Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17c7f0c7-06dc-48f1-9024-2e064e010ed6.roa
File:                     17c7f0c7-06dc-48f1-9024-2e064e010ed6.roa (raw, json)
Hash identifier:          ur+zUsouh5n4dh4+0SrtvSz7e9mghubq//AHTy4Yf+U=
Subject key identifier:   8D:9D:92:04:C1:46:D3:08:39:8A:70:62:19:31:4D:22:76:77:39:9E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6B84917DCAB06556D2EAD0C986CB8CDC4204FD71
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17c7f0c7-06dc-48f1-9024-2e064e010ed6.roa
Signing time:             Thu 22 Oct 2026 01:07:17 +0000
ROA not before:           Thu 22 Oct 2026 01:07:17 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f00:8160::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:84:91:7d:ca:b0:65:56:d2:ea:d0:c9:86:cb:8c:dc:42:04:fd:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 01:07:17 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=4e0ce528a6c2f2669aa352877c6ac659c477c399a546fb4b7fdee3d5521588fc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3d:e9:9b:07:2c:8f:d2:26:a1:57:e8:48:70:
                    2e:39:59:a7:53:87:d0:86:4e:a3:6c:e6:f5:8a:7a:
                    99:66:dd:c4:0d:ad:75:f0:ce:49:9c:87:fb:eb:2a:
                    8b:d2:02:15:a7:37:4c:90:96:c6:f4:5c:a0:f3:38:
                    3e:78:bd:78:0b:b7:16:0b:08:a4:ab:7b:55:cc:18:
                    1e:ed:bf:ed:0a:45:0e:c4:f5:37:d1:41:5c:39:e3:
                    f7:1d:f2:03:e1:d6:17:41:7b:b8:32:06:ec:84:35:
                    ce:49:73:55:2c:4a:01:f7:b4:c8:99:e1:54:3c:b1:
                    53:3e:6b:a1:6c:36:6e:0a:27:21:13:14:62:e5:c8:
                    58:04:a9:67:c9:15:c0:df:39:b3:54:39:04:ec:45:
                    f6:46:44:f8:35:77:5c:75:9a:8d:0a:4d:b3:c4:46:
                    aa:35:37:78:65:7e:16:31:00:1d:85:9f:26:46:b5:
                    b5:a6:57:37:d8:95:d9:f8:43:08:44:e6:02:19:08:
                    87:ff:31:ac:0c:6c:0a:c7:f1:7c:8e:2e:2d:29:f8:
                    c1:db:b0:8a:4b:da:ae:2b:e2:2e:b3:4e:95:74:d3:
                    cc:54:81:a2:ab:c3:8a:d2:da:3c:6b:35:1a:d8:03:
                    75:28:aa:9a:2b:2c:71:45:62:52:ec:31:30:44:7f:
                    02:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9D:92:04:C1:46:D3:08:39:8A:70:62:19:31:4D:22:76:77:39:9E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17c7f0c7-06dc-48f1-9024-2e064e010ed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:8160::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:0b:38:09:33:eb:78:22:6e:38:f9:17:34:bf:a8:12:70:47:
         c7:b2:b3:64:53:bb:4b:b1:e5:ad:fc:00:3d:96:64:5b:0d:8e:
         7f:a7:82:b5:00:e1:22:47:b1:a6:4b:06:e5:e6:1c:a9:eb:0b:
         40:61:02:71:f6:88:7c:e3:60:7e:9e:2e:f6:d9:bb:8b:e3:07:
         26:c9:a0:d2:18:a4:47:a2:2a:56:65:18:60:76:5c:45:d9:e9:
         94:ef:68:aa:17:e4:0b:26:d4:cb:dd:cb:93:fa:2a:8d:42:4c:
         dd:05:05:6b:b9:5c:bb:35:67:c2:12:d3:82:cc:6c:21:98:ac:
         5d:a4:4a:30:57:05:5c:cc:c5:f5:a5:4e:80:36:25:2b:e2:95:
         1c:f8:40:d6:94:d0:87:53:41:c6:d1:c3:4b:59:85:00:e9:77:
         8c:33:19:6c:50:ae:fd:77:59:c7:a6:e9:63:0a:13:12:7e:c5:
         a5:c4:e6:9c:f7:34:03:01:27:0e:b8:45:bf:4e:5e:3c:e3:77:
         d3:51:15:ed:63:bb:02:e9:cd:e4:e3:72:b0:fd:d3:d3:54:aa:
         10:a0:6e:2d:48:ad:76:c0:62:4c:ab:3a:2d:f4:90:5b:69:ea:
         aa:63:98:a8:01:7f:4d:12:62:15:b1:a3:36:e8:90:ed:42:34:
         02:43:0c:09
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 2 22:30:29 2026 by rpki-client