Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa
File:                     a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (raw, json)
Hash identifier:          EySpKTnGTXRtqg/FT+5OU2qs4XWoKp6X7kyWjscJP/s=
Subject key identifier:   A4:E3:A0:F4:94:4E:18:E6:EC:AF:B9:E6:EB:74:E4:9A:FE:2E:A7:B3
Certificate issuer:       /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial:       66CCE0DBD6CF633285B44863D88A4D3BB8264397
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa
Signing time:             Tue 19 May 2026 00:20:04 +0000
ROA not before:           Tue 19 May 2026 00:20:04 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:c940::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:cc:e0:db:d6:cf:63:32:85:b4:48:63:d8:8a:4d:3b:b8:26:43:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
        Validity
            Not Before: May 19 00:20:04 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=1967f85fd3f6430858b38abb320ff3ac957e3629abbaebb1e37468b048e7960f, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:24:84:24:b6:0e:08:87:1b:96:7b:78:19:20:
                    9c:35:91:17:9c:74:95:81:22:aa:c3:52:c5:3e:d1:
                    68:1a:03:bd:cf:cf:c7:26:15:df:fa:ed:07:1a:87:
                    6e:98:d3:31:e1:3c:69:59:e8:49:80:93:fb:b2:95:
                    45:67:bd:00:44:06:01:f3:4e:d1:04:d6:a3:7e:7b:
                    26:79:81:28:f2:90:af:84:7b:43:8b:e3:24:ff:e1:
                    30:cd:9c:bd:3b:5a:f1:69:9e:ba:e8:51:25:be:eb:
                    77:43:9d:a9:2f:79:5d:49:19:20:ad:9c:15:af:17:
                    12:e5:57:64:33:fb:2d:14:12:1a:b2:72:b0:7a:31:
                    6b:81:b3:c6:ee:05:60:cb:0b:65:79:1e:63:ba:58:
                    09:1d:eb:c9:2f:9a:ba:73:e1:4a:61:10:80:d8:6c:
                    6c:a7:aa:06:f4:cb:2a:39:96:33:64:f6:5e:e1:1b:
                    73:83:e3:38:82:e1:9b:a9:c3:70:51:c0:4b:0b:ca:
                    51:97:a6:b8:01:5b:67:0e:ae:53:40:f9:71:07:1a:
                    05:a2:90:05:a1:53:3e:26:3a:e1:8c:4e:65:35:c1:
                    32:66:0d:3b:83:a1:24:ff:10:86:36:4e:16:f5:15:
                    32:2c:e6:eb:a5:66:5e:36:f9:a1:ea:82:3e:31:8c:
                    da:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E3:A0:F4:94:4E:18:E6:EC:AF:B9:E6:EB:74:E4:9A:FE:2E:A7:B3
            X509v3 Authority Key Identifier:
                keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:2c:92:1a:61:c2:79:5e:86:66:44:8f:3a:72:4f:7b:cc:72:
         e1:3c:16:11:b9:5f:b1:f7:ab:fd:e1:a7:70:fc:59:69:4d:73:
         32:27:4a:c9:50:04:d2:b3:01:13:0c:6b:fd:17:ab:70:30:02:
         15:4c:fc:02:b2:11:b1:81:7f:33:94:34:33:04:99:84:99:5e:
         8b:ed:2d:0e:2e:59:0a:82:a3:5e:de:46:40:00:54:00:ce:a1:
         dd:26:5f:d6:79:a0:5f:8d:6b:dc:46:6d:93:7b:f0:38:c2:77:
         5d:81:1e:88:65:96:37:4b:e3:73:48:67:b5:71:b3:8d:d6:20:
         92:b3:29:70:8c:12:49:45:8c:8d:c1:13:37:ac:f7:90:61:22:
         e4:8e:eb:7c:06:4e:67:15:f3:b7:b8:d9:b0:71:7a:d6:c6:dd:
         d9:24:d9:a0:69:d6:fd:50:eb:e6:01:c6:09:dc:b3:49:e8:2e:
         48:dc:22:21:6a:0d:cb:da:05:1b:dc:ff:e2:29:b4:8d:fa:b5:
         0c:a4:b8:72:ef:fe:f1:c5:e3:90:58:09:3a:2c:f0:0e:cd:fc:
         89:8a:d6:5b:0a:61:41:d1:d2:4f:78:ef:b1:c6:e1:24:ef:04:
         0c:52:ff:f2:ee:65:85:ce:cd:8d:37:9c:96:bd:ff:10:d5:f7:
         35:a9:09:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:42:24 2026 by rpki-client