Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f56aa63c-67db-4518-aeee-efccbf734161.roa
File:                     f56aa63c-67db-4518-aeee-efccbf734161.roa (raw, json)
Hash identifier:          Xi+nRrY8S+OlxzmUkzc0K2C1cKw0iDA4uVTdi1VNAQo=
Subject key identifier:   DD:0E:14:A5:94:F3:E0:01:68:C1:7B:B5:EA:2D:BD:3F:27:FB:1E:8A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       308AA51467CFD55FBA4872FC6E51176C4FB625C4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f56aa63c-67db-4518-aeee-efccbf734161.roa
Signing time:             Fri 22 May 2026 16:36:02 +0000
ROA not before:           Fri 22 May 2026 16:36:02 +0000
ROA not after:            Thu 20 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fe8:8010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:8a:a5:14:67:cf:d5:5f:ba:48:72:fc:6e:51:17:6c:4f:b6:25:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 22 16:36:02 2026 GMT
            Not After : Aug 20 23:59:59 2026 GMT
        Subject: serialNumber=97a8e8f91a17c0d60a00755a92fcf92ceb65a5796975915ebd198dbc47114c09, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f8:19:95:08:d1:dd:42:b2:35:2e:aa:09:e3:
                    6c:23:99:01:ca:6a:a4:da:da:c1:a7:f2:4a:80:e6:
                    7f:2b:43:f2:61:9b:12:6c:c5:40:6b:27:ff:bc:56:
                    2c:a6:f1:bb:99:ea:6b:e7:b8:6e:4e:c2:b0:3d:00:
                    02:1a:45:1b:31:6a:d4:cf:54:fc:45:09:32:cd:8d:
                    73:7c:06:62:d0:bf:61:6b:2f:42:85:88:be:3c:aa:
                    b3:9a:51:14:e2:8a:36:e8:1c:f0:ce:ed:e9:36:04:
                    17:de:de:e3:ec:cc:8b:f6:ab:87:29:4f:07:d8:69:
                    86:51:73:18:4f:0d:1e:22:64:02:82:9f:47:6f:d4:
                    1d:d0:18:45:63:cd:dd:2f:ca:bd:c6:f6:e0:a8:6f:
                    b3:da:83:20:0d:ff:96:84:97:8e:1a:f7:94:03:bb:
                    68:93:43:e9:3d:bf:4d:54:eb:cf:27:68:2e:fc:2d:
                    0d:d1:d9:58:c8:0e:b0:45:dd:18:dd:d9:1d:32:fb:
                    14:01:95:b1:50:86:3f:7d:66:66:99:3a:88:20:77:
                    05:dd:8b:bf:c4:c3:83:9d:bf:56:6e:c5:96:f3:61:
                    48:24:73:c2:f8:f7:29:3e:cd:6b:dd:8e:48:e4:3d:
                    53:6d:67:61:5f:9c:94:dd:c1:5c:fe:95:09:d9:e1:
                    00:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0E:14:A5:94:F3:E0:01:68:C1:7B:B5:EA:2D:BD:3F:27:FB:1E:8A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f56aa63c-67db-4518-aeee-efccbf734161.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fe8:8010::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:e3:ba:a1:58:52:e0:b1:51:c3:d4:bf:58:bd:66:ba:5b:30:
         d0:4d:4b:48:89:81:90:f4:46:8b:5d:e4:8f:39:92:45:a5:8c:
         8f:9a:41:b8:41:68:8c:de:cc:14:5d:6f:94:5f:7c:4f:82:f9:
         9f:5d:90:09:dd:95:83:83:40:cb:d5:5e:29:78:54:45:aa:9b:
         ad:9d:87:61:ed:3c:3f:2b:d9:79:1c:8a:af:d4:48:47:b8:0d:
         16:dd:91:cc:69:26:5a:4c:6e:09:cc:0e:42:a4:5b:4d:4a:8d:
         97:9e:43:6a:53:8c:af:ba:51:0c:1a:a8:c0:30:0f:63:25:63:
         60:7d:62:ad:fe:d0:c4:9c:ac:c9:05:12:d6:58:71:a4:54:bc:
         4e:a0:32:a0:7b:fa:0c:25:5a:b9:ec:dd:dd:de:bc:49:d0:78:
         d7:9d:55:ee:f6:0e:4f:e7:52:d8:09:7d:03:b6:97:f0:70:e4:
         3c:28:d0:7c:5c:41:e5:91:aa:34:f4:cb:98:7c:b8:1b:e9:df:
         00:87:55:98:40:b1:3a:71:52:bd:78:bb:42:9f:4f:93:50:a8:
         59:e6:7c:81:dc:bb:42:c3:1d:4f:7d:33:76:95:84:7a:41:ec:
         5e:d1:a5:88:ea:6a:80:8f:57:d2:4a:64:dd:fd:d7:19:e1:fa:
         c6:be:a6:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:25 2026 by rpki-client