Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1f5f9d8-13d5-4429-89a1-a2ff4d8f83bb.roa
File:                     d1f5f9d8-13d5-4429-89a1-a2ff4d8f83bb.roa (raw, json)
Hash identifier:          TMa6ZqH8YEryuz9aG6lULMtn5N6S5nPfOORgqh9dSRc=
Subject key identifier:   73:6C:27:5F:23:3F:94:A9:07:BA:CB:AD:F5:22:C0:6E:E2:9F:1E:21
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6BB5E84319137492D09B801296B681882EA9F168
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1f5f9d8-13d5-4429-89a1-a2ff4d8f83bb.roa
Signing time:             Sat 16 May 2026 01:20:28 +0000
ROA not before:           Sat 16 May 2026 01:20:28 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1d:4800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b5:e8:43:19:13:74:92:d0:9b:80:12:96:b6:81:88:2e:a9:f1:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 01:20:28 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=c6cc9716ca9a1a0ec4d3f538533002e2db910d67ec344e9da3c65d39aa6909bb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:88:3e:5a:06:1f:10:e7:7d:69:c3:39:2e:0c:
                    17:78:0f:8d:c8:c9:92:73:cf:38:44:b0:7f:f6:e4:
                    19:19:62:f1:e3:0c:1a:62:4e:64:5e:41:9d:d1:be:
                    f3:e7:01:b2:7a:b9:f1:68:a9:05:aa:4a:8d:05:5c:
                    39:bf:0f:52:82:0a:55:ec:68:8f:01:56:3e:9d:f7:
                    b9:88:af:fd:24:86:50:68:7d:a7:2e:13:d4:57:38:
                    ac:d3:d5:1f:db:78:91:b2:62:1e:ee:a4:fd:05:d3:
                    f0:31:79:df:2e:f6:ff:80:21:e5:f2:85:83:83:e9:
                    88:f1:49:52:4c:8a:98:1d:d6:cb:c5:42:32:ee:de:
                    57:2b:da:14:98:40:42:d0:38:66:b6:c8:56:57:8b:
                    fd:1d:d8:4e:e2:7c:22:fb:f7:54:de:2e:80:d4:1c:
                    e5:27:5a:d0:45:40:a8:93:c0:71:c8:ff:cf:f0:af:
                    d1:3b:e6:9e:f1:bd:42:84:43:b4:97:08:8c:fe:ff:
                    22:63:37:8a:ff:07:8e:ce:02:5a:4b:bc:7c:43:2b:
                    22:8c:c9:fe:bb:20:34:57:2a:5a:cf:53:b5:63:38:
                    3c:18:ff:17:41:ac:ac:5e:54:b8:6d:7b:cf:cd:35:
                    d5:8e:24:3d:90:68:3a:f8:da:85:21:a0:4d:0f:91:
                    0c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6C:27:5F:23:3F:94:A9:07:BA:CB:AD:F5:22:C0:6E:E2:9F:1E:21
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1f5f9d8-13d5-4429-89a1-a2ff4d8f83bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1d:4800::/37

    Signature Algorithm: sha256WithRSAEncryption
         5c:fe:43:11:57:f0:03:4b:52:b8:63:e1:54:f1:41:4d:e8:1b:
         a2:fc:51:e7:b8:c9:ac:c7:3b:7a:43:88:50:52:de:2b:cc:f7:
         d7:ea:42:8d:2f:18:47:72:69:61:ff:d5:d2:ff:31:a6:4b:cb:
         38:31:91:52:4f:91:db:e0:d3:85:82:34:1c:d8:62:1f:9f:c2:
         24:18:a7:ee:64:c9:05:83:62:dd:df:e7:89:ca:4e:f9:3b:09:
         9d:97:79:9d:d0:6d:aa:af:54:ff:77:f7:31:09:66:e7:dd:79:
         e7:7c:7c:1e:24:96:1a:ff:be:4c:ae:ad:98:8b:df:67:df:63:
         6e:a4:59:6b:47:0c:5c:61:f8:59:be:b4:c2:ac:a4:e2:ee:88:
         a7:11:25:d2:82:b9:cc:78:f5:22:d6:44:58:71:96:b5:66:79:
         31:5e:e7:fb:02:bf:10:67:8a:15:b1:b4:a8:09:2a:a2:c9:c6:
         0a:29:d6:cb:8f:75:31:65:27:aa:83:ff:b3:9a:6c:ed:14:c8:
         a3:58:aa:7c:93:03:a5:83:e7:82:a0:66:27:e4:f0:dd:ba:ad:
         f5:79:2f:e4:81:d2:5b:2d:2f:21:3c:cc:a4:03:3b:94:72:1a:
         5b:72:d3:16:24:d1:29:89:40:35:1d:7a:30:28:4b:9d:e9:ce:
         c9:f9:0a:ce
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:03:10 2026 by rpki-client