Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3850c479-4d9d-4ed3-a0ac-ffb91dd85878.roa
File:                     3850c479-4d9d-4ed3-a0ac-ffb91dd85878.roa (raw, json)
Hash identifier:          Xt44qoe7mxXCu56N1s5nmnK6jzNk80O/W61gmbTOrBE=
Subject key identifier:   D3:0A:F3:91:45:BA:B7:F1:5F:75:75:A7:D8:AE:34:1B:75:27:7F:2F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       61D8766B0A0CBEBC25FB99ADB063FA818EB928B6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3850c479-4d9d-4ed3-a0ac-ffb91dd85878.roa
Signing time:             Fri 01 May 2026 01:00:55 +0000
ROA not before:           Fri 01 May 2026 01:00:55 +0000
ROA not after:            Thu 30 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1e:c400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d8:76:6b:0a:0c:be:bc:25:fb:99:ad:b0:63:fa:81:8e:b9:28:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  1 01:00:55 2026 GMT
            Not After : Jul 30 23:59:59 2026 GMT
        Subject: serialNumber=a07f834011514033fb780809bfc4591358a7f00b517a70d359676c16380f34bc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0e:be:ec:4a:50:fa:db:90:63:a6:ba:a3:d5:
                    cd:ff:8f:ed:3d:7d:fb:c4:a2:c1:0a:09:77:80:bc:
                    7e:bd:6f:3b:bb:d0:99:92:30:31:8f:d8:44:dc:54:
                    c2:29:2e:85:ea:7b:79:43:1a:e6:56:fe:41:08:b5:
                    68:2b:c6:48:ac:3c:49:0d:71:7d:74:05:0d:87:b9:
                    3d:30:88:11:77:fb:2d:5f:ab:90:2a:7d:c5:4a:e3:
                    86:05:08:83:04:73:06:42:32:28:52:f4:ae:39:d1:
                    73:39:42:a8:66:66:e5:64:7c:76:de:e6:1e:11:a1:
                    5e:cc:a8:1e:a2:98:af:ba:68:2e:b0:58:f5:be:ff:
                    6b:f2:bd:1f:33:52:06:d8:92:49:d6:f4:a5:5c:6c:
                    4f:3f:7f:90:1b:7d:2f:44:01:c4:09:35:12:fb:94:
                    d9:c3:56:8d:8d:0d:7f:31:7f:b4:80:1b:a0:ab:fa:
                    71:7b:0b:93:87:98:b3:6d:7a:23:8b:17:bf:33:1d:
                    89:e1:6b:d6:0c:17:f6:28:95:30:af:b7:c0:86:e4:
                    67:6a:8c:2d:24:bb:61:24:12:78:32:1f:55:0c:71:
                    f6:fb:14:14:1d:36:6c:20:bc:1b:d8:4c:64:12:d8:
                    30:49:a2:e0:cc:17:d4:1b:39:de:20:00:bc:24:6d:
                    5c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0A:F3:91:45:BA:B7:F1:5F:75:75:A7:D8:AE:34:1B:75:27:7F:2F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3850c479-4d9d-4ed3-a0ac-ffb91dd85878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1e:c400::/38

    Signature Algorithm: sha256WithRSAEncryption
         48:19:fb:79:9d:82:d7:18:0e:94:32:a0:d2:09:06:79:b7:14:
         07:d8:94:32:2a:87:63:ae:ad:3c:6a:cc:9b:ea:29:e0:b0:92:
         a8:1d:97:8a:9a:d7:81:29:18:4d:a3:76:cc:a9:fe:e8:5b:43:
         5e:68:65:5b:83:c9:90:5f:88:05:a0:64:53:cf:ba:af:96:fe:
         93:bc:09:75:80:14:6a:81:cd:ba:68:82:7a:ed:e2:f2:95:8a:
         c4:f4:d0:33:02:d2:23:c8:0a:da:ab:e4:80:04:7a:df:75:61:
         6d:37:3d:56:9c:99:cc:6a:d3:e8:7f:b6:0d:b2:e9:1a:03:5b:
         2d:ef:e1:ca:98:b4:b1:e2:04:ed:ea:b1:4e:04:55:f1:14:ff:
         bc:b1:13:e7:24:73:f3:92:ec:1a:62:ab:f9:3a:e6:d0:fc:e8:
         3c:2d:2b:70:ad:ec:56:f6:fa:09:8a:21:6c:64:30:c4:a7:81:
         76:e4:e1:70:7c:e6:c7:33:d7:bc:87:ab:9a:6d:48:f1:d0:20:
         5d:88:a9:cd:be:42:31:35:00:94:6f:f8:54:d4:d1:c8:ac:62:
         eb:51:6a:92:68:81:9a:a2:d0:1f:05:ef:95:6c:35:4a:ba:37:
         0a:d4:c1:04:3d:b6:0b:dd:bb:1a:9b:2a:5b:6b:04:28:53:66:
         f2:05:a0:f3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun May 3 14:47:25 2026 by rpki-client