Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ba8af38-a25a-49c7-b805-f49fe0cf7eaf.roa
File:                     3ba8af38-a25a-49c7-b805-f49fe0cf7eaf.roa (raw, json)
Hash identifier:          tSYni0Je5HgbzCQJ4LJMQgylbcKObxggRxzRNhXhGuU=
Subject key identifier:   AC:19:BC:36:A0:31:BC:B8:91:14:BE:EE:D7:1C:CA:A6:FE:6D:A5:F0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       22FB1918BB1B01EB4D890EFFADB5801A358BACA0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ba8af38-a25a-49c7-b805-f49fe0cf7eaf.roa
Signing time:             Sat 02 May 2026 01:00:08 +0000
ROA not before:           Sat 02 May 2026 01:00:08 +0000
ROA not after:            Fri 31 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fea:a480::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:fb:19:18:bb:1b:01:eb:4d:89:0e:ff:ad:b5:80:1a:35:8b:ac:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  2 01:00:08 2026 GMT
            Not After : Jul 31 23:59:59 2026 GMT
        Subject: serialNumber=eebffd12e0d0a2be7227946a6514bfcb55a195a938d12885357cf46cef4ced8f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:4e:c1:1d:30:a8:4a:e9:72:1d:8f:9e:3d:
                    d2:ee:95:50:8e:34:ea:bd:e3:6a:44:4d:46:b6:a5:
                    4f:1b:2c:9a:6a:27:ea:ac:c6:2b:08:43:9a:9f:20:
                    c7:32:9e:70:11:bd:7a:1d:88:9b:49:cd:34:9c:e7:
                    1a:04:56:a0:36:0c:d8:af:82:ec:8e:4c:ee:8a:e6:
                    b6:b3:ed:45:f7:7b:05:1b:33:8d:aa:e2:fb:dc:ce:
                    00:67:12:2e:53:af:27:03:ee:83:6b:09:d7:86:80:
                    39:30:09:09:b9:75:68:c8:32:85:21:67:30:6d:12:
                    d8:bf:78:0c:12:2e:ac:bd:de:d4:fb:c8:4e:d5:f9:
                    80:49:dd:ff:b4:44:3b:11:2b:ac:f8:79:0d:41:ac:
                    07:3a:24:4a:f0:8e:f7:fc:a1:18:7a:c4:ba:47:b4:
                    92:8c:df:48:d3:c3:fc:47:3f:0a:f3:80:e4:8e:81:
                    93:b1:4b:b9:d5:3b:fd:03:bc:ea:72:5c:4e:30:1f:
                    03:66:66:ef:d4:6a:55:8d:0f:ee:ee:74:3c:fc:63:
                    b7:71:89:c4:32:15:e3:c9:9c:d2:30:7f:76:a4:dd:
                    2d:8f:32:7b:b3:93:c9:e9:13:73:b8:6e:4e:cd:b9:
                    e4:61:c4:f5:57:62:05:e7:6c:e9:a5:82:27:3b:ad:
                    89:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:19:BC:36:A0:31:BC:B8:91:14:BE:EE:D7:1C:CA:A6:FE:6D:A5:F0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ba8af38-a25a-49c7-b805-f49fe0cf7eaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:a480::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:e7:59:71:5e:55:a7:7c:63:ca:5c:5d:fe:54:64:d4:d2:25:
         d2:d8:87:19:30:a7:b0:93:8e:bb:7c:0b:20:20:c3:de:a6:75:
         2b:8d:15:72:ea:ac:9b:cf:ad:41:cf:7b:2b:5b:12:97:7d:39:
         77:ee:52:da:12:2f:80:63:61:ef:01:ce:3a:55:ca:da:7c:7e:
         e7:a0:75:12:89:94:ca:76:4b:1c:5d:10:4a:94:70:04:cd:83:
         31:d0:13:a1:39:fc:a8:8c:92:1a:51:75:48:94:9e:51:e5:e5:
         f6:6e:c3:e7:ff:65:84:88:31:f6:92:52:d9:fc:6f:c1:37:77:
         7d:ca:58:0d:56:67:81:b9:ed:15:ab:3b:ba:94:bd:b9:41:3e:
         71:29:cf:e8:40:22:63:82:29:87:a5:76:8c:df:0f:ac:55:0e:
         5a:ef:78:93:76:e8:f6:1b:59:e1:91:26:ad:9e:96:a2:25:2f:
         18:53:97:e6:f8:65:b4:0d:7c:03:25:3e:b4:f5:0c:cb:2b:ec:
         b8:b7:33:9e:8e:d8:06:5c:77:75:8c:cb:3d:d2:ff:4c:eb:20:
         bb:36:c4:a3:0c:20:ea:1e:bf:81:50:a7:5d:6a:01:93:88:e9:
         5f:4f:69:aa:25:f6:d2:8e:c2:8b:89:87:44:a3:4f:55:fe:c4:
         ee:6c:c4:e3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 14:47:30 2026 by rpki-client