Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5111af1-3222-42b7-8536-fbdd563c45ea.roa
File:                     b5111af1-3222-42b7-8536-fbdd563c45ea.roa (raw, json)
Hash identifier:          CfEuq89oAPcpDs1pqVtICJARQDjGYePcz0VTM03EDfw=
Subject key identifier:   89:05:28:C8:02:A0:22:86:D8:00:87:94:31:F6:A4:57:D2:E2:D9:BB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1FF8CD5506ECA0D6F0DB1D1D4870E3D928EF52F9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5111af1-3222-42b7-8536-fbdd563c45ea.roa
Signing time:             Fri 08 May 2026 19:16:43 +0000
ROA not before:           Fri 08 May 2026 19:16:43 +0000
ROA not after:            Thu 06 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:ec80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f8:cd:55:06:ec:a0:d6:f0:db:1d:1d:48:70:e3:d9:28:ef:52:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  8 19:16:43 2026 GMT
            Not After : Aug  6 23:59:59 2026 GMT
        Subject: serialNumber=eb1f485f5f1cca8398030397a7f847e749f13f08077845c7af30f58d0663aadf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a0:7a:2f:77:97:9e:8c:bc:45:ca:48:91:24:
                    ea:08:18:3b:71:e3:46:6a:0f:90:69:50:d5:51:bf:
                    02:17:97:f2:fa:96:47:eb:73:e7:3c:8b:69:6d:3c:
                    7e:da:9c:f0:0b:54:6e:d2:44:36:c2:87:3d:00:8c:
                    d2:14:a9:7b:8e:ea:bf:21:f7:d7:e2:3c:c4:52:42:
                    13:00:88:89:d8:95:57:64:85:91:23:3a:f9:09:34:
                    b5:07:3b:4a:b4:ea:38:cf:b4:ef:1c:c6:0a:8e:ce:
                    37:50:4e:15:e5:53:a2:3f:6e:49:00:5b:8b:a9:54:
                    ce:38:f5:67:fe:e6:a6:ae:24:c5:62:cd:5c:3f:e3:
                    c3:f9:67:11:44:b6:2d:68:31:43:42:4b:bd:84:b3:
                    d1:2c:55:12:8c:47:1b:08:1e:fd:6d:b8:26:d7:12:
                    65:de:0a:75:9d:ed:20:6d:3a:e0:98:08:7b:e4:5c:
                    a7:20:8b:d6:61:d5:d7:9b:b0:1d:c4:18:4e:7e:ba:
                    54:7e:95:18:51:7f:73:43:a2:a7:24:79:81:30:c5:
                    e8:9c:02:ed:10:f3:fa:fc:52:13:df:ed:64:b9:e5:
                    70:c1:a1:3a:cb:a5:07:20:8f:69:db:11:9e:e3:ec:
                    c5:ff:cc:60:2a:4f:71:bc:fe:31:de:b5:c4:e5:c3:
                    af:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:05:28:C8:02:A0:22:86:D8:00:87:94:31:F6:A4:57:D2:E2:D9:BB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5111af1-3222-42b7-8536-fbdd563c45ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:ec80::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:4b:aa:3d:81:16:39:67:a1:3d:58:21:c0:cf:30:b2:4c:f2:
         8c:0b:49:21:b2:ca:44:3e:6b:4e:e9:9c:6d:2a:58:89:da:ff:
         ad:6c:26:19:af:8a:ec:5c:70:b7:79:10:5f:99:04:cc:71:25:
         ca:8a:99:f2:23:48:11:80:f5:37:5c:15:10:7f:79:85:cd:3d:
         8c:8e:87:2b:45:39:0c:0a:a9:60:ee:fa:d6:ca:f0:57:df:11:
         16:9f:3c:62:bb:9b:e0:2e:4f:fb:fe:c5:dd:1c:af:1f:57:d1:
         17:2a:d9:a7:46:9e:7d:d6:a4:af:d8:9c:d2:24:2f:95:0c:40:
         e1:33:e9:bf:81:50:9c:d5:a2:1b:56:84:14:3e:dc:5c:ef:5d:
         bc:42:51:0d:49:bf:aa:bd:b3:75:44:bf:b2:36:d2:58:02:18:
         3e:68:5f:37:19:09:26:99:8f:97:cf:40:ca:76:2e:e0:c4:a3:
         28:9e:e6:bf:0e:63:26:d2:c2:4e:1e:d0:12:2d:28:be:f1:e6:
         84:9b:e9:c1:1d:22:31:62:17:08:4a:32:af:88:bd:d9:76:e6:
         91:7f:2e:e6:37:8a:55:ff:dd:62:2a:9a:49:1d:ee:2a:ed:25:
         9d:44:d6:91:fd:13:a6:fe:3f:cb:d7:9d:5a:a3:dc:88:d9:ec:
         6e:60:3e:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 06:38:25 2026 by rpki-client