Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01fadbf2-64c1-48f5-8133-2fb8e2e11b86.roa
File:                     01fadbf2-64c1-48f5-8133-2fb8e2e11b86.roa (raw, json)
Hash identifier:          rZgmeOoGB/JNpscL8hQqt6TDAl82l3tlcboV0sLAsag=
Subject key identifier:   87:20:03:6D:5C:B2:95:DB:7A:F5:C6:20:2D:4D:F0:F7:B3:08:78:02
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       137DCB9A89155A9577CE1ACB13E906E17F0B7B81
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01fadbf2-64c1-48f5-8133-2fb8e2e11b86.roa
Signing time:             Thu 12 Mar 2026 16:06:57 +0000
ROA not before:           Thu 12 Mar 2026 16:06:57 +0000
ROA not after:            Wed 10 Jun 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fba:8060::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:7d:cb:9a:89:15:5a:95:77:ce:1a:cb:13:e9:06:e1:7f:0b:7b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 12 16:06:57 2026 GMT
            Not After : Jun 10 23:59:59 2026 GMT
        Subject: serialNumber=33cceced9e853457c5cd10f580397b97af7ca7e7df6416c8bb1fd5e37fbb30bb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b2:97:4d:8c:5b:9c:11:09:bd:d0:85:73:50:
                    a5:8e:57:90:51:93:e8:b8:74:c4:dd:1a:84:9e:10:
                    6e:c7:6d:da:b2:43:6b:4b:ac:c9:44:8c:08:85:fa:
                    d1:23:d5:52:8c:ea:d3:a5:3c:9d:3c:68:dd:1e:3b:
                    f0:36:91:95:c9:87:4b:f4:b8:98:e5:71:8f:31:1c:
                    b0:19:e5:cf:42:ca:7a:69:42:16:6f:c1:d6:8d:26:
                    fc:ee:91:0f:d0:a6:3b:6d:2c:0e:d3:40:63:78:5f:
                    55:ad:9c:44:8e:15:dd:cc:a3:31:14:06:ef:11:00:
                    7e:f4:4d:50:c1:24:41:46:10:52:a9:c6:57:8b:b8:
                    79:f4:d2:ac:06:67:bf:d8:08:25:3e:8d:61:34:bb:
                    50:35:bb:67:56:9c:fd:6d:c1:c1:0b:a4:5f:af:e8:
                    45:58:0e:95:49:5b:54:de:52:2d:ed:7e:9e:08:89:
                    fa:52:ae:8c:27:34:f6:dc:9b:78:12:60:28:b4:41:
                    2c:56:8a:60:5d:19:ef:c6:1a:a5:e3:6b:a0:2d:3c:
                    02:1d:13:bb:c5:40:59:41:83:1a:71:ce:24:c1:10:
                    78:79:91:85:32:c8:70:c3:35:24:82:91:3c:7c:cd:
                    9d:33:36:49:18:f4:a7:72:48:41:e6:3b:63:28:82:
                    6f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:20:03:6D:5C:B2:95:DB:7A:F5:C6:20:2D:4D:F0:F7:B3:08:78:02
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01fadbf2-64c1-48f5-8133-2fb8e2e11b86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fba:8060::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:5f:52:b2:a6:1c:26:12:ac:fc:50:e3:19:4b:61:56:dc:5d:
         32:b2:69:80:1e:02:88:df:b9:a7:5e:8c:bc:6e:29:72:f7:6e:
         fe:d6:23:1a:fd:c8:39:4b:ca:7a:49:d6:9f:c0:ba:6f:9c:19:
         d2:67:2f:61:c2:38:70:60:fc:9b:cc:df:91:8f:9d:ec:84:7e:
         b4:3f:09:f5:2a:f3:33:f5:e1:4c:a8:0b:59:b3:58:f9:ea:88:
         1e:09:b6:c7:bb:f5:02:20:14:c6:75:8a:06:63:7d:77:c0:7c:
         c9:12:f6:9a:a6:23:98:08:c4:10:47:52:71:67:8e:41:ed:9c:
         47:5f:c5:98:2a:87:4b:0a:6c:dd:b0:92:cd:ff:d8:61:61:e0:
         2c:bc:c2:81:31:6f:12:11:dd:f1:94:2f:db:54:c7:dd:4c:83:
         70:08:bd:5a:43:57:6e:f3:d0:b6:7d:59:1b:88:0c:f2:4a:f7:
         50:b5:66:1c:44:4a:f4:2d:93:89:ed:61:39:50:b4:02:fe:93:
         65:7b:48:29:cb:09:0c:8e:2f:73:7b:7a:7c:50:78:20:e1:cd:
         85:24:69:71:c8:db:5b:b0:ee:46:41:49:ad:fb:73:17:77:bb:
         dc:71:c3:d1:12:19:bf:8a:18:a1:d9:ef:70:1c:23:a7:cd:d2:
         54:75:72:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 19 12:24:17 2026 by rpki-client