Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12eeecce-43b5-4e63-bd00-bd339decf27e.roa
File:                     12eeecce-43b5-4e63-bd00-bd339decf27e.roa (raw, json)
Hash identifier:          5jake2jPyFRecwr1CEg6Ph56WisXtB2N9Eu+5BPXssY=
Subject key identifier:   5E:8A:E3:AD:8F:85:37:14:DE:11:24:D6:B8:FD:AA:92:CD:31:44:5D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       63F4DB66349AF378366975309A10E899B205EC80
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12eeecce-43b5-4e63-bd00-bd339decf27e.roa
Signing time:             Wed 09 Sep 2026 16:05:16 +0000
ROA not before:           Wed 09 Sep 2026 16:05:16 +0000
ROA not after:            Tue 08 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fe7:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f4:db:66:34:9a:f3:78:36:69:75:30:9a:10:e8:99:b2:05:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  9 16:05:16 2026 GMT
            Not After : Dec  8 23:59:59 2026 GMT
        Subject: serialNumber=8878083c223e2819a4b164cd409251b6c1ee13401588ddbb584c0484fdccbaef, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:9b:90:71:26:18:fc:22:9e:45:45:19:1d:
                    cb:6c:4d:79:f5:3b:09:5a:dd:63:0f:46:8b:9c:81:
                    34:f0:20:9f:5b:1d:3d:8a:80:ce:b7:ad:de:c9:88:
                    3f:7b:c6:b6:2e:29:cd:12:d2:ac:eb:62:05:1d:66:
                    df:ff:f8:64:a9:73:a5:3c:4d:9e:f0:00:85:b1:fb:
                    8f:53:83:b2:9a:89:e1:4f:8d:77:f9:e9:ee:12:e2:
                    f4:13:46:60:19:04:7a:0f:52:d1:e5:ff:36:ce:b1:
                    7c:61:96:40:1e:1f:15:06:b1:c4:be:21:56:29:0b:
                    47:ad:d3:61:db:86:16:a8:fd:74:09:3d:56:87:f5:
                    69:32:77:71:25:23:f3:c1:e0:30:7e:dd:71:d5:96:
                    c7:fc:ca:90:ca:29:a8:2a:30:0f:c8:9d:68:85:10:
                    ae:e7:e2:db:15:bf:1d:68:0c:c2:53:c0:b1:ef:ca:
                    29:3b:93:3a:49:55:03:69:b1:ae:7e:34:f8:f4:5d:
                    95:d3:18:f0:4d:77:be:c5:b4:93:e8:5a:be:e2:86:
                    85:33:9f:77:a6:33:58:3b:72:07:0d:e1:3c:49:68:
                    b5:99:ae:cb:9a:8f:0e:0d:ac:a1:91:50:86:83:b4:
                    82:e1:36:ad:91:ed:12:bd:87:9c:77:b0:a2:05:77:
                    1f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8A:E3:AD:8F:85:37:14:DE:11:24:D6:B8:FD:AA:92:CD:31:44:5D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12eeecce-43b5-4e63-bd00-bd339decf27e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fe7:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         04:6e:34:6d:59:79:a3:80:d1:8f:e3:ee:8d:f5:87:39:6a:b9:
         a1:2a:ff:47:f6:f5:dc:4c:42:9f:88:2f:19:c6:3d:33:a5:a5:
         60:06:df:ea:47:fe:5f:62:a0:12:15:07:4d:e3:a4:89:d0:dc:
         ee:4d:2c:ef:1a:ad:a2:5d:ad:70:6b:8e:06:df:fe:7a:9a:f3:
         90:3a:8e:7d:b0:73:e2:71:7a:3f:8f:8a:a4:4b:1e:2f:63:90:
         43:75:1e:05:8e:91:7c:e6:8d:f4:e5:70:6b:87:b1:f2:8f:16:
         c5:76:3f:39:d1:59:9a:66:ba:65:3a:7f:22:57:66:c4:5b:40:
         da:18:90:87:2c:3e:cc:e1:df:85:0b:0b:9d:9e:93:2d:30:03:
         08:b3:26:d1:a3:fc:c3:16:95:c3:11:d2:04:89:10:92:a9:0b:
         73:8b:9f:02:36:98:33:fe:47:8b:d2:57:b2:3f:97:5b:6a:5a:
         67:d6:9f:10:3f:11:4e:7f:ad:ba:27:00:07:1d:29:21:3a:48:
         85:4f:31:f2:d8:4a:98:12:e3:1e:22:ec:90:f4:4b:b6:04:d1:
         3a:cb:05:52:b5:b5:80:4f:e3:ff:6c:ac:c9:2a:a9:d4:6c:f7:
         67:fc:c6:56:8f:9c:8e:48:14:5c:37:35:4f:0c:ee:d4:cf:9e:
         0c:59:03:d2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 11:36:32 2026 by rpki-client