Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06cdad74-b0b2-4100-88e8-71b03924bd5c.roa
File:                     06cdad74-b0b2-4100-88e8-71b03924bd5c.roa (raw, json)
Hash identifier:          qaLo7E6D9PS3rJ1vKzNij7fpB7B3j7otZuQaWZOsI8o=
Subject key identifier:   9B:2E:BF:1C:34:22:81:20:9B:03:AA:2E:3F:01:5C:5D:B6:F8:B7:C1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       20838210D094740D88D90CCF2A7475976F1502F9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06cdad74-b0b2-4100-88e8-71b03924bd5c.roa
Signing time:             Thu 29 Oct 2026 00:41:36 +0000
ROA not before:           Thu 29 Oct 2026 00:41:36 +0000
ROA not after:            Wed 27 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fe8:ec80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:83:82:10:d0:94:74:0d:88:d9:0c:cf:2a:74:75:97:6f:15:02:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 00:41:36 2026 GMT
            Not After : Jan 27 23:59:59 2027 GMT
        Subject: serialNumber=a6911ca1fef190379c6261b2c6fe596345b27595473b50087f1b53fa28ba3eaa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:07:c5:21:af:a5:98:f7:9e:43:42:fa:a8:
                    93:74:d8:7d:82:09:4b:42:bb:00:bc:d7:ed:85:2a:
                    18:e9:b3:9a:23:bd:09:10:91:9a:68:f4:1e:da:f3:
                    95:21:ea:f5:3f:05:20:eb:5f:89:dc:f9:98:e6:d3:
                    31:41:4f:11:bc:ff:8e:62:65:82:19:9d:a3:96:3d:
                    9f:70:74:fd:51:b8:f8:88:79:cf:cf:38:c3:df:1a:
                    20:65:5b:0f:50:f5:98:78:0a:92:26:08:fa:ce:c1:
                    ad:5d:3c:10:87:02:e8:0b:81:ec:18:3c:e3:91:86:
                    79:0c:5e:80:19:50:56:c4:6c:1d:5c:9f:df:5a:ac:
                    dc:da:d2:58:3b:f3:59:94:bf:24:1e:db:91:33:1c:
                    77:75:09:f8:63:25:5e:e5:59:5a:4a:6c:2e:bb:d5:
                    73:6e:12:3f:64:96:f9:a5:d9:1e:7a:1d:2c:35:18:
                    4f:07:49:bc:d9:44:44:ac:4b:af:36:dd:0c:88:2d:
                    6b:b4:41:d1:ee:7b:7f:c3:4b:70:54:76:0e:89:81:
                    2d:91:aa:ae:34:f9:73:b1:81:f2:dc:c3:c0:7c:6e:
                    6b:77:57:23:6c:1e:49:86:dc:8e:4a:2b:bb:9a:91:
                    6c:2f:ad:e4:ee:0b:d3:93:8f:48:0b:36:88:c2:36:
                    17:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2E:BF:1C:34:22:81:20:9B:03:AA:2E:3F:01:5C:5D:B6:F8:B7:C1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06cdad74-b0b2-4100-88e8-71b03924bd5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fe8:ec80::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:04:76:52:48:15:10:a7:bc:ad:da:d4:03:5c:05:8d:bb:22:
         50:46:9f:5e:13:2b:79:71:d3:95:fa:d0:3e:e0:6d:69:26:5b:
         63:15:e2:da:0f:39:97:42:bc:20:cc:c5:79:c1:a6:2e:a8:d3:
         19:d1:e0:bd:17:04:cf:55:16:3f:fc:e8:e3:0d:79:02:e8:a5:
         21:a0:71:20:a0:f8:31:57:7b:48:f8:78:bd:5e:83:d2:10:81:
         41:a6:b8:b2:ea:a5:41:0b:de:19:0a:e7:3b:fc:43:ea:c4:fe:
         dc:4f:69:8c:8b:8a:2c:77:d3:56:99:ba:3f:d0:f0:41:d1:87:
         48:03:ec:b6:d6:16:64:c6:29:1d:52:e9:1b:34:44:37:67:29:
         f9:35:c5:c4:2c:47:e2:c6:c5:69:99:1c:6c:9e:8b:ce:88:f2:
         31:a5:76:f4:44:f2:a5:41:72:b7:63:ba:d0:43:6a:fa:59:47:
         0f:b2:36:ed:70:2d:6f:fd:6e:24:42:cd:4d:3d:74:2a:a6:8e:
         11:95:fc:41:dd:b9:2e:2c:58:82:f7:3d:23:86:78:29:dd:86:
         7a:ea:1c:ca:c4:28:7c:66:e3:1b:11:65:72:f7:1b:8a:f6:89:
         51:b6:5d:17:4a:c2:47:5d:54:ac:f2:4e:81:e9:df:55:8e:ac:
         ab:00:6d:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 4 18:52:52 2026 by rpki-client