Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a4ee9d1-3ff5-42b1-9197-1f3d7ad4c5fe.roa
File:                     5a4ee9d1-3ff5-42b1-9197-1f3d7ad4c5fe.roa (raw, json)
Hash identifier:          VsiKEUmhfMzTjcKd5xVLtnKkspU68Dd7wOwHvZxRTHo=
Subject key identifier:   B3:10:0F:ED:56:35:B6:87:4E:84:B6:13:F0:A7:AB:11:02:09:3A:D2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       60E68394CC2870D0FF5D74183CB97DE36B533FB1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a4ee9d1-3ff5-42b1-9197-1f3d7ad4c5fe.roa
Signing time:             Wed 13 May 2026 21:04:10 +0000
ROA not before:           Wed 13 May 2026 21:04:10 +0000
ROA not after:            Tue 11 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:ec40::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 18 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e6:83:94:cc:28:70:d0:ff:5d:74:18:3c:b9:7d:e3:6b:53:3f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 13 21:04:10 2026 GMT
            Not After : Aug 11 23:59:59 2026 GMT
        Subject: serialNumber=98c0fa200b9b25018d867a0460289249ffc5ce0f34abbbaafe3909ef2bb6887a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3f:7f:96:ab:28:07:f1:42:aa:b4:85:d1:36:
                    52:5b:d8:a0:f7:91:e3:58:7e:68:5f:dd:ca:3f:eb:
                    dd:d0:3f:3a:8e:9c:fe:f4:2e:ac:77:c7:70:6f:71:
                    27:98:03:d5:a9:14:fe:7c:da:fe:e0:31:ec:db:8e:
                    56:e7:32:55:b1:32:49:ab:7f:ba:69:5b:48:e4:3c:
                    4a:27:77:cf:59:a0:46:3a:31:20:3c:97:cc:30:23:
                    40:fb:09:04:bf:9c:5c:6b:91:93:0d:48:d2:93:db:
                    7a:3f:6c:5a:9f:ad:3d:e8:3f:79:8f:00:27:9a:70:
                    dc:f8:e6:c6:52:18:c7:c7:29:c1:f3:67:aa:21:8f:
                    9b:fb:c6:43:ba:96:9c:49:61:25:a7:5d:b2:93:b9:
                    19:1d:d1:d6:6b:d7:c2:75:bf:e3:f4:2e:23:89:97:
                    3b:6a:dd:8a:91:b6:af:4d:f0:5a:d4:4b:70:9c:e2:
                    20:01:1e:5f:a9:3d:7e:fc:d6:d0:1c:a9:f2:e3:d6:
                    13:8e:a2:86:c5:ca:80:bf:29:e4:fa:6b:3e:d3:5f:
                    fd:cd:b8:bc:5f:ba:59:c5:1d:00:37:b3:4e:01:08:
                    dd:be:61:71:eb:82:c2:f5:03:cc:d0:17:c5:1d:2e:
                    fd:a4:e5:e5:ab:25:20:f9:f6:1e:69:62:bf:a9:a1:
                    bc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:10:0F:ED:56:35:B6:87:4E:84:B6:13:F0:A7:AB:11:02:09:3A:D2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a4ee9d1-3ff5-42b1-9197-1f3d7ad4c5fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:ec40::/44

    Signature Algorithm: sha256WithRSAEncryption
         2e:69:d3:9e:92:60:70:74:3b:88:de:ba:16:2f:d7:91:f4:59:
         c5:c7:4c:da:eb:89:c4:74:bf:41:b8:a1:b0:70:ac:fe:52:e4:
         d7:1a:c5:40:c4:97:f6:a0:99:6b:f7:c6:3d:da:c8:1d:2e:5c:
         11:66:ae:48:fe:b5:57:fc:ac:02:60:1c:de:93:f6:b3:a5:cb:
         87:71:7a:a0:d3:89:37:de:47:e7:4b:1f:09:af:b4:9f:10:46:
         d9:ec:83:b0:e3:53:37:66:7c:27:e3:85:2c:99:86:e1:cc:58:
         d4:63:b3:5f:50:6e:22:3f:9a:b2:62:1a:e0:ae:b7:39:79:10:
         db:dc:32:37:9e:56:99:71:ce:55:68:70:d5:ae:84:60:b1:c1:
         a6:20:b0:b6:6b:e1:08:a9:dd:ea:08:30:c6:56:dc:e6:6d:3e:
         4c:18:36:42:ce:ff:9b:6d:a9:aa:28:27:fa:e2:04:8e:06:9a:
         3f:c5:5a:80:49:4f:25:d8:ef:d1:8b:54:93:8c:e0:d4:55:d0:
         f7:4d:9f:09:e3:36:4f:c6:f9:f0:25:2e:59:47:0c:34:cd:e3:
         3b:14:08:cf:85:b7:3e:2e:ea:45:8f:6a:a4:a5:80:4b:73:0f:
         c6:de:8a:8f:25:d3:b0:52:3a:2d:3b:65:53:5e:e9:68:94:a5:
         c2:87:c3:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 17 05:02:25 2026 by rpki-client