Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4f81df6-28a9-4d7b-9cda-d786edb4af94.roa
File:                     f4f81df6-28a9-4d7b-9cda-d786edb4af94.roa (raw, json)
Hash identifier:          PoKIk9RoleYIJcPRPd9bmPEvHDAh72F85j63dE4UK5c=
Subject key identifier:   74:18:B5:2A:C8:94:26:98:3D:D3:F4:13:74:FD:82:3A:A0:CB:4B:91
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       384FC076F2F53DE9EE4C3E719C01C2FCE9FDC613
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4f81df6-28a9-4d7b-9cda-d786edb4af94.roa
Signing time:             Sun 07 Jun 2026 00:00:04 +0000
ROA not before:           Sun 07 Jun 2026 00:00:04 +0000
ROA not after:            Sat 05 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4f:c0:76:f2:f5:3d:e9:ee:4c:3e:71:9c:01:c2:fc:e9:fd:c6:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  7 00:00:04 2026 GMT
            Not After : Sep  5 23:59:59 2026 GMT
        Subject: serialNumber=4ce00b3d6f3565f4cc3a7bcb87de755ee4a1b07d22bcc2b706c0aac6fecb9166, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8b:53:a9:85:ee:b6:45:0c:ed:04:1e:c7:41:
                    51:2b:81:97:50:90:ea:e5:92:6e:1e:8f:7b:a8:12:
                    9b:13:d1:2a:16:09:d2:48:9a:01:c6:1c:d7:45:f8:
                    e3:a7:dc:04:19:cd:51:68:10:32:ed:3c:25:30:7f:
                    93:1e:65:76:95:b5:39:52:14:4d:35:52:67:29:53:
                    b3:19:45:da:16:48:9f:c9:5f:36:47:db:84:fc:f1:
                    25:22:fd:66:35:c2:fd:76:d6:40:dc:74:eb:20:bf:
                    55:bc:94:c0:ac:e8:83:8f:e1:73:ee:30:56:38:4f:
                    82:a9:c7:6c:c4:5e:00:5a:d2:a8:a5:d2:85:ec:08:
                    3d:a0:22:a8:0e:c4:3a:b8:96:b7:24:04:55:3a:31:
                    c3:d6:d3:2e:c3:26:a8:49:5b:11:97:ad:38:cc:30:
                    ce:60:c2:db:ae:51:5a:e5:c8:ff:8d:9b:64:0f:30:
                    ed:f3:d5:af:16:8a:44:7f:15:cd:51:d6:a4:03:cf:
                    d0:05:b9:9d:10:ac:29:f2:26:40:c7:bd:59:22:74:
                    22:8a:90:03:70:59:a3:b9:9b:ba:b9:e5:28:da:a9:
                    81:57:22:20:ed:d7:72:ee:8d:4d:9d:c3:be:9a:2a:
                    1d:7f:3a:30:ac:b9:e6:19:5d:bf:a9:73:4e:c0:6f:
                    23:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:18:B5:2A:C8:94:26:98:3D:D3:F4:13:74:FD:82:3A:A0:CB:4B:91
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4f81df6-28a9-4d7b-9cda-d786edb4af94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:3b:c9:1a:2e:0b:1a:b1:33:23:98:f5:c3:24:5d:10:e5:8c:
         d0:1d:f0:27:3e:75:a6:51:8c:c1:bb:e1:5d:0f:af:37:86:df:
         b6:a8:df:ab:07:6c:d9:e1:8a:b7:96:07:b1:9a:f9:d1:2e:05:
         85:cf:78:e0:81:ec:6c:48:29:0d:19:12:de:4e:1d:48:fc:ec:
         95:c1:18:b3:26:0f:fe:89:12:40:c6:4c:42:08:e6:e6:2c:cc:
         ae:f9:2b:54:3f:ab:c0:6c:93:ac:67:f2:8a:25:d7:93:9d:9b:
         6e:19:24:97:f9:1a:36:81:bc:f3:c9:b9:5f:1b:16:f9:9a:69:
         35:19:ee:62:04:de:fa:55:ed:0f:56:5a:14:2e:6c:7e:f7:1e:
         35:8a:66:d7:31:d5:08:9a:cf:e5:3f:95:7c:1d:54:ef:1b:3e:
         b1:95:2d:e1:a6:29:cb:5f:05:9d:e3:8c:a8:15:ca:22:65:48:
         a2:43:3f:4c:ff:11:a5:3c:8b:f6:8b:32:20:7d:d9:1a:94:78:
         9f:b5:e6:7f:f3:7a:f9:15:25:88:94:b9:36:81:b6:17:9e:e2:
         d8:aa:a3:a4:21:83:7d:bb:ac:3b:5e:b2:e1:17:95:b3:d6:f3:
         e9:e9:c8:e1:37:ed:1b:04:c3:06:fc:72:bf:f4:14:a7:51:8e:
         6e:4d:d2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:48:01 2026 by rpki-client