Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a492220-4d41-424c-a730-c3dfdab5e68c.roa
File:                     5a492220-4d41-424c-a730-c3dfdab5e68c.roa (raw, json)
Hash identifier:          hjRT515LxKVCXwRT16FVvDuCeTEYzmpp5UBAXrzMJsM=
Subject key identifier:   13:4F:AD:38:A4:B9:09:E8:26:A5:01:25:53:6A:32:36:25:8B:10:56
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       51B8858E16A7A58AD13DF68ACE2CE570F7CCDB82
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a492220-4d41-424c-a730-c3dfdab5e68c.roa
Signing time:             Tue 21 Jul 2026 01:00:48 +0000
ROA not before:           Tue 21 Jul 2026 01:00:48 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fea:4020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b8:85:8e:16:a7:a5:8a:d1:3d:f6:8a:ce:2c:e5:70:f7:cc:db:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 21 01:00:48 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=4047e74fd193bb173eeb58ae29462beb8b5221792c0fddf80eeef1206e37107e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e2:2b:45:0c:eb:c0:08:ad:2b:64:b4:64:9d:
                    e1:8e:f9:2c:8b:55:c0:bb:41:d1:da:a5:93:05:33:
                    4a:24:c2:ce:84:65:04:8f:88:b8:c0:69:a1:e2:53:
                    f8:e3:81:8c:e2:67:6a:de:d4:a3:02:ae:20:c8:01:
                    08:c2:29:1e:7c:bd:59:f5:88:cb:82:86:16:c9:3b:
                    90:a4:74:11:f7:5f:99:33:18:88:81:b1:29:74:c2:
                    27:c0:9c:09:3f:91:83:d8:0f:3f:79:50:0f:17:6c:
                    e3:6c:60:0f:68:4c:5b:fd:5e:b1:09:33:b1:c7:eb:
                    6a:3b:cd:30:96:1e:4d:51:32:83:ab:46:a2:b4:fb:
                    6d:c5:75:27:a9:a1:0c:dc:81:c7:fb:26:72:74:76:
                    3b:73:85:02:65:88:a6:26:23:91:90:6d:01:1c:86:
                    82:9a:74:28:56:48:87:1f:60:7f:30:a0:5a:61:88:
                    23:f3:16:1d:b3:5f:72:11:f2:75:19:42:ae:d7:0a:
                    22:f4:80:92:ac:3c:43:91:09:bf:26:c1:20:02:0f:
                    49:db:f4:dc:90:f2:e6:f7:74:54:cf:d3:f3:3d:ba:
                    60:45:2c:fe:47:58:21:b3:00:2c:2d:43:57:8a:19:
                    0d:47:2f:cd:19:16:2f:54:01:f4:6f:ab:b4:7e:67:
                    14:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4F:AD:38:A4:B9:09:E8:26:A5:01:25:53:6A:32:36:25:8B:10:56
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a492220-4d41-424c-a730-c3dfdab5e68c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:4020::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:13:0c:f8:ff:7a:f8:e5:a6:70:32:1a:56:d1:1f:d6:76:d4:
         9d:b4:19:61:29:28:25:9f:76:8c:92:42:41:7d:54:05:bf:f3:
         a5:2f:8d:cd:d6:68:f6:cb:07:8f:b7:5e:ed:cd:8c:49:b1:0f:
         e5:ad:7c:3a:7d:53:ba:13:f1:9e:f7:79:6a:60:bf:f3:b1:2b:
         95:18:ba:e0:19:d8:ae:ea:dd:6a:c5:45:cf:05:22:87:64:89:
         4c:5c:05:df:b8:ad:d7:34:2d:29:74:51:83:89:d5:36:b0:53:
         ac:4b:eb:4f:30:c9:b2:d8:70:48:6f:1f:1e:ee:5d:59:0d:37:
         e9:95:19:23:fe:99:d5:ad:b2:ca:39:bf:e8:18:78:0b:59:05:
         96:7b:7a:a2:00:a7:68:42:38:90:dd:50:4d:1e:8c:3e:3b:e6:
         86:a0:ac:6f:1f:28:4d:a7:44:df:4e:1d:aa:a7:a4:3e:d0:24:
         9f:5e:08:8d:07:9b:b8:f1:91:e9:4c:69:02:14:5b:e0:5a:99:
         0c:41:4f:02:5e:6b:35:c4:54:5c:61:d7:e8:4e:64:dd:ed:5f:
         e2:2d:3e:b0:e7:cb:cb:34:a1:df:2d:ea:cd:0a:a2:7e:14:f2:
         fd:49:96:e6:dd:6b:ea:00:d6:7f:12:69:c5:8b:b9:44:f7:69:
         16:3a:20:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:35:29 2026 by rpki-client