Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0330ffc3-82c7-46fb-b3d9-d918bfc7c3f1.roa
File:                     0330ffc3-82c7-46fb-b3d9-d918bfc7c3f1.roa (raw, json)
Hash identifier:          g6r0LQdn6WrZAnzgAPaDOc8QJROrmqip82zbMEn5gNs=
Subject key identifier:   DB:3F:EC:46:45:3E:A6:C6:A8:80:2A:6D:C5:97:40:A3:AC:68:E5:87
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       67909CA80D2D3DABABBD1B5E19554BCF3C3EC086
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0330ffc3-82c7-46fb-b3d9-d918bfc7c3f1.roa
Signing time:             Tue 05 May 2026 00:30:10 +0000
ROA not before:           Tue 05 May 2026 00:30:10 +0000
ROA not after:            Mon 03 Aug 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ff4:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:90:9c:a8:0d:2d:3d:ab:ab:bd:1b:5e:19:55:4b:cf:3c:3e:c0:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  5 00:30:10 2026 GMT
            Not After : Aug  3 23:59:59 2026 GMT
        Subject: serialNumber=5f839202761ac2fad72b74d6cd55b34cc4611a5946bee4271677411549f72505, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9a:6c:31:c2:0d:c1:93:7f:97:3b:75:b0:11:
                    55:cb:e9:5b:9f:49:71:b0:94:a6:bf:12:4f:4a:35:
                    2a:30:98:ba:40:5f:62:e8:b4:f7:c7:8a:38:77:fb:
                    3f:01:34:65:a7:4a:b3:0f:13:ec:83:6a:12:76:91:
                    09:06:d6:ce:b0:76:e9:34:0c:dc:dc:37:05:1f:ac:
                    46:d9:30:1a:c7:31:23:a6:42:7a:9d:4f:fb:77:31:
                    1e:3b:21:32:fc:e4:b3:74:81:89:07:30:6a:86:44:
                    4c:24:48:25:0d:6a:d4:63:45:f3:98:cb:e7:40:5a:
                    2b:e2:0a:41:7b:bb:ea:9e:01:88:6a:82:29:30:98:
                    b4:ef:7c:6b:ac:c7:34:ef:ea:86:b3:72:9c:c3:9d:
                    df:41:5b:4a:40:7d:f4:d1:3e:5b:e0:bb:96:2b:ee:
                    73:bd:84:ed:20:a2:e9:c4:4c:18:84:33:88:65:fd:
                    96:35:91:a4:d5:e3:b3:ed:9c:ef:52:05:b7:8d:3d:
                    4e:14:1d:fd:c2:9b:ec:e4:5e:1f:c0:f6:1b:1f:28:
                    a1:22:10:87:35:1a:97:64:29:58:a3:99:48:6f:e8:
                    68:fb:c8:e7:17:33:06:f3:40:ef:c7:c1:66:34:6b:
                    97:91:ed:46:42:50:0c:8a:44:8c:e5:b1:f5:70:61:
                    83:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3F:EC:46:45:3E:A6:C6:A8:80:2A:6D:C5:97:40:A3:AC:68:E5:87
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0330ffc3-82c7-46fb-b3d9-d918bfc7c3f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff4:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         16:4d:2c:15:45:cd:22:22:3f:0e:53:57:7d:ed:f5:f0:da:a6:
         fc:9e:a1:23:77:09:ae:6b:74:ad:cf:f7:78:68:98:18:7e:1c:
         f1:ed:56:c7:77:31:e4:42:c3:db:6a:57:25:1d:14:83:08:24:
         6c:60:d1:82:9b:1e:ed:ba:85:cf:ac:5b:3b:71:88:6e:00:db:
         ca:62:7f:2f:9a:95:f6:fb:52:eb:0c:7b:b5:31:9a:e5:15:9f:
         62:38:30:1a:a3:6c:40:99:81:bd:8b:47:38:9f:f0:6a:91:86:
         63:44:d0:5b:d4:4f:5b:ae:77:21:a1:d8:00:76:49:44:ff:42:
         89:e6:ec:57:54:19:bc:12:3d:67:07:2f:8e:bf:83:f4:5b:d7:
         89:30:f5:c3:d9:d9:5c:90:12:04:8c:c5:d0:2c:ce:6c:e3:48:
         e8:a4:b1:73:5e:c4:72:e9:5e:41:1b:07:59:09:c5:95:3f:51:
         cc:7f:34:68:30:c6:25:f3:12:7c:3e:04:e5:3d:9a:0e:7b:ac:
         66:51:26:b3:bf:26:46:a2:74:30:f3:9a:4e:1b:a7:9c:41:26:
         47:77:51:28:4d:4f:1b:ad:77:dd:6f:5b:8c:d4:3d:56:8d:a0:
         af:6f:89:42:25:a2:62:43:3a:52:9c:55:5c:fe:1e:7f:e0:cc:
         44:bd:b1:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 00:19:40 2026 by rpki-client