Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6956d93c-867c-46f8-9ee4-de76eb50bb6d.roa
File:                     6956d93c-867c-46f8-9ee4-de76eb50bb6d.roa (raw, json)
Hash identifier:          XCAowlTGjze9AaBzMuoCpkxAz4TUk1UuyT/uaybT24w=
Subject key identifier:   B1:16:E7:45:BC:8A:86:8E:35:5F:23:1C:CA:E8:3A:55:04:29:D2:CC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3B3F69873C00F01905ECF3897C11B54D1045D39F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6956d93c-867c-46f8-9ee4-de76eb50bb6d.roa
Signing time:             Sat 16 May 2026 00:30:46 +0000
ROA not before:           Sat 16 May 2026 00:30:46 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1f15:800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:3f:69:87:3c:00:f0:19:05:ec:f3:89:7c:11:b5:4d:10:45:d3:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 00:30:46 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=ffcd62ba53f411c58cd319fa32fab34c2fd6dfdebea1552eaacc7227495cfa9e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:02:46:1f:e6:93:d8:35:e0:3c:e7:46:63:03:
                    94:1d:5c:89:0d:66:39:f3:13:48:ad:2b:a7:95:a2:
                    99:e4:5f:7d:f6:66:0a:ee:b9:e7:b4:06:37:8a:94:
                    39:a5:b0:af:46:4a:7c:1d:5e:bf:92:28:fb:91:44:
                    6a:19:70:2d:8d:a4:65:71:36:ec:fd:8a:08:f6:59:
                    c0:02:db:0d:eb:e8:10:f5:c2:46:b7:34:5a:2c:95:
                    1d:57:54:73:01:a6:70:f8:60:7d:cc:56:6e:1e:bc:
                    48:09:21:d2:39:34:89:50:a2:9e:f7:e7:0b:20:db:
                    6d:a0:fc:87:f8:89:1f:7d:35:af:21:23:5d:5f:65:
                    20:16:6b:87:39:a7:76:17:c5:0a:87:1e:f5:15:ee:
                    64:5b:1d:ea:1b:97:a4:3f:d9:32:c3:62:d8:6f:33:
                    09:c8:2b:4b:96:95:d1:8b:3f:c5:62:ad:a1:e3:63:
                    b7:26:e2:4d:cc:a5:b2:e6:88:0c:cc:22:47:3c:e3:
                    9c:12:ea:8d:cb:e5:8e:18:e3:13:b3:fd:80:8a:61:
                    d9:0c:40:38:2b:11:dc:f9:94:a8:cd:cb:22:e1:1c:
                    bb:f8:ad:f7:1b:b7:c0:49:ab:bd:0d:9b:ab:34:92:
                    53:3e:09:eb:36:b4:eb:8b:e1:bb:5f:94:ca:97:a3:
                    d6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:16:E7:45:BC:8A:86:8E:35:5F:23:1C:CA:E8:3A:55:04:29:D2:CC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6956d93c-867c-46f8-9ee4-de76eb50bb6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f15:800::/38

    Signature Algorithm: sha256WithRSAEncryption
         1b:bd:ad:eb:d8:71:e7:79:2a:b7:9d:a1:37:80:49:d0:c0:5d:
         cf:9a:39:37:2a:cb:8e:46:97:e5:4c:8a:d9:fe:fe:67:39:e6:
         d5:4a:1c:cb:e1:04:89:f0:da:f1:72:0c:93:13:0e:a2:13:80:
         18:86:8e:5b:e8:98:65:60:7a:cd:14:fe:a7:68:b6:cf:09:5d:
         32:93:1a:94:19:ce:01:33:7c:50:d5:d3:82:d5:a7:11:e3:5d:
         f4:cc:85:41:5d:99:0a:80:25:19:e1:91:52:bc:b4:2a:fa:43:
         3b:4b:62:0f:2a:ea:89:00:40:60:b3:74:a2:93:77:e6:41:db:
         c2:46:00:75:25:de:b7:36:73:ac:34:05:fe:25:03:ba:2a:d1:
         25:a8:63:56:4e:f3:3b:15:b9:84:33:08:8b:47:a2:44:86:96:
         2d:8a:9d:96:59:33:d6:e6:48:cf:8a:6c:58:f8:e6:ce:d7:29:
         87:61:d6:6e:d8:88:79:11:3a:4b:7e:4c:85:85:fe:7e:8b:74:
         aa:53:03:6a:68:a7:bb:38:ff:01:90:14:a0:43:3c:ba:5e:a4:
         40:df:25:4a:58:18:75:a5:ca:24:d3:c0:c7:1b:7f:93:51:40:
         14:d4:41:52:14:56:ca:66:a4:b4:40:58:a5:a3:62:79:ed:25:
         88:a3:39:67
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue May 26 09:26:02 2026 by rpki-client