Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a5a6154-ac4f-4a82-a2d0-c505b2b8e53d.roa
File:                     2a5a6154-ac4f-4a82-a2d0-c505b2b8e53d.roa (raw, json)
Hash identifier:          FyBHq0CRbE7m2QruM/7HJfD382rMDVANadpYXIqUWb8=
Subject key identifier:   C3:D5:D7:30:31:3C:BF:C9:68:01:80:89:0C:A6:1C:89:86:9D:BB:4D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       242209F150E818D6988D3BCFA9DE3EB6CE1DCD63
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a5a6154-ac4f-4a82-a2d0-c505b2b8e53d.roa
Signing time:             Fri 09 Oct 2026 01:06:21 +0000
ROA not before:           Fri 09 Oct 2026 01:06:21 +0000
ROA not after:            Thu 07 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fea:7400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:22:09:f1:50:e8:18:d6:98:8d:3b:cf:a9:de:3e:b6:ce:1d:cd:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  9 01:06:21 2026 GMT
            Not After : Jan  7 23:59:59 2027 GMT
        Subject: serialNumber=1771a84bbf1254f462acb215a7f048eba10524bc190fbad4c3a6d985b48a49b3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:da:da:7b:bb:94:51:a5:55:c2:c2:9d:e1:06:
                    93:ff:e2:96:38:13:d9:c7:59:87:f6:0e:b9:da:cf:
                    60:70:5c:ff:cd:b9:ad:8e:64:fb:d0:d0:5d:44:82:
                    0f:cb:65:16:43:24:2c:b4:c8:b1:b6:04:45:97:2b:
                    28:95:50:cd:09:ee:ca:d8:44:6a:1b:89:fc:ec:79:
                    51:21:9b:53:68:34:c3:e5:34:fe:29:87:3b:50:58:
                    ba:b9:29:53:19:77:af:e7:40:0d:a0:6d:79:b7:92:
                    bb:43:69:71:e9:f9:a0:3f:f4:f3:4c:a5:d3:a1:c9:
                    50:c7:56:45:ef:bb:11:e8:65:66:2d:0c:11:8e:6a:
                    d6:ec:08:96:8a:0b:e4:ed:f8:65:bc:22:39:bb:1b:
                    fd:8e:79:e2:69:a0:be:0d:aa:7d:0d:d0:56:3d:b8:
                    a7:20:29:4f:96:01:6b:a7:dc:3f:22:93:36:62:a1:
                    d2:74:34:51:91:5b:fc:21:3a:6f:97:4c:9d:3d:65:
                    e0:18:69:56:e3:b4:14:59:5f:9f:f1:fc:72:94:c5:
                    50:f0:1f:ac:40:04:bd:51:6f:91:99:98:db:fd:47:
                    71:ed:bd:e9:0f:29:16:3a:d9:c2:8a:af:98:cc:e3:
                    96:1b:27:df:b1:82:ee:05:d6:3e:b8:ad:02:79:90:
                    9f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D5:D7:30:31:3C:BF:C9:68:01:80:89:0C:A6:1C:89:86:9D:BB:4D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a5a6154-ac4f-4a82-a2d0-c505b2b8e53d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:7400::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:be:db:0b:4e:97:52:1c:c8:96:d6:49:da:50:86:38:0f:2a:
         23:d6:38:26:f4:a0:81:36:4e:0a:36:72:01:6c:ac:be:a3:8c:
         63:01:73:04:0b:dc:18:bf:de:b1:21:7c:27:fd:59:df:1d:08:
         ad:44:fd:c5:fb:13:df:6e:56:df:aa:a7:7e:46:a0:16:4b:ac:
         1d:0e:41:37:43:15:a2:16:08:1d:75:dc:09:1c:1e:da:38:7c:
         55:cd:07:49:13:c3:3d:a7:b8:0a:16:fb:17:70:53:28:e6:73:
         b7:e1:6d:98:44:78:94:2f:70:d2:a4:b4:cf:e5:03:96:e4:98:
         fd:86:0b:ef:66:d1:93:e9:f6:7e:65:42:15:6c:c4:8b:b2:1a:
         1d:1d:90:ba:3b:63:13:e5:06:3f:12:52:3c:0c:da:38:9e:4e:
         85:d8:7d:cf:75:bd:3b:7f:86:5f:07:2f:ae:af:9c:ec:44:d1:
         c7:cb:dd:60:8d:77:94:ef:b5:e2:7e:ed:35:dc:04:3e:e2:64:
         37:9a:a0:8d:01:ed:eb:1a:9b:c2:b3:53:d3:6c:d4:e1:a8:6f:
         93:6c:67:f4:77:fb:07:3e:1a:65:d3:f8:94:3c:1a:ee:c1:5b:
         d9:98:22:d5:0a:a7:e7:c4:2a:aa:e7:c2:c5:2e:9d:fa:c4:07:
         aa:93:47:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Oct 31 05:39:27 2026 by rpki-client