Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a94c130a-04e5-4527-b789-2c013779be00.roa
File:                     a94c130a-04e5-4527-b789-2c013779be00.roa (raw, json)
Hash identifier:          rxExDfzu2pHxTt2yBUrNRDs3TDIGy2C4rMEr4k0mL/4=
Subject key identifier:   F4:B5:D9:92:D8:F3:34:10:32:4F:E1:01:6C:13:AD:A3:42:00:0B:48
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       48C6A34478D4E20C444A655A127704E8DBEB5313
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a94c130a-04e5-4527-b789-2c013779be00.roa
Signing time:             Sat 02 May 2026 01:20:06 +0000
ROA not before:           Sat 02 May 2026 01:20:06 +0000
ROA not after:            Fri 31 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fea:c080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c6:a3:44:78:d4:e2:0c:44:4a:65:5a:12:77:04:e8:db:eb:53:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  2 01:20:06 2026 GMT
            Not After : Jul 31 23:59:59 2026 GMT
        Subject: serialNumber=ce3207e9776c84a2062edddb054449db4ab89f6e633fabaa1251a8268123148b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d2:9b:28:41:10:13:42:40:df:50:66:71:3e:
                    af:11:35:f8:a2:a0:4e:84:4c:a8:14:43:e9:2c:ca:
                    b4:ec:a8:8c:a0:4e:d1:50:0e:80:03:f4:eb:a7:ca:
                    d1:06:a5:23:3f:e8:8f:a0:c7:00:ed:fe:58:09:bf:
                    f6:d1:a3:f4:7c:0f:b7:92:a7:e4:11:3c:ce:3a:1e:
                    17:0f:35:11:ae:ad:16:1a:eb:e4:29:69:24:ce:db:
                    5a:d8:9f:1d:1b:b7:38:43:71:8c:e0:4d:da:c0:0e:
                    8b:58:d8:a5:8a:dc:06:72:2f:73:b3:d2:09:fe:bc:
                    88:d0:ef:bb:a8:a9:cc:88:bc:71:7c:73:d7:a1:5d:
                    91:c0:7e:9a:ab:6f:37:d1:cd:65:cc:da:ca:3f:5a:
                    86:e2:89:77:be:61:8a:29:27:ec:76:7e:41:22:7c:
                    d6:bf:71:9b:8f:b0:8c:9b:ee:11:09:5e:53:47:73:
                    35:23:3f:4a:aa:2d:74:ef:85:72:b1:d1:58:07:ad:
                    81:14:02:0c:36:17:f5:46:4d:df:1f:35:29:f0:6c:
                    6d:04:69:ab:19:c9:17:eb:07:41:3b:14:a7:bf:da:
                    62:6f:f1:aa:74:08:af:04:9d:13:a4:2f:c4:71:a3:
                    7c:45:a7:68:bc:46:86:f8:46:9c:bf:a5:db:26:a9:
                    0f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B5:D9:92:D8:F3:34:10:32:4F:E1:01:6C:13:AD:A3:42:00:0B:48
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a94c130a-04e5-4527-b789-2c013779be00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:c080::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:77:88:6a:e0:6e:a9:1e:2e:54:26:ec:ab:12:6b:81:45:54:
         44:6c:78:a3:2b:e3:a4:e1:0f:f7:8c:91:ef:46:0d:4b:f0:c3:
         24:8e:d3:f6:fa:55:7b:3b:02:6a:98:b0:74:e2:cc:35:60:e4:
         8d:99:5c:cc:dd:bc:6a:21:df:0f:e4:ba:90:b5:d0:9d:01:c0:
         49:c1:f0:6f:b2:eb:29:d5:f0:3c:70:07:71:1d:23:90:aa:0b:
         f5:51:9b:93:e4:6d:c1:25:7e:bb:68:ad:de:20:15:92:c5:c9:
         e1:ea:e3:6b:c6:d8:87:6d:06:90:8a:b9:75:93:b1:10:eb:bf:
         e6:5d:a7:44:b1:91:fd:73:9c:f2:f7:9d:1f:23:69:a0:56:5d:
         ba:a1:fa:2d:b8:77:2e:9b:12:9d:e3:96:db:06:ea:3e:e8:e5:
         f8:ba:3f:d6:98:65:e9:d2:bc:99:50:10:43:50:c9:0c:e1:7e:
         5c:8b:60:38:19:2d:6d:7c:8e:c4:c7:08:5e:19:41:40:6c:27:
         b6:df:a1:cd:9e:a0:c6:14:2b:a8:2f:95:94:39:cd:50:c0:c3:
         1d:05:0f:25:f9:c0:17:68:e5:16:2b:47:de:b7:18:dc:00:bd:
         3f:b5:55:ba:57:6b:ec:1f:ca:0a:e1:41:71:2f:66:78:55:ce:
         cb:a8:31:49
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 15:33:58 2026 by rpki-client