Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/315a3219-af1e-4c94-b07f-58f1271f4363.roa
File:                     315a3219-af1e-4c94-b07f-58f1271f4363.roa (raw, json)
Hash identifier:          MxX/6dPT5XUbt5WmULGoU8OR0l7TZfdFwS5HqACrLno=
Subject key identifier:   98:DD:8D:C8:8B:94:83:7C:C4:74:02:9B:60:06:C5:6D:7C:A5:DA:9B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       ACABE96CF4199EC1D566C56BE17844AC5E79FA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/315a3219-af1e-4c94-b07f-58f1271f4363.roa
Signing time:             Wed 13 May 2026 21:02:26 +0000
ROA not before:           Wed 13 May 2026 21:02:26 +0000
ROA not after:            Tue 11 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:74c0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 18 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ac:ab:e9:6c:f4:19:9e:c1:d5:66:c5:6b:e1:78:44:ac:5e:79:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 13 21:02:26 2026 GMT
            Not After : Aug 11 23:59:59 2026 GMT
        Subject: serialNumber=372eaa6fe038d21c55d4bcc91f25d2b2f81621efc9c1a7aff664e995e67a66ea, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3b:e7:b7:4f:b5:ab:b3:78:a6:c2:bb:34:72:
                    d5:b8:f0:2b:f9:6e:df:f8:00:54:43:ab:cc:a5:63:
                    80:6f:e2:01:ed:c8:aa:11:09:ca:5c:ad:49:d1:2b:
                    a7:da:39:a3:d7:76:2f:f6:21:3d:87:90:b5:8a:80:
                    d9:ac:56:d0:d1:ab:15:a1:3b:45:d8:d6:92:46:f3:
                    be:de:a5:4d:93:94:89:14:14:1f:34:41:fe:f4:13:
                    35:24:65:69:f1:6b:01:3a:c4:03:df:76:3e:1e:65:
                    ae:8f:e9:42:db:15:c0:d6:2e:a4:04:95:b8:9a:40:
                    39:3b:18:dc:eb:c0:83:3c:b0:84:ac:3b:f8:0b:25:
                    e2:13:ff:d4:12:da:3d:e5:c6:76:29:e9:04:e4:63:
                    15:07:cd:b0:ad:a7:48:53:df:ca:4b:3c:44:3f:67:
                    dc:ad:34:b1:a8:6b:9b:3c:48:f7:45:9b:aa:78:77:
                    46:ae:e7:01:c7:d2:44:dc:cc:8b:7f:21:e7:a4:d6:
                    74:a1:8f:38:1e:db:07:d2:74:59:f1:23:a3:51:cb:
                    59:15:68:c0:49:e9:ec:2b:2c:73:ea:4a:0b:4b:e8:
                    aa:07:9a:50:4d:7a:b5:5b:ba:44:60:e5:c7:a4:bf:
                    b8:ef:cf:c5:b6:f3:02:06:a5:a5:99:f6:0b:0a:3b:
                    47:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DD:8D:C8:8B:94:83:7C:C4:74:02:9B:60:06:C5:6D:7C:A5:DA:9B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/315a3219-af1e-4c94-b07f-58f1271f4363.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:74c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         a8:26:f2:80:cf:32:d2:96:dc:7b:a4:5c:43:bc:48:5e:a6:63:
         2d:a2:35:5f:4a:df:cb:d7:09:1a:7c:74:92:33:9e:f3:76:01:
         5a:0f:db:a7:0f:16:42:d3:4b:82:fb:64:e5:be:ca:20:49:85:
         cf:4c:2e:2e:9a:38:89:a6:3e:ff:e3:e4:58:0f:4f:0b:08:42:
         70:c7:5d:5c:84:19:26:78:17:ea:86:d8:7e:1e:59:36:e6:de:
         4e:59:fc:05:f8:f8:31:91:c5:67:36:43:e6:50:24:41:1c:9e:
         80:cc:c9:01:94:8c:3d:c6:2a:8f:15:3f:c6:d8:33:a1:5d:81:
         e9:8f:e3:a5:9a:55:6f:c8:18:8a:65:85:86:91:37:c7:97:86:
         a8:da:24:21:d8:18:3a:5f:68:9e:81:0a:e0:f8:cc:68:34:8d:
         d0:6c:21:0f:f7:f4:44:2c:31:0e:cb:b9:b6:73:7f:25:a4:3f:
         d6:8a:9d:9c:ad:cc:10:5b:09:6a:bc:5b:49:59:03:d0:91:70:
         49:f5:ce:b7:61:29:49:97:0b:7d:7c:66:67:25:36:bd:20:3d:
         e7:a5:10:ba:a0:70:06:26:b4:f0:4b:27:a4:ba:fe:23:c4:ab:
         19:57:a7:0b:0e:d0:7a:15:55:fd:f7:77:96:67:30:3b:44:19:
         6d:80:5f:d4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 17 05:02:43 2026 by rpki-client