Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b766e64-70ac-41dc-bbb7-beac6cc2e139.roa
File:                     4b766e64-70ac-41dc-bbb7-beac6cc2e139.roa (raw, json)
Hash identifier:          7oZFeE21AXbq+WD2YXJg4bMjy2v5qT7UrE1aXLCSU9o=
Subject key identifier:   D3:0B:40:B7:05:54:E7:5A:3E:1A:E1:C1:22:62:16:FA:4C:6E:27:1F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       150268DF14600A2A1E94B60B64A8448C89AD706C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b766e64-70ac-41dc-bbb7-beac6cc2e139.roa
Signing time:             Tue 12 May 2026 00:31:59 +0000
ROA not before:           Tue 12 May 2026 00:31:59 +0000
ROA not after:            Mon 10 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffb:7400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:02:68:df:14:60:0a:2a:1e:94:b6:0b:64:a8:44:8c:89:ad:70:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 12 00:31:59 2026 GMT
            Not After : Aug 10 23:59:59 2026 GMT
        Subject: serialNumber=df6e3b12196266aee72fcb764fd214f3c3f652e0b06b57bd9d48476732078160, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6c:00:a6:b7:f9:e5:4b:8f:9e:90:0a:ac:06:
                    7b:7b:90:29:bc:ae:57:08:91:2c:c4:3b:08:f3:e7:
                    db:ed:08:79:03:35:06:a0:9d:b0:05:02:1b:0b:2e:
                    0c:b8:20:0a:89:59:ac:b4:76:40:b6:dd:c6:15:df:
                    9c:4f:5c:5a:80:43:52:c3:4e:48:5b:0e:f6:dc:b1:
                    13:39:2d:c5:a3:70:4b:ea:b1:d1:60:c6:6b:f6:06:
                    18:6b:b2:36:8f:ab:64:64:8a:65:c0:c2:27:35:75:
                    bf:9e:70:eb:7d:e1:d4:72:36:db:47:c8:85:03:74:
                    a3:2f:90:fc:59:ae:da:d5:b8:9c:37:0b:32:cf:c9:
                    65:6f:3f:0a:c1:07:8f:a4:9c:5e:a0:e0:f7:b5:dc:
                    e8:53:c7:97:f7:c0:82:66:b0:62:a6:99:85:f6:a8:
                    1a:f6:5a:97:6a:5f:2b:7c:d7:df:29:2f:2e:cd:f8:
                    37:dc:6e:c1:ae:c6:11:c8:6c:be:e1:b1:4a:ff:4c:
                    3e:fb:f3:3c:70:5b:23:62:23:b2:80:ce:3e:1d:27:
                    b7:49:75:67:97:80:91:c0:5b:44:21:0f:de:a3:86:
                    83:f0:7b:5e:30:f8:70:e3:70:05:52:2d:a4:41:68:
                    b0:28:41:50:f3:e0:b5:41:2a:0c:ef:6f:a8:2d:de:
                    1a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0B:40:B7:05:54:E7:5A:3E:1A:E1:C1:22:62:16:FA:4C:6E:27:1F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b766e64-70ac-41dc-bbb7-beac6cc2e139.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffb:7400::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:41:27:8c:a0:a6:54:42:a5:4a:3d:2c:58:2f:09:50:26:f9:
         62:01:08:39:b5:59:77:bc:80:4b:8b:c7:96:d6:50:3f:f7:d0:
         1c:d1:78:32:fc:aa:90:0b:aa:cf:75:f1:6c:fa:6d:7f:83:ca:
         0b:c0:88:fa:27:fc:ed:aa:5b:e9:cb:61:d7:a2:aa:da:eb:1b:
         99:33:c7:0d:bc:fe:e0:81:16:56:e9:15:e7:5c:c6:5f:3d:ec:
         d3:10:75:12:f4:51:a3:ed:58:31:b6:04:c9:cc:ff:8f:e9:2a:
         1b:0c:13:37:f7:48:4f:a8:8e:c0:e1:25:ef:a9:70:b9:3e:a8:
         e8:e6:5a:6b:96:6c:74:b2:0e:22:09:62:dd:ac:f9:e6:58:99:
         33:a4:f3:8a:15:21:32:29:5d:bf:03:d2:15:c6:43:16:64:da:
         fe:d5:bd:9d:0e:77:17:7d:68:a1:22:b1:e8:0b:28:c9:a1:4e:
         21:a0:28:1c:a6:0b:b6:0b:30:37:35:85:37:97:17:a6:89:d3:
         b3:eb:e8:ee:9c:4c:0b:ee:2e:4f:0d:03:7c:fb:06:2c:54:5a:
         eb:2c:d8:d9:37:64:96:60:35:24:cf:c3:b5:2c:a5:c0:0c:d8:
         8f:44:22:30:ea:83:55:3b:91:b0:50:5e:7b:2f:48:83:2e:56:
         fe:51:6f:91
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue May 12 21:51:02 2026 by rpki-client