Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/123f9e40-fc72-4fcf-8633-7cb7a1a9c9d6.roa
File:                     123f9e40-fc72-4fcf-8633-7cb7a1a9c9d6.roa (raw, json)
Hash identifier:          6zKODnJmKY5pfjr9ew7mhrTNU2qNFRZq5jglO/WJyBY=
Subject key identifier:   9D:6A:0B:C4:31:E4:50:79:D3:72:DB:03:D0:D4:74:72:04:5B:8C:1C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3895C0D2AE7575FB51A528DFFB0E07FB796EC5CA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/123f9e40-fc72-4fcf-8633-7cb7a1a9c9d6.roa
Signing time:             Fri 07 Aug 2026 00:20:42 +0000
ROA not before:           Fri 07 Aug 2026 00:20:42 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f68:6080::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:95:c0:d2:ae:75:75:fb:51:a5:28:df:fb:0e:07:fb:79:6e:c5:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  7 00:20:42 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=09c7ef181593d56d552acd6cd3981c32c8f625c46081caddfb46a6d802f62eeb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:20:8b:13:0f:6b:99:79:9f:0f:2e:c6:b0:66:
                    9e:a8:84:35:a8:4e:34:2d:55:9f:b8:5d:93:8d:7b:
                    87:e8:ed:1a:ef:ad:ae:c6:6e:30:0e:3c:7e:ed:c5:
                    bc:10:20:c2:8e:0a:f1:43:3b:17:ee:5f:59:76:5d:
                    c0:49:cd:e3:f7:0d:ae:a5:0e:d8:bc:c1:f4:b6:0f:
                    6d:48:37:31:99:75:b4:65:e4:83:e8:07:3d:71:01:
                    ea:e7:fc:94:c4:c8:9c:2c:4b:ea:1a:47:c5:b4:cc:
                    72:d4:d7:eb:42:6b:c6:92:08:5e:8f:5a:89:69:2f:
                    bf:25:b2:9a:6e:cb:1c:03:89:55:20:29:e5:08:62:
                    6c:95:20:bb:ed:59:5b:ff:9a:eb:cb:58:c5:38:31:
                    d7:3b:4f:a9:04:a3:de:7f:c1:fc:01:0a:06:b8:0e:
                    e1:16:d3:14:10:dd:0e:c1:3e:3c:85:22:24:83:f4:
                    2a:d4:6e:9a:67:3c:b0:c3:ef:64:9f:ce:58:cd:af:
                    b6:57:b1:76:74:f8:bd:f7:eb:bb:96:a5:b0:f6:9f:
                    d5:d6:e2:66:96:cb:cd:73:6e:20:cd:39:0b:7b:c3:
                    1d:0e:1d:67:af:3f:87:cc:1d:e0:88:92:6e:d3:36:
                    c6:7a:3f:8f:4c:d9:b3:f4:45:c0:14:2d:06:7f:78:
                    83:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6A:0B:C4:31:E4:50:79:D3:72:DB:03:D0:D4:74:72:04:5B:8C:1C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/123f9e40-fc72-4fcf-8633-7cb7a1a9c9d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f68:6080::/46

    Signature Algorithm: sha256WithRSAEncryption
         99:73:56:38:27:3a:af:14:59:90:77:25:d2:01:fe:f9:99:05:
         24:0d:af:34:10:e4:f0:d9:b2:74:18:4a:9f:27:6f:1b:1e:aa:
         5f:1b:b9:9b:1d:e1:8d:c3:1b:48:52:91:11:7a:f1:52:49:30:
         ea:fd:89:76:4b:ad:01:bb:15:17:4e:4f:c1:48:85:aa:dc:55:
         d0:0c:53:a9:a3:81:b2:b3:6a:8e:99:75:25:1d:b7:fc:77:39:
         8b:b3:cd:7e:4e:d5:4a:2d:19:8d:42:44:0a:23:a9:bb:78:de:
         76:cf:99:b9:6e:b3:10:d3:dd:28:5b:ce:cc:42:9b:39:05:b3:
         7e:a3:cd:26:c1:03:71:2a:60:c1:10:b5:18:eb:a2:ba:49:0f:
         73:a4:fe:42:80:5b:e5:e9:d0:f7:73:ce:2a:1c:5b:17:e6:7f:
         14:56:05:ec:c9:00:4b:1d:be:bd:7a:99:41:32:48:88:c4:fd:
         fa:01:75:07:4e:e5:b6:93:e5:16:1b:10:9f:e6:cc:91:1c:59:
         a2:c9:4d:83:f6:2d:24:09:a3:49:2c:8e:e0:02:76:3d:85:a4:
         d6:09:bd:ed:8d:85:94:84:73:42:f9:b8:a8:80:65:40:7b:37:
         dd:92:35:e7:4a:b5:50:2f:73:d2:c1:13:e2:f4:e3:52:20:f3:
         25:69:aa:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 17 18:52:39 2026 by rpki-client