Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eec3b6ff-2d5c-4b73-9a62-0d3cfa7e1f24.roa
File:                     eec3b6ff-2d5c-4b73-9a62-0d3cfa7e1f24.roa (raw, json)
Hash identifier:          TZGwQB6GA70zj+JWOOSpeXrMJWznp1IQhk6N+isnSNQ=
Subject key identifier:   7C:D5:CE:C4:F2:FD:66:3E:8A:2E:5A:E0:57:93:B4:1A:EE:F6:18:8D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1DC0FF19758390A9D0EA18C45D7A13EAC6008B20
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eec3b6ff-2d5c-4b73-9a62-0d3cfa7e1f24.roa
Signing time:             Tue 07 Apr 2026 21:51:53 +0000
ROA not before:           Tue 07 Apr 2026 21:51:53 +0000
ROA not after:            Mon 06 Jul 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff1:8200::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c0:ff:19:75:83:90:a9:d0:ea:18:c4:5d:7a:13:ea:c6:00:8b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  7 21:51:53 2026 GMT
            Not After : Jul  6 23:59:59 2026 GMT
        Subject: serialNumber=5ee735746b1895174f68486be48e788e44c2a59718ba4202f992b8fc6fd37362, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b3:68:a3:63:9a:79:33:07:10:8f:ad:c6:d0:
                    b9:48:23:82:f1:3b:5d:a5:8e:ed:42:af:79:55:ee:
                    7b:07:4e:11:ef:d0:ff:fc:03:f0:39:4d:dc:7f:9c:
                    e9:06:9d:de:63:6b:b4:ff:6f:dd:36:75:b2:ad:6c:
                    89:b3:b0:51:84:90:27:d0:64:c8:26:44:52:11:97:
                    98:2f:30:74:d9:57:7b:57:6a:34:98:8b:d1:de:6e:
                    91:3d:69:11:ab:1d:51:7f:e3:8e:b2:fc:d2:26:41:
                    8f:3c:ff:4e:62:a5:2b:59:15:c0:36:d8:c2:f8:c2:
                    34:5f:55:d0:5c:48:76:2e:e4:ad:82:27:84:57:7b:
                    d5:c8:cc:54:af:2b:34:07:84:03:12:50:4e:59:4c:
                    b5:a9:98:f4:b2:ed:a4:16:9e:8d:8e:c3:1f:36:e7:
                    bd:f8:be:85:f3:37:d6:aa:cc:c2:54:2c:d6:97:5a:
                    dd:87:22:9d:97:2a:80:da:7a:d8:7e:1a:1a:65:1d:
                    0b:d6:85:e5:64:da:b2:b4:99:75:01:97:02:ed:d0:
                    68:57:af:ac:31:42:e0:4e:1f:86:7c:22:91:81:2e:
                    b2:64:92:56:6e:f3:db:d4:2d:c2:8a:73:a2:10:3c:
                    96:67:6a:77:15:fa:9b:62:e1:df:be:36:15:eb:b4:
                    77:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D5:CE:C4:F2:FD:66:3E:8A:2E:5A:E0:57:93:B4:1A:EE:F6:18:8D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eec3b6ff-2d5c-4b73-9a62-0d3cfa7e1f24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff1:8200::/39

    Signature Algorithm: sha256WithRSAEncryption
         ab:d6:12:1e:1d:60:5c:2e:26:5b:da:a5:d0:e5:63:35:be:a2:
         ed:0f:80:63:f6:06:54:17:fb:de:d5:0d:3e:3a:dd:06:eb:4a:
         c3:9e:fc:dd:6d:50:d9:d7:c9:84:3d:9a:34:f1:7c:1e:83:bc:
         da:e1:b1:c0:0f:f1:8f:13:a4:ae:df:62:9e:53:30:d0:fd:cc:
         59:ca:8e:df:62:2f:98:04:a5:cc:0f:d6:47:84:5a:2a:36:ae:
         2d:3d:fc:30:6f:91:f0:20:02:e2:63:e6:eb:2a:3b:2b:4c:69:
         91:bb:b3:fe:bb:d3:8d:dc:a1:5a:3d:2d:b5:62:5b:12:68:cb:
         1d:9c:dd:12:e6:c9:54:a6:69:08:7a:e8:c0:15:26:9d:d9:76:
         1b:b1:c5:2a:ec:4a:c0:21:9b:b1:2f:cb:d2:35:ab:39:d2:a6:
         fc:91:6b:76:b8:5c:37:e8:5c:c3:22:58:01:b9:1c:1a:0e:ea:
         a4:e7:82:74:af:b7:fd:49:e6:af:db:9a:27:75:1e:9a:13:8a:
         a6:eb:c6:d4:85:26:de:96:f3:76:02:49:5c:8a:65:fc:a9:fe:
         6d:42:63:44:5e:51:fe:61:6c:82:10:ae:18:98:d2:94:93:f2:
         20:d2:01:b2:23:87:a6:91:db:26:42:f7:57:f1:16:b8:90:6c:
         8e:fb:2d:8a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:57:57 2026 by rpki-client