Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f393d46b-0830-4157-8c90-fb1e90598c63.roa
File:                     f393d46b-0830-4157-8c90-fb1e90598c63.roa (raw, json)
Hash identifier:          XCWTfnClb6XZ/oyhRD54QXyDgb9rdBliQihxo4XpBEI=
Subject key identifier:   41:D8:21:2E:47:B2:DD:5D:64:FF:15:0B:85:7D:CB:52:A4:A6:DF:B3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7CAD25A1FDA20E0609FD9DFB55361E20D2DF9C5A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f393d46b-0830-4157-8c90-fb1e90598c63.roa
Signing time:             Wed 18 Mar 2026 23:21:55 +0000
ROA not before:           Wed 18 Mar 2026 23:21:55 +0000
ROA not after:            Tue 16 Jun 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fe9:8030::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ad:25:a1:fd:a2:0e:06:09:fd:9d:fb:55:36:1e:20:d2:df:9c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 18 23:21:55 2026 GMT
            Not After : Jun 16 23:59:59 2026 GMT
        Subject: serialNumber=313d10c6adc95a6ea95ed715fbf089347d555a66da54e9c2f0c68c637fc7d75c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:67:a7:ca:a3:02:ad:8e:0b:13:5c:9c:3a:
                    9e:13:fb:97:02:8a:c3:8e:b7:50:9a:12:fc:c1:43:
                    08:f7:30:c4:24:d5:9f:4c:b3:07:80:3d:45:88:84:
                    50:b9:56:db:8b:b9:9e:4f:bb:cc:f1:84:24:16:c5:
                    55:1e:04:f5:32:2d:c9:a6:76:0a:1d:96:60:7a:8b:
                    5d:c0:65:fa:86:a7:19:d0:71:7f:31:9d:b0:29:b5:
                    c7:3f:a2:79:c8:15:1b:24:67:7b:b9:9e:1e:45:79:
                    53:0f:aa:67:d5:ef:af:d9:29:a1:50:62:8f:b6:f3:
                    0d:68:3f:ee:05:36:2a:0c:41:a9:5c:48:11:69:1d:
                    e2:e6:3d:67:28:b2:0d:cf:be:2b:55:48:9d:02:6d:
                    17:96:4d:7d:b5:51:a9:07:e4:ab:d0:01:f0:b2:9c:
                    b9:fe:2b:4c:64:34:2f:96:1e:88:d5:7f:9a:f8:6c:
                    10:4f:3b:32:0b:b4:38:6b:9e:a3:10:ac:46:3e:c3:
                    24:ee:64:c7:cc:8e:5a:62:10:4a:c5:a0:98:22:ba:
                    bb:0b:67:f8:40:ba:b4:bc:28:97:cf:59:78:a9:cb:
                    72:82:bb:52:0d:e4:44:87:38:c6:20:e3:16:f7:51:
                    bd:db:e2:14:9c:54:cb:47:ab:85:e5:cb:cb:79:ae:
                    c8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D8:21:2E:47:B2:DD:5D:64:FF:15:0B:85:7D:CB:52:A4:A6:DF:B3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f393d46b-0830-4157-8c90-fb1e90598c63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fe9:8030::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:36:c2:ec:08:a6:5b:85:b0:44:75:74:18:9b:a9:49:cd:26:
         c9:23:36:11:f1:3e:30:47:cb:85:a9:bf:f2:3b:b5:62:9d:ce:
         b5:3f:ef:70:27:80:52:21:66:d3:c5:dc:26:0f:6b:97:44:e7:
         5b:17:1f:2c:4a:96:3f:1c:49:1c:80:b3:63:ac:7c:8e:02:e2:
         78:f6:24:e4:20:13:f9:84:ab:dd:d2:b2:76:c0:c8:0d:10:a6:
         96:75:8e:5a:eb:af:6f:96:0c:d2:e6:68:35:7f:b7:73:78:19:
         ad:b8:e3:be:6a:7d:8e:c2:3a:35:02:2c:88:c4:82:18:ac:89:
         1c:77:62:d3:62:0a:5e:fb:21:67:52:8c:b1:1e:ce:d2:7e:53:
         ab:36:c2:19:b0:52:6c:8a:98:88:ed:20:5b:44:d2:d5:9b:19:
         ca:f1:c7:b1:ec:0d:e5:0a:46:ba:84:f4:91:77:fc:7d:e5:9f:
         ce:21:77:83:70:2c:e5:49:be:f7:06:47:8c:7b:43:f2:12:95:
         fd:3d:4c:96:26:14:d3:88:f4:56:8a:8c:33:4f:c2:3f:d3:bb:
         65:d9:af:e0:c2:7e:67:90:ed:4a:c7:5b:82:f1:26:23:80:44:
         62:06:35:a9:a9:12:61:41:2b:18:80:fe:23:2b:ff:2b:8d:e9:
         59:24:dc:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 19 12:24:03 2026 by rpki-client