Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cded8a53-331e-4222-98ba-f51a70d8a17d.roa
File:                     cded8a53-331e-4222-98ba-f51a70d8a17d.roa (raw, json)
Hash identifier:          GaW75IsJiW0dWH2PBFYHedQvaHxHrdxuzskXGY6mThY=
Subject key identifier:   27:91:B1:7B:B5:E5:08:47:F1:1E:D7:12:B9:27:88:B4:6B:F1:31:25
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3638423064CA7D128DD9112C63111A0BD013199A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cded8a53-331e-4222-98ba-f51a70d8a17d.roa
Signing time:             Sun 31 May 2026 00:40:11 +0000
ROA not before:           Sun 31 May 2026 00:40:11 +0000
ROA not after:            Sat 29 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fe9:1080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:38:42:30:64:ca:7d:12:8d:d9:11:2c:63:11:1a:0b:d0:13:19:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 31 00:40:11 2026 GMT
            Not After : Aug 29 23:59:59 2026 GMT
        Subject: serialNumber=8127b82aacd381db8fb701264deb205889332523450f0a449b399caf6403ec1c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5f:78:c4:bc:a6:3e:39:68:d9:d2:32:7d:82:
                    5f:44:d9:06:1e:03:d5:62:e2:fd:0f:bc:dd:ca:3d:
                    91:ac:e7:a4:9b:89:d4:15:4f:68:db:ec:e0:0c:ae:
                    16:23:ea:c8:da:1f:3a:01:b5:b5:31:2d:c9:0e:c8:
                    7e:26:6e:e9:62:a7:13:7a:29:37:0d:ff:34:e6:96:
                    ef:3e:e4:2e:e6:14:4a:a5:41:64:0f:70:5c:7d:2d:
                    e1:47:6e:d7:ef:36:d9:95:0a:cb:4c:93:d0:03:cc:
                    b0:5d:78:df:77:8a:43:de:48:96:9f:c2:73:5d:fd:
                    7b:87:38:0d:c8:04:2f:a3:ef:7e:1f:70:aa:8a:bc:
                    1d:64:30:13:c9:ae:4b:6d:4a:50:ec:b1:b3:66:59:
                    74:1d:c4:f4:eb:e7:5e:c8:29:fc:ca:d3:99:e0:43:
                    b6:8f:6c:64:55:bc:d4:81:70:8c:fd:0c:af:f5:30:
                    d2:72:0e:1a:14:7a:a3:cf:39:c8:9a:be:c4:99:80:
                    7a:a5:d9:1f:e0:29:dd:4d:77:7f:ce:6d:2d:4b:5d:
                    ff:d5:a4:a2:e5:34:70:fb:1a:d8:42:e8:86:8f:af:
                    05:ac:73:3c:c2:1b:6e:8f:0e:d0:93:72:76:b6:f9:
                    ef:8b:2c:b3:3e:1f:af:f3:60:09:07:e6:ad:02:17:
                    1c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:91:B1:7B:B5:E5:08:47:F1:1E:D7:12:B9:27:88:B4:6B:F1:31:25
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cded8a53-331e-4222-98ba-f51a70d8a17d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fe9:1080::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:94:12:74:3d:5d:d6:de:65:3e:1c:b9:a7:04:7a:34:f1:8a:
         da:da:34:66:20:b4:2b:fc:bc:b4:4b:93:f6:b8:40:e3:cb:4e:
         49:8a:93:bc:ea:69:5a:77:2e:72:69:48:85:3f:b7:1f:c0:f9:
         85:b3:ae:7c:33:1b:21:6e:20:f3:86:eb:6e:01:b6:21:73:59:
         26:3d:17:fb:48:a8:1a:27:b6:ba:43:e6:20:80:11:2d:40:7f:
         ba:82:1c:94:a8:aa:6b:9c:ff:c8:fd:bf:38:61:66:35:04:4a:
         30:d2:10:ff:e6:0e:e1:f6:6a:71:18:d3:f5:48:bb:16:48:b1:
         0d:79:0e:3b:41:8e:4b:aa:74:3c:be:d0:3b:1a:56:d3:f6:6f:
         46:a8:8f:b7:29:c5:5f:4f:ae:24:39:10:89:ef:a3:94:54:3d:
         b8:6e:2f:17:a1:98:07:c3:b5:f0:3d:d6:d2:48:d8:8a:d6:cc:
         90:05:74:3a:75:01:2d:0c:fa:f6:95:7a:07:e5:50:e7:19:0c:
         48:f6:9d:f7:fe:96:4b:2a:9d:32:f2:2a:be:53:0f:20:d8:94:
         1f:51:05:4c:fd:75:6e:e5:8a:af:95:f5:52:d1:b4:cd:a5:f3:
         67:0e:f6:2b:96:f0:37:65:6d:d7:7e:79:66:13:0b:be:a6:61:
         dc:c7:95:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:03:31 2026 by rpki-client