Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/317aa5f2-e2fd-44a6-8ee1-f18aa61c0689.roa
File:                     317aa5f2-e2fd-44a6-8ee1-f18aa61c0689.roa (raw, json)
Hash identifier:          EA0EMFrruBCKLnh3d6uyrRJppOk+VDp3V4bi8C8shrs=
Subject key identifier:   11:3D:01:65:77:B8:DE:1F:8B:CA:D6:98:2D:5A:17:45:4D:E5:7D:51
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3061254FBAF0C38B71F93BC1F01BEA6F3BC18D2E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/317aa5f2-e2fd-44a6-8ee1-f18aa61c0689.roa
Signing time:             Tue 04 Aug 2026 02:20:12 +0000
ROA not before:           Tue 04 Aug 2026 02:20:12 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f11:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:61:25:4f:ba:f0:c3:8b:71:f9:3b:c1:f0:1b:ea:6f:3b:c1:8d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 02:20:12 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=76416008ee9630c8d6802de60b55d0cfec80dc5c58c122000601a5137c55ed42, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:28:f2:92:29:86:e5:97:ac:bb:58:15:26:b0:
                    2b:fa:75:c8:40:93:f5:6a:82:c6:f9:a5:b0:2b:05:
                    d1:26:59:c7:b9:35:70:12:af:9f:c4:c6:c2:49:ba:
                    8c:67:7d:c3:57:ea:a6:63:06:9b:0b:20:92:70:b1:
                    53:14:3f:ad:26:9d:25:7b:92:69:4b:07:4a:39:9f:
                    f3:6a:dd:fa:6c:c9:35:3a:e8:95:24:c9:1f:52:29:
                    49:bc:c1:df:e0:d8:71:09:65:52:b3:72:ff:b7:d8:
                    f2:57:42:80:6c:de:f8:ad:98:fc:56:2c:bd:d9:aa:
                    25:c4:62:68:fb:9a:b9:2b:6a:ef:22:4b:34:5b:88:
                    13:d3:cd:d7:d7:40:6d:28:27:b7:bf:63:89:15:a9:
                    b1:28:6e:20:57:ff:5a:8b:36:00:1d:56:6d:a8:13:
                    c7:6a:e9:b5:8a:aa:13:f6:f0:62:6b:75:a1:ef:98:
                    ec:36:91:48:2d:3d:44:99:c5:4b:59:7f:4d:64:30:
                    39:c9:c1:73:56:98:d8:93:e7:60:09:fe:6a:cc:9c:
                    86:30:94:0c:07:41:2f:92:3b:2a:d4:f9:52:14:a6:
                    36:14:b0:c3:15:ff:17:1b:5a:1b:e5:66:0d:dc:24:
                    a7:e2:4e:cf:7e:f9:88:90:f4:49:d7:7d:7a:64:d1:
                    7a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3D:01:65:77:B8:DE:1F:8B:CA:D6:98:2D:5A:17:45:4D:E5:7D:51
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/317aa5f2-e2fd-44a6-8ee1-f18aa61c0689.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f11:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         bb:0b:a7:d8:eb:a6:5f:6a:7d:67:8a:aa:f0:f4:cf:84:c4:56:
         8e:44:29:7a:12:18:01:7b:fd:32:35:30:cb:6d:9f:d4:e8:8b:
         b3:5a:8b:da:fd:87:47:c2:48:54:61:ce:92:a2:c0:5f:7a:e6:
         f4:d8:bf:71:a8:16:83:70:06:5c:2c:19:5b:f0:76:52:6f:13:
         08:a6:85:9f:ee:b5:5f:ad:9a:b7:08:99:f8:6f:f3:ee:9a:7e:
         e7:f0:91:74:73:70:5a:3b:6d:a2:6f:61:9e:f5:de:57:ba:a6:
         97:2a:21:02:e7:f3:9c:f1:65:e1:45:5e:bb:5c:10:99:1b:f6:
         75:19:fe:37:11:6f:27:26:bf:64:cb:65:2c:b5:fd:6d:e9:4a:
         20:a2:60:3e:7a:61:a1:01:d8:80:44:e3:39:50:52:c7:eb:3d:
         9b:5d:a1:fa:19:d4:d5:a0:dd:c0:35:92:46:4d:2c:a3:38:e5:
         44:23:71:bb:62:0e:8d:ac:dc:54:20:45:99:b1:3d:f2:73:a3:
         ba:4d:58:ed:12:94:8d:e6:09:49:fd:d4:7b:02:a2:d3:ff:da:
         30:29:71:9a:7d:96:2e:c7:a5:91:aa:af:54:27:07:4d:d5:12:
         52:68:8e:fb:71:29:a2:ad:77:12:20:37:26:51:3b:26:63:39:
         b7:58:10:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 17:06:05 2026 by rpki-client