Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4d32ff3-a127-4080-a68b-176b3e75ad32.roa
File:                     c4d32ff3-a127-4080-a68b-176b3e75ad32.roa (raw, json)
Hash identifier:          T7LvdQBFk2HjOulSUlvUNL1Ak2J6CBs17fk4vhxy2EI=
Subject key identifier:   83:78:23:AC:49:5E:24:C4:56:39:C6:68:9A:C9:53:B7:75:67:04:C4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31BC27CDA25863EB0D1A53AF85F833CA703D700B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4d32ff3-a127-4080-a68b-176b3e75ad32.roa
Signing time:             Fri 15 May 2026 00:30:51 +0000
ROA not before:           Fri 15 May 2026 00:30:51 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ffd:803f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:bc:27:cd:a2:58:63:eb:0d:1a:53:af:85:f8:33:ca:70:3d:70:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 00:30:51 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=ada78b6b42b11f155bcff8e6baad6125be36c461861b7e0689cccd957444f539, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:51:d6:74:a8:93:67:f7:67:dd:e8:f5:4d:e9:
                    7c:7b:20:e5:c8:ea:84:09:26:7c:c7:01:4f:ec:26:
                    a8:94:7c:12:50:e6:a3:cb:18:e8:15:c0:54:d5:2a:
                    59:69:4d:7a:60:15:b5:c0:82:6d:9a:9a:49:bd:d6:
                    50:4d:28:93:77:e5:b1:9b:ee:20:ae:2e:06:8c:a3:
                    30:c7:90:af:f7:54:ce:91:9a:7b:be:df:b0:02:16:
                    05:c6:c7:27:e8:7c:52:ef:f6:e7:c3:0a:92:85:3d:
                    7a:b8:2e:82:89:12:c0:37:43:c2:44:21:ba:9e:ae:
                    e7:5e:f8:2f:6f:ff:68:6c:47:0a:03:b6:30:12:f4:
                    34:4d:3c:22:1b:3c:52:4e:70:94:43:a6:51:98:81:
                    03:54:51:6e:b8:76:8f:9c:62:93:9b:68:13:12:25:
                    29:c9:65:23:67:a1:42:d5:76:2d:aa:0c:0c:06:21:
                    83:d6:8a:41:f0:de:57:75:37:4c:7d:1e:f7:66:d8:
                    a4:3e:b5:95:1c:47:08:d3:7b:56:5e:1d:52:4d:3c:
                    56:30:e6:97:da:c4:2d:ef:10:ac:8b:78:ca:68:45:
                    8a:04:2d:f0:21:a7:e0:f7:d4:6c:58:08:f0:40:cc:
                    b1:04:60:78:bb:d7:d9:3f:69:db:0e:cf:df:4f:0f:
                    ba:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:78:23:AC:49:5E:24:C4:56:39:C6:68:9A:C9:53:B7:75:67:04:C4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4d32ff3-a127-4080-a68b-176b3e75ad32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:803f::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:3f:31:f4:62:55:5c:ea:f6:99:34:73:06:e5:c9:d9:65:ec:
         b1:e2:60:33:39:95:09:0d:5a:0b:0f:95:87:63:55:d5:69:0f:
         30:ec:a1:46:4d:40:99:88:4d:dc:64:48:e6:3a:57:0a:1d:51:
         f6:e1:5f:91:1b:d0:ca:ed:03:a9:54:eb:56:de:4a:74:ef:de:
         49:f4:38:16:27:eb:70:23:0a:fa:50:50:9d:d2:05:35:6a:6a:
         65:5d:89:e0:8f:45:98:67:66:6f:01:8a:9a:05:4c:aa:2b:33:
         cd:fa:da:79:bc:b4:76:e6:ca:aa:a0:af:7e:8d:6b:c4:b5:69:
         3c:3f:3e:9f:68:41:9c:3d:be:a4:9e:b7:7d:37:52:04:b3:c5:
         d5:23:51:a8:71:05:80:3d:3b:75:db:66:37:7a:3e:ca:f8:4c:
         76:90:cf:ae:a7:89:9e:ee:f7:58:e0:f3:92:b0:55:a2:41:41:
         2f:a8:41:10:7b:1b:ab:a7:93:e7:21:a3:be:36:95:9a:86:8b:
         0b:e6:0b:50:2c:f2:38:5f:e0:2d:21:3e:60:59:2a:49:1c:b7:
         d2:ab:d0:33:c6:6a:70:99:bc:5f:07:04:3b:15:4b:3a:3e:c0:
         ed:76:43:0a:52:f8:f9:d3:07:33:0e:bd:38:cf:43:24:50:c5:
         fa:f9:9c:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:08:52 2026 by rpki-client