Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/61d0f0de-c001-4ed4-8fa9-ee3d8430599c.roa
File:                     61d0f0de-c001-4ed4-8fa9-ee3d8430599c.roa (raw, json)
Hash identifier:          aGHVkKbJF3WN1Fb88meYw/o94BmPK+F+FNPYvVkM5e0=
Subject key identifier:   A2:45:BD:91:C1:8C:82:BA:E6:93:C9:23:E8:33:C2:D2:68:70:D9:16
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       6A15E2D27281674F811594EA78EEF2258F6F9465
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/61d0f0de-c001-4ed4-8fa9-ee3d8430599c.roa
Signing time:             Fri 29 May 2026 13:47:16 +0000
ROA not before:           Fri 29 May 2026 13:47:16 +0000
ROA not after:            Thu 27 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:8380:ff00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:15:e2:d2:72:81:67:4f:81:15:94:ea:78:ee:f2:25:8f:6f:94:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: May 29 13:47:16 2026 GMT
            Not After : Aug 27 23:59:59 2026 GMT
        Subject: serialNumber=54b51bebe55d47033f77c165beed2c2805b49394b738bd1ed735c4f223aa6a5e, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c5:20:2f:36:23:a2:51:57:40:8a:88:e0:38:
                    05:29:f9:7e:32:84:e3:36:bb:c4:4b:a1:36:f5:bb:
                    38:87:c6:4e:be:80:27:d2:16:af:ad:20:20:a8:d2:
                    65:5c:99:7f:7f:97:1c:74:a8:d1:52:62:2c:b4:9a:
                    83:95:47:2e:21:c1:78:2b:25:a2:8d:86:16:50:e3:
                    1f:3e:7a:d6:26:57:df:e9:55:30:82:c6:22:ad:fe:
                    9a:0d:82:c3:4f:b2:6e:ec:62:c7:52:f3:2d:3d:54:
                    99:df:bf:5e:e9:71:26:5c:b3:fc:af:11:8d:5b:ce:
                    07:4c:ff:6a:53:aa:b8:71:c6:44:c2:b8:47:d1:5c:
                    6f:40:d2:49:7d:0a:a7:cb:11:f4:f2:a1:9e:9f:aa:
                    db:56:fc:4a:be:84:e0:fc:e3:21:d5:d5:b1:c7:48:
                    4b:23:96:fb:4a:d6:fd:96:fb:40:90:f4:21:92:95:
                    92:ea:5b:71:1c:ee:f7:80:45:bc:ad:a6:bd:92:8a:
                    83:2f:c1:d0:74:d6:32:7e:81:f6:1a:f5:00:73:5b:
                    dd:a0:1a:24:94:73:f3:e8:f3:6c:8f:fe:1e:56:25:
                    60:7b:c1:51:34:5e:d7:74:82:b3:59:98:d7:2a:94:
                    2a:cf:96:2d:6b:11:0e:c9:3a:ff:48:6b:72:e6:74:
                    73:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:45:BD:91:C1:8C:82:BA:E6:93:C9:23:E8:33:C2:D2:68:70:D9:16
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/61d0f0de-c001-4ed4-8fa9-ee3d8430599c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8380:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         d4:6a:0c:92:eb:c8:c9:f2:37:a4:be:55:b9:05:e0:d2:60:5a:
         4d:e2:73:95:81:79:ac:30:d8:04:79:b7:0c:56:6a:dd:2a:a6:
         3c:b8:18:8d:1e:8f:02:ff:ec:fb:80:7b:ee:d2:f0:e2:a2:83:
         9c:87:fe:61:e9:d6:7a:4b:78:bc:ca:04:a9:ce:d7:d5:46:3c:
         3f:33:9d:93:4c:8b:44:a0:d3:26:8d:64:1d:64:89:27:44:d4:
         7a:06:8d:a2:1c:35:0c:86:16:ba:21:42:44:57:c2:a4:ee:80:
         ff:74:3e:41:6e:50:b4:36:24:95:b4:2e:d4:1c:c8:36:fc:b8:
         bf:ef:ca:d4:ad:60:99:9c:9f:13:4b:16:2f:ec:8f:b7:76:db:
         2c:82:7a:4d:85:cf:1e:35:1c:d8:7b:aa:2b:63:c3:e2:70:76:
         89:a0:73:b3:29:31:ed:0a:e0:f0:9a:e1:4e:4b:2f:81:0c:72:
         89:fb:84:3c:63:6c:bb:dd:2f:c0:bf:0d:71:89:6b:60:6c:9a:
         e1:64:21:66:56:a6:02:50:31:78:bf:45:f8:27:bd:bc:a1:aa:
         01:78:76:4d:8b:07:ab:ba:28:87:c7:66:d4:9c:ef:61:92:c6:
         90:73:3d:19:6e:34:a1:a9:de:f0:8f:fc:9e:82:b5:25:03:1a:
         86:15:56:6e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:40:48 2026 by rpki-client