Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/271e21d3-7150-47c8-982a-f53b364d1cec.roa
File:                     271e21d3-7150-47c8-982a-f53b364d1cec.roa (raw, json)
Hash identifier:          9CwHVjodeK2+AYTJzlbm1PN41GOWUpHHi296IVCiWkM=
Subject key identifier:   71:7C:1A:13:5A:5D:B0:9A:19:4B:DF:9D:C3:16:E8:B6:91:1D:F0:C8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2358E68BA8BA53BCE6B9759F0EF409569426E169
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/271e21d3-7150-47c8-982a-f53b364d1cec.roa
Signing time:             Thu 22 Oct 2026 02:10:08 +0000
ROA not before:           Thu 22 Oct 2026 02:10:08 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:4080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:58:e6:8b:a8:ba:53:bc:e6:b9:75:9f:0e:f4:09:56:94:26:e1:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 02:10:08 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=acd6569c28bf3975a8a81f6230f355a00b5628cb1a978b0a59b896f6a550b829, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:be:40:02:fe:c7:86:45:6e:49:82:cf:f2:72:
                    8a:c9:2f:e3:1e:c1:f5:1f:b7:d8:3d:5a:ed:38:c6:
                    c4:ba:88:06:b5:9c:93:b1:07:d1:06:e2:49:b3:8c:
                    65:7e:aa:bf:a3:5a:28:87:e8:57:44:c2:04:2f:62:
                    55:ef:5d:97:d9:f3:25:ae:f5:91:88:f8:6e:ea:af:
                    39:b0:54:e8:fb:0b:7a:69:f4:8c:61:84:0e:e7:f0:
                    c5:d3:dd:8e:86:f3:a0:de:1b:90:e7:f2:0d:5e:1f:
                    1e:49:26:3b:57:ed:c6:1f:3a:ea:f5:05:4a:14:4c:
                    a8:3c:90:4c:6f:8a:b1:43:59:9f:77:93:eb:40:00:
                    60:6d:37:dc:af:26:4c:1d:f2:37:d2:00:b3:83:14:
                    55:93:84:7a:ca:5f:36:23:aa:28:ff:4c:33:82:42:
                    83:b4:8a:d8:f6:45:14:51:6e:03:bb:90:a5:a6:b7:
                    25:11:4b:82:be:8b:af:27:96:11:b6:8d:7a:f1:b8:
                    9d:51:89:44:41:cb:e6:98:0d:aa:b7:d3:c8:14:12:
                    5e:05:54:23:81:5b:6f:45:05:4a:a6:88:a8:4d:32:
                    38:21:63:8f:81:73:76:f4:a4:4f:53:33:f1:94:e8:
                    82:fe:b0:6e:db:8e:dc:ea:b9:b9:4d:9d:3e:79:bc:
                    47:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7C:1A:13:5A:5D:B0:9A:19:4B:DF:9D:C3:16:E8:B6:91:1D:F0:C8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/271e21d3-7150-47c8-982a-f53b364d1cec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:4080::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:39:d9:f6:16:7a:ab:57:8b:c8:a7:76:0f:4d:73:c9:9a:57:
         04:c7:ed:2a:e8:6b:f4:d3:da:cd:a7:b7:1e:16:c5:4e:b5:e0:
         0c:6d:af:6e:75:50:41:4c:e6:04:49:4d:c7:5a:00:d3:be:49:
         94:17:01:67:c7:bd:d0:db:89:4b:6b:fa:38:9a:8c:f7:ff:93:
         c2:12:92:8e:8d:6f:ec:db:55:f3:c0:98:da:e3:a4:20:5d:bb:
         21:8e:4e:82:52:37:0a:7b:76:33:73:cd:ca:f9:27:07:41:9f:
         8c:25:8b:73:68:ab:3a:e1:65:6c:d4:31:1e:8e:e7:db:ec:4e:
         5c:83:0b:79:13:ab:ad:b7:ab:24:e2:0e:cd:45:7c:66:2f:60:
         26:1f:f0:d8:79:3e:65:3c:8e:01:c3:56:04:b9:19:13:3e:e6:
         18:b8:50:79:a9:e5:ee:db:25:0a:34:2e:38:52:55:d7:4d:bf:
         4c:82:35:f5:18:06:1e:23:9f:c2:ef:1b:b5:8f:c1:c8:fb:64:
         33:a2:1e:06:f0:87:09:23:1a:ea:c8:d2:d3:4b:3d:68:16:d0:
         44:2a:58:95:67:7f:19:d8:9d:43:4b:eb:e5:9b:16:0a:3d:61:
         3d:7a:b6:ce:05:3a:1c:8c:66:f1:79:32:01:2c:1f:ab:65:fc:
         9b:6f:3d:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 31 09:40:53 2026 by rpki-client