Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8b02dd0-9caf-49fb-9ae0-dbf4f4db3b37.roa
File:                     f8b02dd0-9caf-49fb-9ae0-dbf4f4db3b37.roa (raw, json)
Hash identifier:          dMk3GjdeH27qtl0ur/7GpaoczH51EzKIrrUz6gTWKIE=
Subject key identifier:   C2:A1:B0:5B:75:8A:09:37:29:46:54:93:24:45:00:3F:17:85:64:EF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4E8041A91CAA490D25476748FC02DFB2A653C685
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8b02dd0-9caf-49fb-9ae0-dbf4f4db3b37.roa
Signing time:             Sat 16 May 2026 02:01:43 +0000
ROA not before:           Sat 16 May 2026 02:01:43 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:10c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:80:41:a9:1c:aa:49:0d:25:47:67:48:fc:02:df:b2:a6:53:c6:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 02:01:43 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=ac7260ace18bc89a1d007c8a74568b100a860a1481fae4af32522ee8584df3fb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e0:b7:69:47:30:c5:a4:d9:35:50:bc:b6:5d:
                    eb:84:77:be:ec:95:3d:78:88:38:b2:25:9c:79:74:
                    ec:7f:17:d7:7c:9c:16:ae:38:86:f8:00:68:2e:75:
                    b1:8f:d2:22:8f:49:e9:23:d5:ba:32:09:92:67:59:
                    7d:20:60:c8:c3:92:8d:b8:59:11:0e:ff:de:14:0b:
                    ab:38:42:b2:0b:54:3c:ba:2a:71:7c:ff:1d:d8:83:
                    8c:7f:1e:7a:0e:49:1e:a7:d7:4e:ac:41:b4:ff:e5:
                    26:27:e8:02:d7:28:a6:6f:60:9c:5d:86:8a:d6:d1:
                    7d:99:c5:aa:4e:ba:b5:69:c5:07:36:3d:7d:2a:62:
                    91:58:33:2a:cb:db:d2:e2:65:73:52:17:ad:0f:2d:
                    11:91:7f:9e:78:12:c3:db:87:55:61:72:36:f0:f3:
                    cf:2e:ee:0f:a9:37:5e:6a:c7:9a:dd:94:04:b0:9e:
                    e5:7a:0b:cf:2a:0b:94:da:d0:76:47:d1:4b:27:28:
                    26:d3:d0:11:19:a0:f1:d1:97:91:dc:35:fd:95:7a:
                    6a:1f:e6:72:22:df:24:f6:a7:24:da:30:59:a8:7a:
                    a3:38:39:3c:44:29:86:9d:e9:6b:c3:bb:f7:1c:1f:
                    ff:e0:8a:0e:9a:e0:b9:b3:9a:b5:d5:b9:31:dd:b3:
                    d3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A1:B0:5B:75:8A:09:37:29:46:54:93:24:45:00:3F:17:85:64:EF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8b02dd0-9caf-49fb-9ae0-dbf4f4db3b37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:10c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:f4:ea:28:3e:0e:ab:e9:43:4e:f4:a7:93:10:b6:a6:cf:28:
         b8:e6:dd:d1:3f:7f:48:8b:e2:6d:5a:17:f8:86:2f:34:cd:1c:
         99:4c:1d:ad:b6:f2:bc:5a:4b:38:b8:b5:47:4c:dc:23:18:71:
         37:1a:1d:7c:6f:cc:45:9d:06:c1:3f:2e:ba:57:f8:7f:64:a3:
         e8:28:49:f9:67:57:88:85:6e:f2:d4:e7:3c:11:b8:7c:2e:5d:
         f4:63:72:ed:83:8d:05:54:61:c8:00:a8:67:bc:40:e1:25:b0:
         72:63:e3:7b:e3:d8:b6:57:d2:01:b1:f6:80:b2:85:54:94:46:
         b8:5a:2b:bc:75:02:65:81:fb:c9:bb:a6:21:94:61:eb:c0:a6:
         31:42:a2:95:8c:dc:88:a0:b3:e8:f2:5d:d6:40:78:14:33:ef:
         23:1b:46:0b:5c:78:18:f4:4e:6d:ae:d7:9a:c7:e3:fc:64:15:
         86:86:ae:fc:7e:e4:ca:1e:81:90:cf:f6:72:fc:42:29:a1:ee:
         c5:74:e1:50:93:59:86:d6:79:35:02:25:f1:3d:0a:0f:38:11:
         b4:96:18:1c:a9:3b:5b:92:b8:8a:a3:fa:42:dc:32:7b:fd:ea:
         21:d7:dc:7e:c6:41:22:92:f4:6c:fd:ef:4b:78:64:af:07:f1:
         f7:87:5c:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:46:13 2026 by rpki-client