Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3b05f71-1760-4f1f-92a9-96ddc6e7afac.roa
File:                     e3b05f71-1760-4f1f-92a9-96ddc6e7afac.roa (raw, json)
Hash identifier:          1Y3BimX7LibThKv81PvIRTmRUgv66P27GGsNkRXh4Us=
Subject key identifier:   17:BC:95:11:F4:DA:73:74:08:C9:CE:19:0C:4E:84:C6:08:6A:16:93
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3B3A44F9653934F0055CFE84121E3E17B96125B8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3b05f71-1760-4f1f-92a9-96ddc6e7afac.roa
Signing time:             Thu 23 Apr 2026 18:17:44 +0000
ROA not before:           Thu 23 Apr 2026 18:17:44 +0000
ROA not after:            Wed 22 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff6:81ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:3a:44:f9:65:39:34:f0:05:5c:fe:84:12:1e:3e:17:b9:61:25:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 23 18:17:44 2026 GMT
            Not After : Jul 22 23:59:59 2026 GMT
        Subject: serialNumber=411725ce5381d3660ad8cb7c0ec49d7e1cc39067f8fed8f21b74171314f52745, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7b:06:cb:69:b8:87:5b:39:04:fb:f9:3b:1d:
                    cd:02:1b:0a:42:af:7e:c2:87:ba:00:6b:bc:d4:c6:
                    ee:d5:6f:6b:9f:db:f4:c7:e1:58:e9:18:2e:52:13:
                    50:c5:7a:ca:88:8a:72:02:b6:5e:0a:a3:a4:88:dc:
                    0a:02:af:6d:5c:a4:ea:56:57:10:05:e0:44:ee:f9:
                    00:05:ce:e4:71:ca:ee:e5:42:8a:3c:5f:c7:2d:1a:
                    79:61:1f:8d:52:28:6f:23:90:f7:42:a9:9a:3f:f5:
                    21:a3:db:e9:09:59:6e:8d:27:bb:32:6f:64:6e:75:
                    82:33:78:f8:87:0a:5f:1b:42:20:a3:15:16:b8:80:
                    3e:8b:5e:45:6a:28:6e:bf:0d:a0:ca:f8:19:a7:36:
                    f7:f8:7c:79:97:b9:e2:30:28:29:8a:e9:02:64:e7:
                    a5:ad:17:07:48:40:47:c0:58:c6:18:50:27:e1:07:
                    6d:40:17:7f:7f:c5:be:3f:65:9e:0c:81:d3:8f:88:
                    91:13:d7:8a:41:77:a1:43:bb:fc:d8:72:a6:64:92:
                    d7:76:46:c7:7d:14:16:b7:6f:28:ec:0b:8a:c5:c1:
                    e6:04:b0:11:99:55:f0:a2:9c:89:9b:77:60:72:d1:
                    e9:7d:e9:d3:40:39:07:02:c2:76:14:f0:29:6b:20:
                    c7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:BC:95:11:F4:DA:73:74:08:C9:CE:19:0C:4E:84:C6:08:6A:16:93
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3b05f71-1760-4f1f-92a9-96ddc6e7afac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6:81ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:98:86:b2:31:cb:9f:ed:66:65:d0:06:05:03:ea:a7:db:af:
         78:f2:d4:06:30:17:89:d0:a6:30:e2:c0:94:bd:58:ec:d5:b4:
         b6:44:63:60:f2:a6:55:40:48:9d:4b:1a:b2:4c:2b:36:64:13:
         25:09:fa:3f:92:89:f5:a8:98:34:36:48:bd:54:5f:c0:44:fe:
         4b:a7:5c:a0:7b:aa:ab:bf:0f:79:5a:02:a9:f6:ab:24:c6:35:
         34:37:fb:24:34:be:a4:d9:a4:d3:06:c5:4b:d2:13:b6:57:43:
         ac:ef:c9:cd:26:69:34:38:eb:c6:05:6a:de:39:6f:bc:d9:36:
         7f:28:bd:e1:e4:39:be:3b:68:c6:73:18:c6:47:7c:e3:98:87:
         ca:ff:2d:fd:7f:97:dc:1a:c4:8a:82:bd:15:62:e5:87:62:43:
         11:df:90:2e:b3:11:b8:07:18:13:84:30:72:d1:4b:77:0c:a5:
         d0:4d:98:f1:ac:c6:42:26:2a:df:75:95:33:7b:05:28:ac:7d:
         9d:f9:ce:29:dd:c8:e2:fa:45:e9:e9:e2:16:f0:ab:cf:f1:b5:
         e3:57:da:46:50:32:bf:4e:cb:45:ed:b6:98:4a:55:e4:c3:39:
         d6:5e:4c:56:51:26:16:fa:d2:1e:97:b1:2b:c4:cd:9b:26:da:
         e7:e7:97:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 14:47:54 2026 by rpki-client