Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e08da60-3018-411f-82ea-ec3caa1d2cc3.roa
File:                     1e08da60-3018-411f-82ea-ec3caa1d2cc3.roa (raw, json)
Hash identifier:          NXcx++5CFNzcaB6mnu8uSZrUliYXJp3T6WHcDdQYBwI=
Subject key identifier:   DA:12:4A:97:81:39:ED:10:37:C8:D8:B0:12:04:CF:79:CD:9B:AC:B3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E70207973C8ADDD2DFF2DFE439E2BC465F0A524
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e08da60-3018-411f-82ea-ec3caa1d2cc3.roa
Signing time:             Fri 23 Oct 2026 00:50:09 +0000
ROA not before:           Fri 23 Oct 2026 00:50:09 +0000
ROA not after:            Thu 21 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1f::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:70:20:79:73:c8:ad:dd:2d:ff:2d:fe:43:9e:2b:c4:65:f0:a5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 23 00:50:09 2026 GMT
            Not After : Jan 21 23:59:59 2027 GMT
        Subject: serialNumber=3e744fae77a4eb0080becca533f65292d19aa0588542eabdafbdc80091117c10, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:48:15:77:e7:9f:c3:32:fd:4a:45:6d:a7:b7:
                    ae:c7:1c:a4:b4:52:37:bb:0a:b7:fc:2e:e3:1f:78:
                    f8:82:9c:6c:d6:ac:45:84:32:e9:c7:f9:ca:1f:20:
                    a9:18:00:90:b4:d2:67:91:07:e2:bb:83:0a:3f:d6:
                    04:06:05:d5:3e:d0:10:08:42:da:a8:38:30:db:e9:
                    70:8f:10:5f:91:27:1e:31:13:02:5a:8a:0b:ef:43:
                    6d:12:55:4f:5d:24:96:99:44:3d:b9:03:dc:84:30:
                    e5:f6:98:bc:1b:34:96:74:ae:8e:62:b1:c5:a4:2e:
                    3b:d6:2d:8a:ef:60:14:ff:eb:dc:82:36:cb:70:80:
                    e5:a3:98:d8:82:9e:26:7f:79:c3:be:72:1a:27:98:
                    64:f6:ca:7e:4e:f7:45:2f:a0:39:d3:f7:6f:22:2a:
                    4c:2a:d4:aa:aa:c2:c2:f8:48:ef:37:39:f7:e8:f5:
                    bd:0b:80:f4:08:eb:bc:ae:73:40:9f:35:9b:b3:f1:
                    d2:16:69:80:a1:7e:6b:0a:0b:19:a0:4a:09:58:dd:
                    9a:3f:e4:d9:50:17:1f:fd:c9:fd:39:74:0e:fa:1c:
                    6b:f9:d9:9c:c2:5a:7b:08:47:00:66:fb:d4:a9:69:
                    6a:f0:66:75:28:6f:bf:c2:5b:6a:56:8a:85:9d:e4:
                    df:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:12:4A:97:81:39:ED:10:37:C8:D8:B0:12:04:CF:79:CD:9B:AC:B3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e08da60-3018-411f-82ea-ec3caa1d2cc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1f::/37

    Signature Algorithm: sha256WithRSAEncryption
         38:0c:c1:86:17:6e:bd:43:bf:77:a0:85:3b:3d:e8:43:29:2a:
         7b:2b:6c:2b:56:65:9f:87:eb:be:7f:f1:f4:db:0e:0d:b2:58:
         82:99:60:e2:0c:8c:4f:19:f4:fc:65:06:04:9c:a1:f2:25:ac:
         97:98:8b:64:f7:31:3d:1b:0c:24:b8:26:38:9c:30:99:8c:ec:
         c4:ec:bc:98:3a:9c:4c:58:df:20:06:27:68:ae:3e:2c:98:b6:
         3f:f2:2d:7e:86:57:2f:a9:10:22:4b:dc:69:fb:db:54:ad:c6:
         31:b2:0d:dc:8c:51:d4:89:c5:73:dd:5a:a3:77:35:13:68:59:
         1a:aa:81:e9:ba:19:85:84:da:c8:14:85:80:76:24:cb:aa:90:
         65:3d:70:fb:94:5d:1c:d8:1a:a3:74:67:a3:b6:7c:b5:81:24:
         09:dc:6d:ca:ac:d0:88:54:75:f5:95:2e:fe:56:13:0b:e1:05:
         2e:a8:6c:7a:a5:0d:65:71:9a:c4:c5:e4:c1:00:df:cf:12:a7:
         ba:a7:36:98:55:eb:d1:99:11:36:3f:50:6b:a5:9d:3d:6d:66:
         d2:29:f0:ff:ee:07:2f:8f:66:de:65:ad:d3:b7:26:e1:57:f6:
         32:57:dd:55:3a:50:95:4c:d1:de:b6:f9:d4:a9:23:6a:39:a1:
         0d:35:25:af
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Oct 31 03:24:38 2026 by rpki-client