Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f68dd099-aa8e-4399-88fc-6d8848cf3dcb.roa
File:                     f68dd099-aa8e-4399-88fc-6d8848cf3dcb.roa (raw, json)
Hash identifier:          K9ZUUSfJUi24uO7kY+ef286iKmfZNmtfE+K8Y60kY68=
Subject key identifier:   55:24:C3:DD:65:EC:F2:EA:24:86:FC:ED:69:64:F8:1E:45:DD:6B:DF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       051279C6E2C75BF233D4DE120BFD56295DABEEDD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f68dd099-aa8e-4399-88fc-6d8848cf3dcb.roa
Signing time:             Sat 16 May 2026 01:40:53 +0000
ROA not before:           Sat 16 May 2026 01:40:53 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f16:c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:12:79:c6:e2:c7:5b:f2:33:d4:de:12:0b:fd:56:29:5d:ab:ee:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 01:40:53 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=58e65d26f23560c6ecb02ac27f0088d5bf24358de55df87b9c585e08bfc103b5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:eb:f7:e3:a6:07:74:12:df:15:bc:01:4d:ee:
                    df:ed:2d:19:fc:47:7a:58:30:b9:7a:51:67:57:69:
                    c8:b9:63:49:2f:b7:ee:b5:b6:72:10:d3:2a:5b:e9:
                    bd:4f:f2:2d:4f:30:5e:20:36:ea:49:65:5a:3d:6c:
                    a4:6a:f2:cb:21:fa:d4:23:94:a4:d9:ef:ec:45:a2:
                    c8:3d:2e:4e:f6:02:47:df:af:e9:db:64:c0:ed:ca:
                    da:03:1f:a6:b1:fe:99:2c:60:c9:fa:bb:4f:b7:80:
                    fb:6a:84:8d:37:ad:f5:f5:1e:fd:ac:e8:a3:ce:c4:
                    ba:10:30:30:e9:4f:43:03:96:4b:ac:42:cb:5d:35:
                    57:4b:4f:77:de:4a:2d:85:28:63:c1:c5:4b:2f:c6:
                    bb:85:f1:12:12:f0:79:59:6e:1a:18:6e:4c:f4:9f:
                    56:30:c8:e2:85:83:f9:b0:2d:63:b2:d0:38:92:f3:
                    89:d5:c1:ca:3e:3a:67:8e:e4:9a:ba:0f:10:be:a9:
                    6d:f3:f4:9b:80:82:6c:f9:1d:60:52:70:93:ca:ed:
                    2a:56:f0:1d:7b:f5:8e:22:22:bd:27:af:89:90:96:
                    fc:77:02:16:5b:04:29:da:d3:25:d2:56:59:ae:07:
                    37:f3:d2:2c:66:64:c5:70:b4:50:d2:bd:32:3e:92:
                    ed:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:24:C3:DD:65:EC:F2:EA:24:86:FC:ED:69:64:F8:1E:45:DD:6B:DF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f68dd099-aa8e-4399-88fc-6d8848cf3dcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f16:c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         c9:b2:68:31:9f:54:e4:de:89:43:ef:9a:39:09:ce:d3:b4:df:
         7c:3e:9d:6c:77:60:01:7f:36:db:21:40:86:04:95:65:c6:31:
         25:77:5f:16:02:85:60:61:31:34:d8:fb:90:1e:8e:e2:90:51:
         5d:f8:97:33:4d:7b:5c:77:c0:c0:fb:e8:a9:3c:3a:f3:44:61:
         bc:7c:9d:a6:40:81:01:ec:b5:6f:c9:77:3a:7e:20:bf:90:1e:
         ce:53:6c:ca:e7:ed:8e:5d:e3:44:56:31:45:4d:f1:50:51:4e:
         67:01:da:5c:a8:4b:5d:2c:e4:02:bb:6d:67:c8:cd:77:2d:b8:
         2c:c7:f8:92:22:70:8c:f1:de:83:7f:39:d3:03:3e:0d:09:57:
         ec:5c:ab:48:7f:84:1e:c5:33:35:01:a5:3f:53:a6:83:e6:da:
         2a:1c:3f:d8:bc:1b:26:8c:43:76:6f:92:80:3d:4d:21:ff:d4:
         9b:9e:70:c1:bf:b9:e7:05:f5:d0:c4:86:6f:85:0a:60:07:db:
         93:79:b7:e0:b7:60:f2:95:b5:d6:3c:fb:1c:32:b2:d6:61:68:
         9b:93:72:ef:e1:0d:30:d0:53:ae:b1:e6:9a:52:28:60:29:91:
         f2:86:9a:88:20:9e:f3:1c:57:bf:15:86:38:6e:05:be:a8:58:
         42:7b:ea:85
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:29:58 2026 by rpki-client