Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/509ace2d-a8f4-478a-9ddc-eb573ecac6e4.roa
File:                     509ace2d-a8f4-478a-9ddc-eb573ecac6e4.roa (raw, json)
Hash identifier:          kZ8AjrfanQYiFTbf+ox5L0wjKyMThdn+OIFO786tixc=
Subject key identifier:   1F:1A:F7:63:69:02:49:48:63:D5:E5:AE:84:81:57:E9:D0:A7:D1:25
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       63079888D4C10F40521CCDC27EED60CA01F2F59D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/509ace2d-a8f4-478a-9ddc-eb573ecac6e4.roa
Signing time:             Wed 13 May 2026 21:07:49 +0000
ROA not before:           Wed 13 May 2026 21:07:49 +0000
ROA not after:            Tue 11 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:c000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 18 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:07:98:88:d4:c1:0f:40:52:1c:cd:c2:7e:ed:60:ca:01:f2:f5:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 13 21:07:49 2026 GMT
            Not After : Aug 11 23:59:59 2026 GMT
        Subject: serialNumber=8b3efbd9670015af6e833ea9df4774d07ac6a90603c40373f59b7d9d10ce17d4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:36:4d:de:1b:ce:47:24:46:38:ae:56:57:05:
                    35:50:8c:4b:05:06:99:28:6b:d9:2b:6e:ad:6d:71:
                    89:0c:ce:06:c3:6a:11:2a:10:5a:a6:da:b0:19:8a:
                    d4:6d:b2:23:be:d8:cd:77:ad:a0:39:88:b0:b6:b6:
                    13:8a:9d:ed:a4:c9:28:01:81:80:c1:4f:76:f7:6c:
                    9e:6c:41:34:dd:20:cc:7a:de:f4:84:a7:96:39:f2:
                    d0:19:da:b5:ba:4a:ac:0f:26:0b:60:a0:f3:e3:5a:
                    af:3f:c6:ea:2e:72:37:e3:2d:4e:a9:71:80:51:74:
                    b2:fb:1c:1f:07:5a:e1:6e:2a:ee:b6:39:d5:63:89:
                    8c:4f:36:60:b3:36:22:33:07:0a:57:a7:0d:60:6d:
                    ce:fd:34:27:a5:85:32:12:7d:86:1b:31:87:6a:28:
                    ad:9a:9d:93:7b:fb:2e:0d:b5:1d:cb:bf:ac:31:56:
                    63:5e:5a:0d:f3:90:e2:32:57:48:b8:8f:d5:9b:3f:
                    6b:ab:8b:d2:20:e4:60:1f:95:ed:f1:93:5f:39:02:
                    3a:4e:91:ac:b2:a9:7e:58:1b:af:72:32:2c:a1:14:
                    32:50:eb:9c:81:95:73:09:79:f6:a4:2f:c1:07:37:
                    07:d6:9e:56:a9:8b:3c:0f:f8:e0:f2:03:b9:68:c4:
                    1e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1A:F7:63:69:02:49:48:63:D5:E5:AE:84:81:57:E9:D0:A7:D1:25
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/509ace2d-a8f4-478a-9ddc-eb573ecac6e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:c000::/44

    Signature Algorithm: sha256WithRSAEncryption
         58:05:b5:46:25:42:63:50:e9:8e:00:68:ce:a5:05:92:91:f3:
         ab:61:b1:f2:c4:4b:6c:87:26:84:98:7e:e9:a9:e7:d8:73:1c:
         eb:b5:c2:7e:b9:12:6c:ef:48:ea:b5:9e:2d:32:a8:9b:61:4f:
         0e:4a:79:de:2e:c4:11:60:d1:68:e2:0f:a1:3e:1f:17:a4:23:
         f5:8d:87:84:7a:78:e9:6e:68:31:a0:88:68:b7:cb:4f:e3:a9:
         7c:2e:8a:32:9e:57:b9:97:5e:8e:e4:06:89:3e:64:e6:9e:1a:
         c9:9e:fd:f2:fd:f4:a0:d8:da:02:25:21:2a:25:c0:4a:04:3c:
         08:26:09:d8:5d:be:79:2e:96:7d:48:6d:65:f9:1a:99:74:5c:
         7c:ba:9c:50:5d:0b:e7:05:64:aa:f6:65:b3:93:4b:3f:98:10:
         cc:ed:ba:62:52:58:ce:23:21:fe:d1:6e:55:5b:f8:6e:c7:8f:
         83:98:e7:0d:e2:4f:99:b2:f5:c5:d0:7a:50:d8:9f:43:44:8d:
         58:44:20:7c:02:58:d3:c2:ae:e7:1e:4e:3e:08:e1:85:f5:62:
         a1:e1:ce:d5:d4:34:88:42:38:d4:ea:d5:15:6d:42:92:b7:45:
         28:dc:81:4c:8f:cf:90:45:9e:6e:07:93:6d:f0:fd:f7:94:bc:
         0d:5c:9f:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 17 05:01:58 2026 by rpki-client