Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03ae4e74-5acd-4e00-b992-05190479b91d.roa
File:                     03ae4e74-5acd-4e00-b992-05190479b91d.roa (raw, json)
Hash identifier:          oLtaD0GpNjB4pFR9l0neGGNMN1lUazdh48cTDDpX5RA=
Subject key identifier:   FB:7E:5A:BA:68:54:21:F9:2A:C7:E1:AD:8B:06:0E:00:13:C5:3F:D5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       772753E8B457A430A19DE0995E9AC01BB3D8B94F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03ae4e74-5acd-4e00-b992-05190479b91d.roa
Signing time:             Tue 06 Oct 2026 00:10:39 +0000
ROA not before:           Tue 06 Oct 2026 00:10:39 +0000
ROA not after:            Mon 04 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f12:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:27:53:e8:b4:57:a4:30:a1:9d:e0:99:5e:9a:c0:1b:b3:d8:b9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 00:10:39 2026 GMT
            Not After : Jan  4 23:59:59 2027 GMT
        Subject: serialNumber=83c9d2e378c24af4694861e9e6dbcc4d3f1e6f6c4acf913fa3d23315127d1c09, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ef:16:f9:6f:db:a2:f9:de:d1:76:fd:22:e8:
                    d8:6d:30:eb:3c:90:46:ac:0d:71:8d:39:8a:0b:27:
                    2b:87:51:8c:8c:21:a9:2f:71:30:62:a9:53:59:1a:
                    f6:22:91:fb:a0:88:89:1a:41:90:a4:7d:b2:6d:89:
                    b3:15:bb:6a:d4:8b:b7:84:67:f0:5c:0c:da:27:33:
                    2a:19:ed:28:16:e6:bc:95:fe:78:9a:14:2a:3c:2d:
                    e6:03:c8:23:bf:e0:32:00:cf:34:92:dc:56:bd:48:
                    5a:ce:4c:63:0a:18:78:a0:75:ea:fc:34:56:23:9d:
                    23:3f:d2:c9:11:df:16:4a:9b:6c:03:f3:f4:a3:a0:
                    af:ed:eb:3f:ca:60:89:6e:2c:73:78:4c:3f:63:e0:
                    fc:01:50:ea:61:ce:29:c7:c5:95:21:92:96:5a:79:
                    46:c9:bf:b4:16:68:9a:b3:f1:6d:9e:bc:a8:5a:8a:
                    e8:68:1b:f5:4a:eb:67:a5:04:2f:d3:4f:d5:55:9c:
                    bc:9b:ef:16:f2:99:5e:73:e5:8a:4c:93:74:35:e2:
                    35:2b:31:e7:bb:3b:9b:ff:33:ab:c9:43:cb:1a:a3:
                    19:e0:b5:aa:91:42:f3:fa:c8:dd:c4:af:80:48:5e:
                    61:0e:c9:b1:a6:db:7f:8f:a8:0d:86:32:7c:a5:29:
                    6c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7E:5A:BA:68:54:21:F9:2A:C7:E1:AD:8B:06:0E:00:13:C5:3F:D5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03ae4e74-5acd-4e00-b992-05190479b91d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f12:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         56:7f:fc:16:7c:f5:57:d2:80:60:09:c4:4c:80:c2:8d:e0:bd:
         80:27:6f:42:5e:1b:eb:74:18:46:2d:cf:5b:d1:f5:0b:e0:b3:
         4e:50:6c:08:cc:7a:0d:b0:48:a1:e1:37:eb:54:be:ec:9b:b3:
         54:4c:16:1a:56:76:0d:f0:01:31:44:7d:f5:f1:43:c3:ca:b3:
         b9:a6:fe:83:2a:e8:e8:d9:de:33:f4:1a:e9:d5:5c:d5:2c:61:
         7d:79:bd:81:28:04:b0:cf:19:58:85:64:a6:16:26:5f:8c:36:
         61:d9:c3:10:56:11:cc:e3:19:56:16:64:50:80:c5:bf:fb:5d:
         95:3f:ba:11:8c:80:2d:ee:3a:38:ca:3c:de:c2:67:e0:cc:6e:
         f2:69:95:b7:ec:7a:f2:92:58:ce:0b:09:3c:d2:c2:b9:e6:5a:
         14:d9:3a:46:e5:0f:f1:2c:8b:7d:46:81:ae:ef:c3:eb:4f:e8:
         81:cd:bb:34:f0:10:7a:1f:a6:83:81:af:03:11:95:b0:51:5a:
         38:85:03:51:e8:c8:e6:3d:6a:eb:7f:d2:65:99:61:b0:f2:3e:
         21:ed:96:06:91:3e:df:37:42:fb:e3:9f:22:50:86:71:96:e8:
         15:5d:80:cb:c2:d7:8e:0e:88:eb:6c:87:0b:bf:c2:e5:90:11:
         0c:e1:b9:f7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 2 16:43:42 2026 by rpki-client