Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03f1ec6c-4fea-4ff6-bbae-ac1ab1c9e722.roa
File:                     03f1ec6c-4fea-4ff6-bbae-ac1ab1c9e722.roa (raw, json)
Hash identifier:          sRk4uPA3IFRdVad3J2nb88NgCWgMQXt2pH0KNYsCx7Y=
Subject key identifier:   96:48:6E:26:42:A8:54:A0:65:42:F6:BC:D0:2A:49:2F:55:F5:D0:4F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1837FDD5B52C3E3FFB046BAEFC7C2559C06263BD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03f1ec6c-4fea-4ff6-bbae-ac1ab1c9e722.roa
Signing time:             Mon 03 Aug 2026 00:21:12 +0000
ROA not before:           Mon 03 Aug 2026 00:21:12 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f00:81a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:37:fd:d5:b5:2c:3e:3f:fb:04:6b:ae:fc:7c:25:59:c0:62:63:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 00:21:12 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=f8041b04356a5f978309a8d4e9f1eb522a9849138066209a8d0ea0140c01b327, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e1:86:a8:df:8f:27:38:17:b9:dd:29:09:13:
                    a7:a7:7a:75:6c:c2:a2:2c:7e:95:fd:cf:e4:74:cd:
                    c0:19:e4:e3:90:ec:87:db:9a:60:cd:cb:c4:17:2a:
                    5c:49:5c:db:39:26:b0:3f:a1:72:2b:41:72:ea:e0:
                    9c:e4:ee:f4:ae:2a:e5:4b:b9:11:2c:23:e5:05:1a:
                    5c:ad:1c:0c:4c:67:77:a9:37:d1:4c:7a:15:e1:13:
                    c2:4a:24:de:d9:88:39:ce:05:80:fc:64:1e:73:af:
                    89:9c:73:bc:40:7e:ce:4c:8a:94:7e:f5:8b:7c:a7:
                    e7:e5:d5:3b:8b:cb:cf:67:44:bb:99:46:06:7f:eb:
                    bf:b4:ff:76:42:26:1d:17:a7:9c:ad:25:60:7c:47:
                    bf:14:81:40:92:59:f2:8a:98:bb:ea:e9:14:cd:ff:
                    bd:7c:fe:ae:88:34:57:2f:7b:73:70:8b:8f:03:9a:
                    55:a4:db:84:80:12:f7:59:74:8e:a0:60:bd:5b:ad:
                    1a:de:22:79:90:0c:ea:66:0c:ba:a5:81:8b:7c:56:
                    e1:ca:88:8b:55:72:ab:14:01:b9:df:80:9f:ba:68:
                    f8:0c:c8:9f:3b:5b:1d:f6:5d:44:f7:57:d8:90:72:
                    e1:51:ea:db:63:c8:00:df:46:54:9a:2f:c5:5c:cb:
                    71:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:48:6E:26:42:A8:54:A0:65:42:F6:BC:D0:2A:49:2F:55:F5:D0:4F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03f1ec6c-4fea-4ff6-bbae-ac1ab1c9e722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:81a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:4d:55:4a:c0:bc:da:89:48:c8:2c:6a:81:7b:ee:a7:e1:e7:
         93:fb:c6:c3:4b:89:15:1c:ef:74:ef:6a:61:c6:87:78:20:67:
         77:7f:03:6c:30:c6:d9:8d:a5:10:43:66:0e:fa:7b:11:b0:32:
         d2:18:34:6d:34:c4:c7:0d:d0:9e:e9:14:76:e3:47:31:cf:29:
         c9:22:7a:60:d3:82:f6:30:19:3e:66:1e:b3:01:79:f9:75:b9:
         40:d1:8f:7f:b8:c4:64:50:16:5c:c2:05:3a:44:a2:09:ac:b6:
         ab:ff:c2:f3:79:55:78:8f:a1:0e:45:4b:fa:f2:7a:52:70:15:
         5c:b2:03:52:b8:c6:b4:e0:c5:8d:a7:e7:ac:89:a8:f5:82:56:
         ab:d9:14:70:db:65:70:ab:b1:4d:41:ee:58:01:7c:84:c5:dc:
         8c:1d:1d:ad:b3:07:84:91:4c:8f:0b:3b:e8:f7:24:7f:64:d6:
         65:7e:d3:9c:95:4e:d9:d0:33:24:76:37:e3:25:ea:3b:c6:e9:
         f7:68:39:27:f7:3a:c4:4e:d2:e5:38:90:46:3b:04:39:ea:67:
         79:cf:91:94:ca:45:03:b5:9f:5e:8e:c7:1c:81:44:b7:9c:b2:
         ef:d5:ec:30:38:d9:38:50:f4:d5:bd:60:29:f6:40:79:f9:f4:
         bd:4e:6c:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:38:12 2026 by rpki-client