Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31263499-132a-4222-9382-b584a30ccae1.roa
File:                     31263499-132a-4222-9382-b584a30ccae1.roa (raw, json)
Hash identifier:          buQlfydKmis1hB3y2ZaUWFuXl7NKWfuHN85YHZEZ2m4=
Subject key identifier:   6F:F4:89:FC:18:D8:EF:C1:19:80:9B:0D:B3:07:0F:0C:58:60:69:07
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       62D72A297C51325EBA9D644F842ACFA70567D7D7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31263499-132a-4222-9382-b584a30ccae1.roa
Signing time:             Tue 04 Aug 2026 00:20:13 +0000
ROA not before:           Tue 04 Aug 2026 00:20:13 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f28::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d7:2a:29:7c:51:32:5e:ba:9d:64:4f:84:2a:cf:a7:05:67:d7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 00:20:13 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=63626046c6d13733caf1a816e9dae3fc65dfef33f3d34f4547f6125f037e82ed, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:26:ee:94:1e:8d:f0:2d:05:c2:98:bb:72:0b:
                    b0:6d:30:d7:8d:bc:2f:51:bb:55:22:ad:e6:4a:21:
                    a0:ad:f4:fd:92:4f:1a:4a:30:0c:a8:45:75:0b:6c:
                    69:02:c6:82:ce:da:dd:4b:f5:bd:d9:32:66:be:e5:
                    52:00:4d:0a:ba:7d:69:7c:26:dc:ff:2e:2c:96:52:
                    e4:37:53:f2:35:65:93:c1:ce:25:7a:ab:e6:8f:a8:
                    9e:c3:41:4d:23:b2:bf:5f:fc:67:66:d3:52:e4:a8:
                    92:ac:f2:57:e6:4d:d7:26:70:7a:be:6a:5b:d0:7a:
                    a7:43:d7:c6:d2:14:a9:be:62:06:13:f8:33:1a:9e:
                    3e:d5:2b:35:00:13:90:0f:62:33:f1:5d:7d:fc:06:
                    60:bf:2c:70:76:87:4e:2b:b9:0e:4e:83:9e:2c:9d:
                    7c:67:df:e5:5e:43:6c:01:81:f2:74:57:14:2c:d9:
                    75:1c:7b:2c:df:ae:a8:a4:5b:a3:a4:0a:1d:2b:2a:
                    12:ce:3b:bd:5f:46:df:28:7d:41:8f:9f:59:51:c5:
                    3c:5b:d5:1f:bc:1b:1d:2f:48:89:12:a6:7c:c3:f7:
                    7f:e5:b8:4c:e9:2e:e9:70:b1:64:14:e1:7d:84:9d:
                    f4:2c:29:81:06:ca:99:8b:85:c4:b2:20:32:74:e5:
                    44:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F4:89:FC:18:D8:EF:C1:19:80:9B:0D:B3:07:0F:0C:58:60:69:07
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31263499-132a-4222-9382-b584a30ccae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f28::/36

    Signature Algorithm: sha256WithRSAEncryption
         8b:55:d6:82:03:6f:ee:ee:07:6d:9f:39:db:6f:8a:97:ee:6b:
         03:c6:a4:2f:78:d5:19:6b:71:6e:f8:d5:8d:a2:ad:22:8c:e7:
         ee:5a:ac:c7:11:57:5a:c4:5d:26:e4:75:49:59:e9:bc:10:36:
         51:b1:11:88:81:6c:1b:a7:43:52:7d:9e:9a:0b:35:e2:87:f9:
         7e:be:65:54:e6:22:49:2f:de:42:35:f3:40:25:0e:43:87:f9:
         19:6e:dd:64:ef:74:34:ff:d7:18:ee:bb:0f:6b:ea:ba:69:f6:
         34:57:e4:ae:1a:6f:fa:aa:c7:fc:83:12:ed:1c:8c:6c:20:4e:
         ce:66:0f:ec:de:1e:15:ba:b4:0c:65:6a:51:17:80:39:fc:c5:
         79:29:ae:e7:65:e1:75:41:47:4e:4a:76:d1:65:e3:2a:52:13:
         2e:d0:6f:ee:e7:23:95:57:b7:c3:ac:49:11:ef:66:20:e0:6c:
         81:67:a3:cd:66:a4:87:e8:6a:8e:5d:6f:15:bf:ef:9a:fe:71:
         a7:38:65:47:b8:08:b1:17:a4:90:8a:1c:9e:66:8a:17:e3:04:
         f9:bc:f2:55:f2:cf:28:ab:54:ed:6f:b0:9b:e6:fa:2a:db:a0:
         7f:fc:f9:9f:44:46:22:0c:04:5d:45:27:a1:64:89:fc:04:4c:
         60:46:5d:64
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 19:46:55 2026 by rpki-client