Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36fcc0e3-3bcf-4c84-8a81-72aebbe36fc9.roa
File:                     36fcc0e3-3bcf-4c84-8a81-72aebbe36fc9.roa (raw, json)
Hash identifier:          RI+2DdyyzN95rWd348fwdSVqMZKOq+U1FrWaSMrNuI8=
Subject key identifier:   F9:9C:4A:71:B8:CB:15:42:0D:93:75:BF:D9:E0:80:37:6C:31:50:4B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       408775B637C037EE8121D474F73F81393437E72C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36fcc0e3-3bcf-4c84-8a81-72aebbe36fc9.roa
Signing time:             Sat 02 May 2026 00:51:20 +0000
ROA not before:           Sat 02 May 2026 00:51:20 +0000
ROA not after:            Fri 31 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:10c0::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:87:75:b6:37:c0:37:ee:81:21:d4:74:f7:3f:81:39:34:37:e7:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  2 00:51:20 2026 GMT
            Not After : Jul 31 23:59:59 2026 GMT
        Subject: serialNumber=4686466889f8ef66767fecc3b18cee4b524767f3c63f34298e795b749e95f2ad, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ba:16:d6:a9:c6:eb:59:9a:6f:1f:97:84:f6:
                    0c:5e:62:d0:48:34:ba:b9:e0:94:99:0e:d3:fe:d6:
                    b0:d8:6e:a7:e0:13:4c:66:ae:09:12:fa:1c:04:45:
                    30:e8:bb:dd:f5:38:a1:f8:5f:45:df:cb:cb:6e:3c:
                    47:f2:ec:5b:68:5c:71:76:e1:b1:c1:84:f7:38:24:
                    33:bd:b9:8e:97:e9:21:c5:08:29:95:d5:3b:99:e3:
                    31:68:98:7c:01:cc:bb:46:78:2d:b4:4d:59:3c:29:
                    a0:41:e8:4c:dc:7e:52:00:36:e0:de:b6:46:e6:6d:
                    ee:d6:94:e8:61:a5:48:6a:f3:a3:7d:78:b4:77:d3:
                    99:42:9b:7a:bf:ef:d9:96:a1:14:da:67:d7:fa:15:
                    c7:6d:45:46:52:2a:da:39:6e:d2:1a:71:c2:8b:9a:
                    2b:6f:0b:0d:43:30:63:8f:68:f1:e4:af:fa:d6:2c:
                    6a:99:e8:b5:26:ad:b6:7f:75:f3:34:08:95:2d:aa:
                    b3:9d:97:18:7c:d7:3b:75:2a:5b:f2:49:f6:2e:a1:
                    2a:3c:6c:50:5e:df:83:58:92:f5:f5:a2:5b:0b:6b:
                    be:e4:f9:ee:85:1b:99:99:dd:03:98:cb:6b:9b:a9:
                    16:94:6e:be:24:40:77:65:a0:1b:83:80:11:75:bd:
                    a3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:9C:4A:71:B8:CB:15:42:0D:93:75:BF:D9:E0:80:37:6C:31:50:4B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36fcc0e3-3bcf-4c84-8a81-72aebbe36fc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:10c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         ad:67:7d:81:68:e8:3f:fd:db:3a:c8:89:cd:7d:15:13:89:36:
         08:31:79:62:21:89:13:d8:0f:8b:c1:6d:74:4f:c7:8c:26:af:
         42:f1:70:26:00:dc:02:f3:4e:76:e5:95:fb:ee:0e:dc:4d:91:
         1d:9b:43:6b:07:f5:68:c6:5b:85:c1:28:94:03:ad:e3:01:9e:
         55:ce:b9:fa:a7:a4:10:1c:56:f4:75:78:5d:b9:a8:e6:66:e7:
         9e:48:b7:fb:c3:7e:7d:e0:a5:83:d3:28:e9:58:d4:cb:12:cb:
         92:f3:89:ea:7a:70:c9:71:8a:b1:b5:25:83:dc:79:7d:37:ed:
         e7:9e:31:84:8c:63:06:3f:61:26:67:0f:85:9b:7a:b2:5b:96:
         7d:9d:c4:08:63:33:46:c8:d3:43:43:23:ae:f9:69:87:a8:3f:
         04:b7:8d:92:5a:99:97:dd:54:b2:41:23:4f:bf:d9:5d:cf:92:
         2a:d8:71:de:22:26:a0:b2:ed:d7:7c:d5:34:c7:29:75:57:0c:
         ab:6e:38:2b:a2:94:c8:21:4e:ad:63:fc:8c:fb:7a:44:a0:8e:
         7d:1a:c9:19:48:e7:89:b4:c3:38:22:8c:69:62:62:ba:f7:0e:
         54:98:b1:a5:2d:f8:7e:9e:4d:18:60:1f:d0:61:6a:13:cd:08:
         b9:58:4b:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 4 21:37:37 2026 by rpki-client