ea:c6:
         8c:bd:24:29:02:6b:f5:f0:c2:a5:ed:58:fc:97:e9:7e:8c:93:
         e0:64:49:4d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:17:01 2026 by rpki-client