Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61ea7ee8-627c-4afe-94e1-63d573cc3a7d.roa
File:                     61ea7ee8-627c-4afe-94e1-63d573cc3a7d.roa (raw, json)
Hash identifier:          4vLvOTsoPSQyQhtkTnSlndh8StLlUVCL9wHZ3T2itdU=
Subject key identifier:   14:2D:D6:EA:5A:B2:28:90:E4:67:D7:01:75:CF:E1:66:55:82:DB:64
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5E9649A6B1D2F4CEB9E62613DBC81F9EE962C460
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61ea7ee8-627c-4afe-94e1-63d573cc3a7d.roa
Signing time:             Mon 22 Jun 2026 00:10:10 +0000
ROA not before:           Mon 22 Jun 2026 00:10:10 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1feb:6080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:96:49:a6:b1:d2:f4:ce:b9:e6:26:13:db:c8:1f:9e:e9:62:c4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 22 00:10:10 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=95c1d83cab759c40f3d8cfb128494008ff9686da1e55ea8e3bd830d412d9ab97, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:06:4f:ff:c7:41:f9:81:32:c2:0f:2e:84:2d:
                    57:7f:ac:c6:86:68:8d:b6:81:f2:76:c8:30:79:08:
                    68:ff:67:f1:95:49:7a:9f:1c:cf:b7:f7:66:79:0b:
                    30:49:14:60:3d:85:e3:af:4b:63:d9:74:93:71:9f:
                    01:1b:31:9e:b2:7e:25:62:4c:eb:b9:32:cd:53:38:
                    c1:53:48:61:75:f6:ba:44:e3:d0:09:46:64:f5:5c:
                    c4:6f:64:59:4a:a4:39:bb:e3:6f:21:4f:88:f6:1b:
                    3e:21:da:75:db:8a:05:56:19:44:a6:d8:15:c6:ad:
                    93:cd:2e:e2:c7:85:dd:09:a6:49:f1:f0:4f:bf:7a:
                    fa:f4:16:df:d3:6b:b8:17:fe:4d:a0:c9:38:40:08:
                    57:97:c3:0e:c1:57:e6:01:28:5a:61:0e:c2:30:f8:
                    a2:b4:d7:6d:11:98:a4:50:13:84:15:26:fa:85:34:
                    1b:66:32:cf:8a:55:02:56:23:3b:44:41:c7:6b:48:
                    ce:c0:0f:b4:61:e9:a3:0e:ea:d6:f6:fa:91:fb:63:
                    0b:70:3b:99:dd:16:6a:eb:c3:9f:c7:57:d6:68:f8:
                    5f:ef:30:b2:d6:66:a0:82:d9:05:60:e2:37:9f:46:
                    ec:ba:69:f6:5c:9f:9e:91:35:91:1b:d6:38:ec:dc:
                    12:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2D:D6:EA:5A:B2:28:90:E4:67:D7:01:75:CF:E1:66:55:82:DB:64
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61ea7ee8-627c-4afe-94e1-63d573cc3a7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1feb:6080::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:06:49:a6:6f:cc:47:29:96:aa:92:6e:da:e8:67:48:2e:ab:
         91:13:c3:57:22:f5:40:b2:f9:38:0d:19:dd:82:04:18:c8:54:
         e0:74:22:cf:45:12:58:2e:7f:97:f4:c4:e0:90:ee:72:92:57:
         c9:7a:36:66:97:19:1a:8b:86:87:2f:10:0b:42:26:2e:fb:c3:
         3c:a1:20:3f:04:8d:29:05:36:7c:53:f0:35:d7:fb:49:1c:08:
         f4:b7:a0:8b:4d:92:71:32:f1:8a:6f:f5:1d:6f:07:26:3f:39:
         e1:8b:5e:73:83:5c:ea:78:52:73:1a:86:18:a7:0a:49:e0:a7:
         36:81:4e:8e:fd:85:86:0a:54:10:2f:60:13:b1:23:48:e6:c2:
         fa:49:67:63:9c:ca:1f:33:72:00:06:fb:00:75:9c:4f:05:b7:
         2c:18:70:7c:75:b3:a7:09:37:86:06:5d:b4:8f:0b:df:a5:d9:
         fc:2a:4d:79:fb:1a:28:2e:a4:16:32:8f:da:14:04:ba:eb:d3:
         d4:d8:94:a3:76:4f:85:05:c9:aa:8c:ff:d4:b8:97:f7:ad:25:
         0a:3d:46:9e:d4:ce:07:51:98:30:a8:ed:8a:3c:9b:de:2e:44:
         52:b4:af:3b:3d:56:92:7d:78:fa:b0:ba:f2:71:13:a0:61:8b:
         65:0b:a5:09
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:18 2026 by rpki-client