Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d36c105f-a6e4-4f3a-abcb-daaff54b5e73.roa
File:                     d36c105f-a6e4-4f3a-abcb-daaff54b5e73.roa (raw, json)
Hash identifier:          nNeMF2PM/Cvar3ET4C+i1mq1GnV7kqrWGQoByKGs98c=
Subject key identifier:   75:A2:5D:10:D5:76:13:30:90:AC:C3:FC:A2:AE:48:AF:87:54:E1:6A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4F6FD92E75DC5F44732A91A6EE489D21047F9294
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d36c105f-a6e4-4f3a-abcb-daaff54b5e73.roa
Signing time:             Sat 16 May 2026 00:40:05 +0000
ROA not before:           Sat 16 May 2026 00:40:05 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f1c:c800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:6f:d9:2e:75:dc:5f:44:73:2a:91:a6:ee:48:9d:21:04:7f:92:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 00:40:05 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=16a7b540789c6e10877395b858a86dd0aacd4e008aa4870e1f76027e8e5fa5d4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:11:30:aa:0e:33:8a:f9:e8:46:f6:26:e2:d2:
                    78:e4:1a:5f:cf:ee:da:39:90:92:22:4a:80:f4:ff:
                    0d:f0:28:46:a5:e2:50:4b:0a:09:74:93:df:09:57:
                    82:bf:d6:9e:7d:f4:ef:95:de:bd:71:b6:59:34:91:
                    5d:70:41:d0:21:82:dd:bd:f8:2d:02:33:2a:22:96:
                    31:d2:04:0b:5c:d6:8c:59:70:5e:3a:7f:4e:a7:bd:
                    48:89:f2:f1:ed:a3:9d:04:8f:cc:c3:14:73:43:43:
                    fc:91:81:23:9e:d1:d6:4a:24:ba:d2:93:0b:2d:8a:
                    6e:9a:1b:65:d4:e0:68:bb:22:7e:da:d0:d8:9d:a9:
                    b8:09:c2:84:54:0b:8f:fa:2d:45:2d:73:9a:b5:8e:
                    7d:4b:8e:b5:2f:a5:bf:17:cf:6c:ef:df:7b:52:81:
                    5f:1d:58:cd:77:4c:d5:5e:0d:9f:66:ab:5b:f9:df:
                    95:ee:6f:3e:53:25:fe:ae:25:1c:14:bf:b8:71:52:
                    46:be:f5:e5:a9:4d:71:66:a9:17:b8:9c:74:57:9c:
                    ce:11:14:30:c2:a4:e0:63:96:f8:be:46:86:ca:08:
                    6e:26:f1:92:37:78:65:3f:b9:c3:70:3a:86:41:e2:
                    9d:f2:c6:cb:c1:32:b8:ae:fe:8d:a2:54:06:22:bc:
                    15:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A2:5D:10:D5:76:13:30:90:AC:C3:FC:A2:AE:48:AF:87:54:E1:6A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d36c105f-a6e4-4f3a-abcb-daaff54b5e73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1c:c800::/37

    Signature Algorithm: sha256WithRSAEncryption
         13:96:e8:5a:6d:90:9a:a6:33:62:5f:f2:4b:1c:f5:ba:10:91:
         af:fb:d7:11:a6:be:e3:a4:b0:45:ae:09:cb:28:2a:e9:bc:fa:
         10:d4:27:3b:b4:3a:1c:53:46:0c:d3:47:e3:ec:d1:20:9b:c6:
         1a:e3:61:ce:ca:f7:76:0a:5d:e8:46:11:db:5f:83:48:26:41:
         14:7f:ed:52:85:25:fe:c2:40:12:fa:e6:db:7e:ea:31:aa:6b:
         7a:d2:6b:50:3e:b5:19:f0:ad:ca:db:4a:5e:21:19:9a:ad:d9:
         4f:5d:20:66:4b:d2:9d:b5:1d:3d:35:35:fe:98:be:71:c5:1e:
         e0:96:50:93:e9:dc:d5:39:e8:1a:c0:35:1b:3f:fa:4b:94:f1:
         1e:67:31:30:23:b0:78:94:b1:2e:08:16:0e:36:27:92:8b:bb:
         d3:f3:fe:71:55:82:51:11:69:c2:95:38:c4:ca:28:a5:6a:ee:
         2f:0d:97:f2:89:75:69:d3:f7:6e:2f:71:50:1b:f4:c8:05:fc:
         5a:5a:12:67:38:6e:f1:f0:6b:33:85:f2:0d:2e:18:cb:e4:12:
         e4:56:f1:44:4e:2f:ea:fd:db:c9:4b:79:a6:ef:70:94:cd:f4:
         87:c5:ac:da:38:bb:a0:fc:89:f9:03:d2:f0:21:28:1c:0e:c9:
         5c:5e:c3:9a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:06:24 2026 by rpki-client