Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1911b766-c65e-4841-b9a2-a47621e5ac42.roa
File:                     1911b766-c65e-4841-b9a2-a47621e5ac42.roa (raw, json)
Hash identifier:          77a5BodTMe457hS7d8JpDjntoOM6JKFatHlevnloBgo=
Subject key identifier:   9B:AA:A0:5B:E3:90:94:F2:31:38:A6:CC:A9:88:42:8E:1B:24:AB:61
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2DA989760BA0342FD11FAB5D6CDB789A3B19556D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1911b766-c65e-4841-b9a2-a47621e5ac42.roa
Signing time:             Fri 01 May 2026 00:10:06 +0000
ROA not before:           Fri 01 May 2026 00:10:06 +0000
ROA not after:            Thu 30 Jul 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ffc:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a9:89:76:0b:a0:34:2f:d1:1f:ab:5d:6c:db:78:9a:3b:19:55:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  1 00:10:06 2026 GMT
            Not After : Jul 30 23:59:59 2026 GMT
        Subject: serialNumber=7e1d36ea564ddcd2abb9e8517422b1b9accf74dd136b1d5cf88049f76ac2480f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:79:f1:cd:6a:1f:8b:52:85:3c:d5:3a:d4:8c:
                    3e:e5:ac:c9:18:50:eb:e3:99:be:ac:f0:21:32:c0:
                    6f:ea:f9:8a:ea:e7:c4:b7:e7:fe:fd:54:08:c9:0e:
                    45:60:26:82:72:de:ae:5a:7e:f3:ad:26:50:6c:08:
                    3c:83:02:f9:d4:fa:da:a2:4b:34:d9:15:f7:03:3e:
                    95:db:4c:54:b6:ab:29:67:f9:e0:e2:6b:22:69:26:
                    5e:23:76:e8:0c:d0:53:30:05:4f:c9:5b:7f:1d:ee:
                    a4:e5:41:c6:60:e4:f8:1f:39:96:73:d8:59:6e:2a:
                    93:e3:43:33:83:08:7c:b9:f2:71:fc:6a:25:2c:1d:
                    44:3d:36:04:27:d4:c2:4a:7f:32:33:24:ab:e3:53:
                    56:2f:a0:3b:5c:b6:9b:2c:6f:45:e7:3a:22:e8:0f:
                    82:e0:4e:91:8c:70:20:db:a0:93:e9:72:77:0e:d9:
                    18:9e:7b:b4:a1:36:f2:37:ee:bb:d1:d9:06:7a:b0:
                    ff:4c:e7:a2:d8:8f:b4:54:7c:bf:91:08:82:34:00:
                    86:1d:30:1f:a2:80:c6:74:87:f8:7a:4d:dd:e9:63:
                    fb:75:56:cd:6a:6c:8f:4f:78:14:cb:ee:bd:7f:cb:
                    8f:ac:4f:96:dc:be:b0:84:94:e1:ac:8b:d4:4d:55:
                    98:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AA:A0:5B:E3:90:94:F2:31:38:A6:CC:A9:88:42:8E:1B:24:AB:61
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1911b766-c65e-4841-b9a2-a47621e5ac42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffc:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         36:e7:39:26:dd:b2:ed:5f:52:22:0e:48:58:2b:e2:95:6e:54:
         e8:62:75:dc:8a:65:d5:7c:5f:66:78:d1:e8:40:a9:8e:32:37:
         04:b1:c6:4f:8a:af:66:0a:cc:0e:85:28:f4:be:88:16:e5:4c:
         34:9e:78:88:e6:41:a1:13:e7:e0:7d:a1:c4:43:8f:63:b0:6c:
         a7:2b:b7:bd:78:fc:ca:01:28:53:26:83:1e:b7:9a:36:c5:5f:
         9f:96:59:ce:82:c7:b6:8f:e0:e8:3e:fb:2c:2c:a2:25:31:3a:
         61:fe:db:62:85:c8:94:31:17:d4:fd:af:9b:f9:56:61:f0:c8:
         75:9e:c9:c8:40:2f:89:3e:b8:be:29:64:33:84:13:cd:a6:fd:
         b4:97:69:2d:6e:95:80:54:cf:72:c1:7c:cc:38:c6:a7:79:24:
         78:c3:60:be:c0:5f:49:6f:32:6d:6e:15:c5:06:86:40:66:37:
         79:ef:94:ae:52:91:7f:95:1a:0c:0a:ca:ca:10:7d:64:d0:7c:
         d0:92:a1:7b:22:f7:f3:b7:ae:34:50:dd:ae:a2:f4:de:31:fe:
         c5:86:19:96:91:4f:c7:95:2f:37:22:0f:57:69:11:1a:28:90:
         55:ca:82:ed:00:45:10:f9:1e:ed:2d:90:9f:60:10:06:e4:e0:
         38:53:9c:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 01:09:18 2026 by rpki-client