Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1af8cc76-d159-475f-a380-ae8308c96909.roa
File:                     1af8cc76-d159-475f-a380-ae8308c96909.roa (raw, json)
Hash identifier:          0rP6MByyMbXlB/Xz4Q3LKSICeY2ZeuuIsASAjqKHMyc=
Subject key identifier:   DE:2A:BD:A0:44:8E:F2:85:A7:8D:84:8C:DC:3B:84:4A:2F:79:9D:BE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       56EFFDEB8BA4611BC024D0528BF49F632653142C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1af8cc76-d159-475f-a380-ae8308c96909.roa
Signing time:             Tue 18 Aug 2026 18:04:54 +0000
ROA not before:           Tue 18 Aug 2026 18:04:54 +0000
ROA not after:            Mon 16 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f33:4000::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ef:fd:eb:8b:a4:61:1b:c0:24:d0:52:8b:f4:9f:63:26:53:14:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 18 18:04:54 2026 GMT
            Not After : Nov 16 23:59:59 2026 GMT
        Subject: serialNumber=b37477b372bd0e304f351759626ff708b17186062be27983e553b15980014839, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0a:f0:14:cf:cc:2f:bf:39:31:c9:f1:d3:aa:
                    8f:03:9f:8b:2a:00:03:50:ae:9a:ef:28:42:0d:7f:
                    ad:bc:c7:3c:60:d6:03:bc:ba:d2:0e:88:c3:7b:ea:
                    a6:6e:03:a2:6a:8d:66:20:a6:4f:50:34:3c:3d:14:
                    fb:48:51:c6:6e:a7:2e:55:b9:17:6d:3d:8b:4f:2f:
                    27:6c:0b:b0:44:3f:f0:11:02:3d:1e:53:81:c1:c3:
                    92:35:7f:29:5c:52:18:b5:3b:fe:3b:9d:7d:2d:db:
                    b4:8f:cf:dd:75:23:ea:77:28:b2:d6:cc:25:ef:6d:
                    4d:71:90:c7:7f:42:64:02:f1:2b:60:51:7b:df:b6:
                    3b:81:c7:f9:45:c9:81:b5:37:cb:e6:61:23:58:03:
                    51:10:c0:96:13:ff:3a:50:65:59:3b:2c:f8:7a:5e:
                    5e:9e:c9:4c:72:c4:87:ac:df:5a:4b:f5:3a:12:56:
                    9b:ec:fd:9e:20:70:b2:56:3d:18:47:9e:c3:59:b3:
                    0e:3a:ba:38:e9:58:4a:75:ab:95:ae:83:bc:6d:53:
                    b0:fe:85:28:d7:7d:6f:ff:da:b0:9a:c9:d0:de:d1:
                    e2:bd:e4:f1:43:88:75:f1:f6:83:7b:c0:80:29:6a:
                    5d:66:91:03:d0:1e:c5:c1:53:f4:37:5b:c3:23:8e:
                    aa:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2A:BD:A0:44:8E:F2:85:A7:8D:84:8C:DC:3B:84:4A:2F:79:9D:BE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1af8cc76-d159-475f-a380-ae8308c96909.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f33:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         1d:35:44:21:c9:9d:b7:c7:d6:19:00:c2:f6:84:22:6e:2a:83:
         04:df:a3:16:91:4f:0c:df:f2:d1:75:5d:d8:be:bf:5e:b9:98:
         77:97:f3:1c:6f:94:e9:d7:6b:20:7a:d6:43:ca:76:3f:5e:08:
         d1:62:55:62:74:06:9b:32:8f:2d:d3:45:90:58:3f:01:68:e9:
         c0:f0:98:71:41:ff:18:98:8c:59:13:e9:9c:52:00:1c:7e:51:
         e7:93:e0:f4:3c:ad:05:97:45:53:f0:5d:7a:c4:18:4c:19:6d:
         f2:44:9f:3c:8e:ea:48:5d:2d:1a:ef:36:dd:71:0f:d3:cd:dc:
         20:bf:33:82:cb:28:96:ce:38:bc:d0:8b:a3:9f:db:90:73:ec:
         8f:e2:ba:e7:73:c2:71:62:95:4d:32:a1:57:b8:bb:a4:9d:70:
         cf:88:4d:74:e2:48:fc:45:42:a1:4d:63:70:ed:45:f6:c2:85:
         35:a4:d6:8f:a9:ea:45:5a:97:bd:16:73:ac:e6:22:4b:9e:81:
         95:40:83:50:fa:99:c9:b9:f6:b3:b3:65:42:f2:4c:94:d4:1f:
         2c:86:c9:3a:c8:14:b9:01:3e:3e:64:b8:81:6a:dc:23:f0:f7:
         1f:ae:28:b3:5e:50:f1:1e:a4:96:e0:cb:d3:09:b8:0f:f1:01:
         af:7d:e1:72
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:17:19 2026 by rpki-client