Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30083b55-0236-4f8d-8387-e3015b3d58d8.roa
File:                     30083b55-0236-4f8d-8387-e3015b3d58d8.roa (raw, json)
Hash identifier:          acKFskqUQeZhHoRluynDK8XyAMCkyEmqSydJGTgZiDI=
Subject key identifier:   01:D7:F6:1A:55:5D:C0:E9:7C:80:04:E5:79:26:9F:DE:A3:FA:53:87
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       10EC9888D0F146D5F6F60279B2D8FDE590999BD1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30083b55-0236-4f8d-8387-e3015b3d58d8.roa
Signing time:             Tue 12 May 2026 00:20:44 +0000
ROA not before:           Tue 12 May 2026 00:20:44 +0000
ROA not after:            Mon 10 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ec:98:88:d0:f1:46:d5:f6:f6:02:79:b2:d8:fd:e5:90:99:9b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 12 00:20:44 2026 GMT
            Not After : Aug 10 23:59:59 2026 GMT
        Subject: serialNumber=be1a65cb48c8a86ed467116224aedc58f0895da8c7bfb9b0b671bf21d20fc728, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2f:8e:37:11:19:cd:c1:9b:89:0c:b5:2e:98:
                    28:60:e3:e9:f6:a7:be:ed:d5:f5:52:00:46:79:53:
                    f4:dc:de:aa:f8:01:40:9a:73:87:79:a6:08:e1:e8:
                    e8:87:9e:18:8c:ad:e3:a8:ac:f6:e6:aa:69:cf:70:
                    32:2a:7c:8e:a1:ab:5b:7f:a1:c6:db:c5:9b:99:9d:
                    f3:63:79:3b:b7:8c:fc:3f:96:e2:24:e5:7d:70:2c:
                    bf:fe:a1:91:47:d8:5f:30:35:f9:d2:03:a7:b9:a9:
                    7d:cf:cc:99:e8:8c:f0:f4:09:0e:27:de:60:eb:dc:
                    4a:14:ae:f9:1c:57:38:b7:05:c8:2d:9f:6d:72:e7:
                    06:b4:bf:f2:78:0d:25:65:03:cb:27:de:a8:2b:93:
                    53:b3:62:af:6f:f0:c5:9d:1d:a7:8d:68:3f:7e:71:
                    e1:76:c7:db:09:d8:0d:69:63:7e:df:97:5e:30:eb:
                    67:2b:8e:62:3e:b3:b5:b3:82:d9:ae:0f:42:c1:1e:
                    53:c8:63:5f:e6:49:1d:4c:ba:6f:b8:08:c2:61:2d:
                    e7:29:b4:7e:07:c6:89:63:0f:bc:34:45:35:b1:ce:
                    9c:b4:60:f9:0c:ca:a4:50:07:72:95:eb:a9:72:09:
                    e8:37:c0:82:12:f2:b5:2f:86:ad:82:7d:3f:06:6a:
                    fa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D7:F6:1A:55:5D:C0:E9:7C:80:04:E5:79:26:9F:DE:A3:FA:53:87
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30083b55-0236-4f8d-8387-e3015b3d58d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffc::/32

    Signature Algorithm: sha256WithRSAEncryption
         d0:33:ba:0c:fc:9d:41:d2:28:94:f4:cf:7c:32:54:45:5f:c3:
         4f:ad:13:96:db:e5:43:07:9b:e3:49:ea:40:e3:18:bf:46:2c:
         b7:36:18:63:58:eb:bb:b3:54:70:6a:ab:a2:60:1d:ad:4a:d9:
         da:90:57:51:ff:9b:36:b4:e7:ad:ee:86:b2:21:db:eb:84:f3:
         e8:33:80:cc:95:a7:76:e5:14:df:79:46:98:cf:49:5b:2f:81:
         b1:88:bf:82:68:d6:53:5c:67:96:06:bd:ce:c9:b9:84:8b:27:
         dd:e3:c2:1a:bf:66:4f:0e:26:fe:09:00:c0:bd:5f:be:27:95:
         bf:d0:e0:23:d0:e9:cd:56:6f:48:d2:b6:ec:c9:47:a9:92:51:
         32:7c:24:07:3f:ee:ba:0d:16:fc:db:dc:a2:63:96:57:ca:7a:
         1b:41:23:ca:0c:55:4b:33:f0:1b:8e:34:c5:80:d6:df:c8:a0:
         22:bb:5c:f2:98:c9:83:49:df:fd:ca:cc:09:d0:91:bd:21:73:
         06:32:58:8b:73:70:58:20:74:31:d8:c0:35:43:f6:6c:10:26:
         1c:ef:c3:f4:8e:92:38:dc:fb:40:90:60:01:c3:52:e5:26:3c:
         50:a2:e0:19:27:11:d6:cc:53:a6:c6:f7:bb:51:5d:36:f3:9c:
         06:c8:02:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:54:30 2026 by rpki-client