Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e472cb3-ec74-4631-bcae-1473aa47a379.roa
File:                     1e472cb3-ec74-4631-bcae-1473aa47a379.roa (raw, json)
Hash identifier:          U8SLZV/+Off2cR/RZVFGgMyBfY8SC4stQfP6O3XS8yo=
Subject key identifier:   A8:79:09:47:A1:74:22:DE:FD:FD:C1:06:E2:40:15:82:8A:2B:65:F7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       139E3BBC41BB70CFAB618C2FED4F2DAF3DC07533
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e472cb3-ec74-4631-bcae-1473aa47a379.roa
Signing time:             Wed 05 Aug 2026 00:10:12 +0000
ROA not before:           Wed 05 Aug 2026 00:10:12 +0000
ROA not after:            Tue 03 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:8040::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9e:3b:bc:41:bb:70:cf:ab:61:8c:2f:ed:4f:2d:af:3d:c0:75:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 00:10:12 2026 GMT
            Not After : Nov  3 23:59:59 2026 GMT
        Subject: serialNumber=0c6ec554c6ceb67e622b695d135a0bff27c6d7bcf06237afc5a9bf0019d76cf6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ec:57:9f:97:75:b2:6f:c9:08:09:ae:d4:75:
                    02:5e:9d:62:6f:5b:07:e0:f1:ab:74:ad:e1:0f:11:
                    19:89:10:a3:8f:a8:a2:a0:54:75:cc:f1:86:80:ce:
                    1f:0c:4e:df:ed:5d:9c:93:3e:e9:7d:71:17:2a:ba:
                    b7:17:7f:c8:cf:a3:67:9e:87:26:6c:67:fc:82:44:
                    ac:e7:1c:54:87:09:f1:61:81:74:49:6e:76:33:00:
                    ee:2a:a5:9f:68:98:7a:ae:b4:71:92:65:f1:52:ca:
                    e7:be:bb:bd:20:28:66:86:20:6d:48:51:58:fa:c8:
                    bd:9c:f2:b7:92:94:78:b1:f7:57:6a:50:3c:ca:4d:
                    e5:ac:a7:a3:9e:57:60:e6:60:1d:a9:ed:4c:12:4f:
                    d6:1a:9c:f9:23:88:c4:0d:26:c5:54:d6:80:a3:6f:
                    94:3f:95:a9:91:59:34:2f:39:90:5c:25:3f:69:96:
                    85:dc:50:93:86:9e:e1:f4:11:0b:75:96:67:4f:3e:
                    51:5c:51:77:81:a0:40:66:6b:56:32:a4:6b:bb:4b:
                    0d:2b:1c:13:21:f4:73:59:5b:a0:46:41:77:cb:db:
                    15:47:12:97:c4:4d:fe:3c:45:a8:a8:62:59:9c:54:
                    f2:ec:8d:02:68:79:99:21:21:b2:ed:72:8f:e6:19:
                    90:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:79:09:47:A1:74:22:DE:FD:FD:C1:06:E2:40:15:82:8A:2B:65:F7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e472cb3-ec74-4631-bcae-1473aa47a379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:8040::/46

    Signature Algorithm: sha256WithRSAEncryption
         85:f0:c3:47:47:03:91:d4:ee:41:81:88:bb:72:13:b6:b1:c1:
         bf:98:50:5c:7d:f4:4a:d3:bc:fb:ec:46:97:62:6c:69:77:85:
         4b:a6:ce:7f:a0:cc:20:3c:2f:1e:71:69:b1:f6:8f:3d:5a:43:
         b9:0c:96:45:2a:e8:b0:73:94:05:3d:9c:94:2e:74:25:d8:97:
         4b:4e:e3:cc:1a:a4:cd:af:f3:3a:ce:1f:6d:4b:33:df:7b:1d:
         78:35:f4:1f:1d:02:8d:8c:b2:1e:ff:17:e6:49:dd:39:c7:e0:
         28:09:5c:c9:5a:84:f4:5d:d5:bf:92:5d:70:d3:1b:be:25:2d:
         3b:16:2a:47:6d:2b:7c:59:48:72:7e:d4:52:ef:84:f5:da:38:
         f6:e1:9c:15:4e:6f:e2:04:b8:09:51:13:59:33:ba:8a:17:8b:
         8b:ac:43:d6:36:4e:8d:6d:a2:4b:57:11:c5:5c:b2:01:f1:f6:
         dc:70:d3:b3:3e:14:64:0d:38:bc:73:a9:9c:83:02:ca:df:44:
         48:dd:4a:3a:05:f5:f4:2e:c4:86:91:b5:8c:07:68:94:59:a1:
         00:0c:fc:fb:99:e9:b4:6e:1b:66:58:e2:42:0a:56:8f:9d:88:
         58:ba:e1:9c:28:1d:b7:e5:ef:c2:01:14:f2:2e:de:cc:e0:84:
         f2:0b:43:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:21:21 2026 by rpki-client