Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c372d4d9-f2d8-4df5-948c-ba5fcb84043b.roa
File:                     c372d4d9-f2d8-4df5-948c-ba5fcb84043b.roa (raw, json)
Hash identifier:          cl/V2LlHtauksHGOBzr4kS9Tdv7lEHmON3G5HziLias=
Subject key identifier:   A1:7C:88:4C:F1:56:94:E2:BD:75:AD:68:56:FD:75:4A:24:20:83:CC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       78BCD278F37BF6C47726F80FB0780E0C4D724DA0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c372d4d9-f2d8-4df5-948c-ba5fcb84043b.roa
Signing time:             Fri 15 May 2026 01:11:23 +0000
ROA not before:           Fri 15 May 2026 01:11:23 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:60c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:bc:d2:78:f3:7b:f6:c4:77:26:f8:0f:b0:78:0e:0c:4d:72:4d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 01:11:23 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=64825d0fef459a4d4a417e24b43e4f1deec70ec1a8512c9d9354015fc3924942, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:84:72:ed:ea:10:56:23:a5:5f:84:d2:f8:d7:
                    7f:d0:a0:92:9a:0b:d0:d2:7a:36:f0:20:2c:41:57:
                    c0:ad:71:24:aa:f3:de:b5:6c:9c:76:1a:28:a3:dc:
                    ed:c5:39:bf:18:17:24:ac:10:4e:f4:a2:9c:08:61:
                    21:f3:f5:ad:ac:3a:7c:98:35:51:56:19:0a:ff:cb:
                    12:13:7e:c2:1b:d3:40:a1:97:97:17:85:7b:da:b0:
                    a8:85:79:f1:a3:c6:76:64:b5:be:71:fa:1b:89:b9:
                    21:10:3a:40:f8:cf:0c:75:b2:67:ee:3d:1d:45:31:
                    3c:f6:02:22:5f:78:3d:14:6a:d3:b9:9a:d0:65:c2:
                    6f:0c:4d:56:5d:aa:ed:21:9a:37:98:b6:09:8b:ad:
                    72:81:81:88:20:6b:34:33:72:c8:c9:eb:ac:98:13:
                    97:80:1d:f2:57:e4:02:95:43:66:8a:89:88:2d:59:
                    24:71:4f:a1:26:d9:93:d8:00:49:15:35:83:5c:eb:
                    9a:fb:9e:d1:92:ef:c3:9c:73:8b:ea:67:b9:86:88:
                    14:d3:12:f0:f0:b7:61:2a:5a:86:ec:7f:ad:61:c7:
                    bc:f7:0c:a2:95:e9:11:54:b9:b2:80:65:01:bb:f8:
                    cc:64:8a:d8:c3:45:82:92:39:84:92:4b:a5:8a:5c:
                    9d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7C:88:4C:F1:56:94:E2:BD:75:AD:68:56:FD:75:4A:24:20:83:CC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c372d4d9-f2d8-4df5-948c-ba5fcb84043b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:60c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:2a:d8:54:b6:1e:ff:72:19:59:7f:85:8f:c8:4f:73:b1:15:
         5d:33:64:a0:4d:5b:ff:20:e0:2c:11:5c:4d:2b:46:85:64:14:
         ad:5e:84:34:cd:dd:8a:72:cc:b0:f4:b8:26:7e:d7:29:ce:b9:
         d1:99:0f:d4:fa:9a:81:a1:f0:d8:a8:50:cd:39:21:8b:69:b1:
         80:f6:59:e8:e7:69:63:18:99:ef:95:6e:21:da:18:2d:e6:e0:
         2c:59:5a:94:ec:13:6b:ee:45:a5:1a:d1:6b:8e:a7:52:f9:63:
         d2:59:c3:a6:a1:81:ca:ec:58:30:7e:72:8b:a1:1f:59:f3:56:
         6f:65:75:70:0b:1e:f1:39:3d:97:dc:e6:36:cd:01:5d:83:a4:
         09:26:e7:c6:b1:98:2d:e6:99:18:65:83:24:04:d5:c9:74:3d:
         a6:1b:e6:a7:1f:0f:70:aa:65:12:16:e8:a9:33:ce:1e:86:08:
         37:ac:11:c1:5c:56:db:d6:cf:4d:4f:82:14:8e:df:3e:eb:4f:
         5f:19:e4:e5:03:83:40:80:09:af:a7:06:a8:ff:4f:6a:30:81:
         b6:b5:74:34:cf:f7:80:0f:1a:63:2f:eb:f0:cd:22:b9:f0:19:
         37:00:a9:c8:ba:cb:c3:b3:b2:1b:e2:e5:59:7c:1c:03:6e:a4:
         7d:b5:74:11
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:01:10 2026 by rpki-client