Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9734515-07af-4c21-9159-2cbaf39113bb.roa
File:                     e9734515-07af-4c21-9159-2cbaf39113bb.roa (raw, json)
Hash identifier:          At2F5lj0/y89U/utIFWDP4OVtyB21I27Vg1SfVwdaIA=
Subject key identifier:   F8:60:12:AB:DF:86:2B:91:E9:7D:FD:80:61:9D:D0:52:0A:F5:87:C7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3ADB8FC722CFB17F5ED777D8812890EF7A73230A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9734515-07af-4c21-9159-2cbaf39113bb.roa
Signing time:             Mon 22 Jun 2026 00:10:35 +0000
ROA not before:           Mon 22 Jun 2026 00:10:35 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1feb:8000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:db:8f:c7:22:cf:b1:7f:5e:d7:77:d8:81:28:90:ef:7a:73:23:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 22 00:10:35 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=69e5a0687818d99d22fc3a532989a471510b90ff621b414e87b5e9ad551b3861, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2c:29:82:cb:f7:d7:60:35:92:da:99:bd:b6:
                    9f:90:89:94:a6:32:a4:a3:66:31:2a:09:66:0a:ea:
                    03:23:93:30:a3:bf:ce:62:e3:5d:a8:59:ee:dc:76:
                    86:5b:00:54:a3:de:d8:0b:0c:66:03:90:df:1c:d2:
                    98:80:c8:35:14:82:53:ab:89:5c:0e:c2:c3:1c:9f:
                    ad:7a:47:e2:0e:fc:de:1b:49:1a:0b:8d:f3:6d:fa:
                    fb:88:74:47:4c:29:d6:04:70:6c:39:ad:ed:a9:47:
                    01:b7:ad:b8:31:21:bd:41:66:07:6d:6f:23:73:8f:
                    b4:ff:ac:d7:7e:9a:12:3a:fd:a7:cd:30:b5:5f:20:
                    be:98:7e:de:84:a4:e1:1b:4e:85:1c:a5:16:76:3a:
                    dd:1b:47:55:2c:85:89:5b:27:30:b7:3f:03:ad:b5:
                    f6:42:ac:86:a2:99:2b:a7:c6:cf:bc:bd:f0:ef:ad:
                    5e:41:ae:02:dd:d8:ef:79:24:9c:4a:87:ff:d4:4b:
                    89:11:37:12:cd:ec:80:36:56:32:44:a6:4d:6e:09:
                    dd:d5:3d:a7:a6:f7:a6:df:7d:88:81:19:8c:0d:70:
                    2e:a0:eb:18:cd:f4:81:6c:e9:a1:6d:da:ac:b1:92:
                    49:41:4c:76:eb:59:6a:00:ea:e4:f2:d2:44:29:7a:
                    73:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:60:12:AB:DF:86:2B:91:E9:7D:FD:80:61:9D:D0:52:0A:F5:87:C7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9734515-07af-4c21-9159-2cbaf39113bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1feb:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         42:87:b7:16:db:6d:1e:f2:91:66:96:bb:4f:0f:6d:e2:60:ce:
         5e:61:4c:28:c4:96:11:d6:a2:34:f7:e9:a4:b1:b5:44:82:a3:
         ef:c2:2d:af:22:bd:2c:90:13:12:70:3c:87:fb:28:8c:53:fa:
         91:66:e3:a1:98:0a:0d:ab:6b:67:36:56:a1:25:2d:ae:0d:df:
         f8:fe:6a:bf:0c:c1:03:77:34:77:ba:4b:31:5b:ce:07:27:76:
         61:87:10:8f:a1:33:cc:b4:62:85:6e:cf:21:40:f8:7c:f0:84:
         a5:98:e2:8c:1a:b2:36:89:08:91:61:5b:0c:74:a8:97:a4:7e:
         60:c6:0d:ab:db:74:7c:23:98:85:b3:0f:41:cc:93:cd:67:63:
         a0:0a:80:2b:2c:b4:1f:f8:94:81:92:50:3f:0e:12:39:bd:64:
         aa:da:ad:22:fc:88:b0:3d:ff:1b:48:9b:8d:cc:a0:0a:b2:01:
         93:15:f6:d0:92:cd:39:75:94:f4:bf:a0:d7:dd:37:53:e6:0a:
         13:ed:23:32:c3:d6:69:45:85:44:d5:4e:fa:a6:8f:d0:73:7d:
         0f:55:be:45:6e:2a:6b:3b:82:63:e5:a2:a5:9f:ba:0e:0b:5a:
         a8:44:17:7c:6a:ab:8d:64:62:d7:58:9f:0a:48:6d:19:5b:7c:
         95:7a:26:16
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:13:12 2026 by rpki-client