Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98a4f4f7-0f38-4f2e-8855-ef7c11d857cb.roa
File:                     98a4f4f7-0f38-4f2e-8855-ef7c11d857cb.roa (raw, json)
Hash identifier:          WPQ7v6BaUuK7fjWr7ZI7oumhqjl0BNrkWYaU77i1JlA=
Subject key identifier:   B2:43:8F:89:2B:44:62:75:F6:A5:7F:2D:79:DE:BF:A1:29:1B:5C:26
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3675894246318BD6C09535A292C1276FC096B19F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98a4f4f7-0f38-4f2e-8855-ef7c11d857cb.roa
Signing time:             Mon 04 May 2026 00:40:09 +0000
ROA not before:           Mon 04 May 2026 00:40:09 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff1::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:75:89:42:46:31:8b:d6:c0:95:35:a2:92:c1:27:6f:c0:96:b1:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  4 00:40:09 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=fb9c26f7d4f907d63eac3336b22918f8a073c11abf20416cbd4607b13482fdd5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0d:62:1f:b0:0b:f0:4d:7a:73:8d:eb:ca:e0:
                    55:26:b8:ee:12:4b:8e:3e:59:0b:bd:6c:62:cd:37:
                    b7:fa:3a:dd:35:e0:75:d3:5c:23:3c:f7:c2:22:95:
                    fc:b2:e4:48:57:93:47:af:5c:fa:7a:ff:bd:93:b3:
                    6f:e4:7a:f4:eb:89:4a:62:fd:cd:06:1d:42:a4:5b:
                    17:6d:77:5b:d9:42:d5:9f:42:e0:76:89:30:41:92:
                    af:5b:de:9f:2f:c0:fd:b8:da:0d:20:d8:5b:26:91:
                    da:d1:f6:c1:b1:0d:76:c3:96:ac:1b:02:d3:1f:75:
                    22:c7:5c:a0:8c:64:19:3b:f1:77:06:1a:09:7b:a8:
                    e3:2f:3e:1b:99:eb:53:cd:23:fc:6f:cb:58:16:d2:
                    ca:23:58:2c:12:ad:d0:13:8a:87:46:99:65:53:ac:
                    f3:80:c8:b0:fb:d3:91:9a:13:45:97:88:3a:9d:21:
                    84:f5:00:6f:f9:09:c4:94:5e:10:fd:e3:dd:5c:28:
                    ba:87:c5:fe:da:5e:a5:97:c9:b8:df:82:ab:5f:cd:
                    b8:9b:29:f3:3e:f4:ed:9e:b1:5c:e9:cf:12:6c:f8:
                    ea:7e:5b:34:cc:de:40:7d:b2:3c:2d:ca:f1:fd:d2:
                    b2:7c:c9:78:19:b7:92:bc:96:d0:82:b3:b7:f6:03:
                    ff:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:43:8F:89:2B:44:62:75:F6:A5:7F:2D:79:DE:BF:A1:29:1B:5C:26
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98a4f4f7-0f38-4f2e-8855-ef7c11d857cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff1::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:0f:6d:10:86:cd:ad:66:63:15:ca:ac:22:f1:3a:0c:09:e1:
         03:58:e0:0c:99:f9:10:1e:cc:88:c2:4b:e9:fa:9b:14:b6:8c:
         e5:a0:e4:a4:73:90:f6:05:4c:73:d1:03:34:4a:30:9b:eb:fd:
         47:30:bc:a1:2d:1e:ed:84:bd:5f:13:fc:bb:e9:7d:24:5f:04:
         58:7f:11:13:fd:d9:a7:c7:7f:76:46:93:db:05:fb:4a:e8:4e:
         ee:1c:45:72:4d:be:7f:e9:74:50:e3:9b:e7:e2:21:3a:f9:8e:
         b3:4e:3f:93:0c:c0:a1:0e:37:cc:f5:f8:0e:3a:a5:62:3f:86:
         5a:ff:a0:01:22:88:67:da:82:6c:ad:d5:c7:ba:af:89:61:80:
         e9:ea:13:03:1c:89:44:a8:06:fc:da:25:88:57:25:04:5a:93:
         9e:f7:36:2e:8e:42:7e:bf:fc:b0:22:bb:52:59:72:80:c1:c1:
         ab:88:8e:24:11:78:25:51:95:a5:2a:8d:97:59:62:6d:6b:94:
         b2:0d:67:57:26:24:37:33:41:e7:2b:57:46:b9:a7:67:93:03:
         4c:9c:88:f4:ee:2f:3a:15:2d:f7:76:81:13:ca:1e:2f:65:50:
         cd:4c:14:d3:e8:e4:05:b2:3f:32:23:69:9d:a5:5a:17:aa:6b:
         47:0b:a9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:29:16 2026 by rpki-client