Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c085180-9c0d-46df-8d8f-283057871dbf.roa
File:                     0c085180-9c0d-46df-8d8f-283057871dbf.roa (raw, json)
Hash identifier:          r4JDpxu5IbUyAYSFrpQcSpXZgnBprTYusL0f1iHVXSc=
Subject key identifier:   24:D2:06:64:F5:C6:C4:54:7C:26:63:E7:46:A5:4E:C6:02:28:E2:3B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7ABB04FBF5880F44F0D18ED9F5C4E67FFED49E77
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c085180-9c0d-46df-8d8f-283057871dbf.roa
Signing time:             Fri 01 May 2026 00:51:09 +0000
ROA not before:           Fri 01 May 2026 00:51:09 +0000
ROA not after:            Thu 30 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff1:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:bb:04:fb:f5:88:0f:44:f0:d1:8e:d9:f5:c4:e6:7f:fe:d4:9e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  1 00:51:09 2026 GMT
            Not After : Jul 30 23:59:59 2026 GMT
        Subject: serialNumber=678a434ce8698a42b884e176f5ad4c0f3d8d7d5b7c7bde08b960f7bf280b3cdc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d8:1e:e2:fd:47:eb:d7:68:8b:f0:3f:40:20:
                    35:c4:d8:6a:79:ea:19:b9:a8:c0:8c:59:fc:97:71:
                    ea:c5:f5:d2:2d:ba:59:97:3a:02:51:a5:ce:6a:b7:
                    2c:43:8d:fe:51:85:d7:23:6d:5a:96:a0:b9:2c:19:
                    7e:42:81:db:15:41:99:47:a1:c5:a6:a7:6c:b7:9d:
                    74:e2:1c:45:4c:f2:9b:f9:07:ff:f2:3e:c0:36:60:
                    b7:e0:83:6e:2e:16:fa:48:04:90:4d:a5:39:c9:10:
                    bd:9e:f9:8c:62:c5:98:70:d6:1c:a4:ca:88:e3:06:
                    c7:67:af:8d:17:82:ad:d8:d3:75:3f:7a:05:e4:47:
                    22:16:fe:32:e8:d4:c8:e2:a6:ed:17:80:e2:f8:51:
                    7d:bd:dd:7b:1e:1c:44:9a:6a:50:63:39:e4:c4:a7:
                    b6:a7:36:20:63:2d:15:c3:f9:f6:b2:f7:19:66:5a:
                    51:53:28:e9:b9:39:98:7f:e2:c4:e3:bf:90:9a:d3:
                    b2:3b:79:4d:99:4e:a7:98:95:7f:ac:d2:a0:76:a3:
                    ef:8f:9a:e3:58:1e:f3:b6:be:a8:89:f9:50:60:d0:
                    74:4a:50:cb:bd:41:6d:09:28:d7:cb:63:a6:e1:8d:
                    b7:f7:ed:dc:a9:54:82:d4:b7:8c:1a:3b:da:4d:5e:
                    d7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D2:06:64:F5:C6:C4:54:7C:26:63:E7:46:A5:4E:C6:02:28:E2:3B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c085180-9c0d-46df-8d8f-283057871dbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff1:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2b:89:5f:9f:bd:41:97:f5:e3:79:ca:91:fc:df:ad:7e:91:4d:
         1c:18:52:70:ea:cb:7f:e3:c1:7a:98:4a:1f:38:fb:69:fb:9a:
         8e:37:6e:58:06:33:6b:8f:9d:dc:8b:62:f3:88:34:e1:c0:83:
         01:e5:04:8a:5c:b9:55:3c:14:74:52:0c:94:46:fb:df:a1:f0:
         13:57:bb:ad:d3:b6:9c:d6:f5:c3:09:5e:02:f0:b2:00:34:b0:
         c8:5b:93:30:28:5f:58:67:a9:28:a4:72:c5:5a:22:57:aa:82:
         ae:74:8c:66:fa:6a:92:fc:58:94:98:bd:47:93:55:66:55:31:
         09:b9:e5:5a:c5:da:21:39:64:cd:dc:55:14:ca:a6:57:8f:20:
         f1:2a:9d:f9:1e:61:d9:50:b9:96:59:02:9e:9b:2d:bb:62:8c:
         d2:d5:80:d7:5e:c2:cf:12:9c:48:88:5f:b6:96:f7:99:61:d9:
         71:07:a2:86:30:12:8d:c8:e5:b0:03:27:98:8a:91:d2:da:27:
         28:74:8f:62:15:3b:fd:2e:31:27:a4:27:9a:cf:4f:ce:98:ca:
         d6:a0:a8:7b:8f:6c:1e:6b:36:f6:d7:c4:66:e1:8f:85:b6:7b:
         42:e4:9f:8f:cf:2b:7b:12:6d:c5:c8:41:1f:60:0b:63:47:2b:
         90:e8:8e:ed
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun May 3 14:46:35 2026 by rpki-client