Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41c9d86a-6da9-4901-b888-4b83d29a1340.roa
File:                     41c9d86a-6da9-4901-b888-4b83d29a1340.roa (raw, json)
Hash identifier:          YfkBvw5o03Qo4kzxN0njHB5P1cUSLTIWZV9220SBp8o=
Subject key identifier:   E0:2F:C4:45:CC:EE:FA:9A:CF:EB:7C:3A:AF:F1:B9:AF:05:0F:B8:4F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       45A24CE154DB7FB32CADBF6FC137E860BE01C4A5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41c9d86a-6da9-4901-b888-4b83d29a1340.roa
Signing time:             Wed 26 Aug 2026 22:23:08 +0000
ROA not before:           Wed 26 Aug 2026 22:23:08 +0000
ROA not after:            Tue 24 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1e:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a2:4c:e1:54:db:7f:b3:2c:ad:bf:6f:c1:37:e8:60:be:01:c4:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 26 22:23:08 2026 GMT
            Not After : Nov 24 23:59:59 2026 GMT
        Subject: serialNumber=6bac71fe09ce62f6f9ab61ce7595be89bfd537195c7cc5d76abd558fbffc64ad, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1d:1a:6c:0a:f8:41:fa:3a:1f:f3:41:30:70:
                    3f:d2:64:50:01:5c:6d:c3:89:70:45:52:2a:7f:e0:
                    2d:09:dc:cf:eb:ef:9d:0b:5b:6a:89:9e:0a:d2:cd:
                    80:b8:07:3a:cf:8e:60:04:62:9b:14:e9:1f:b9:51:
                    7d:93:88:26:ce:b3:01:04:c7:81:75:49:3b:df:e9:
                    9f:01:55:25:14:fa:89:91:ce:8e:b0:09:d2:fd:a0:
                    e9:31:17:e2:e0:6c:5e:ce:ae:a1:9b:0a:52:e1:8c:
                    83:d3:b1:ae:25:28:d4:55:04:9a:13:4e:77:c4:e2:
                    8c:6a:4f:93:bd:e3:fb:f2:d5:03:60:3b:7f:3f:f0:
                    5d:9a:6f:b1:82:9b:ad:41:80:f6:01:4b:2e:08:ac:
                    47:ce:e6:c5:3a:e4:d6:e9:e8:b3:82:00:05:a4:d1:
                    02:a0:42:31:a6:fe:fe:3e:8d:cd:57:3d:5d:4e:b6:
                    a8:89:78:75:dd:c4:ab:21:4c:77:03:67:7f:dc:0c:
                    39:6b:ca:24:fd:6a:eb:f2:b1:21:6b:c6:67:b9:65:
                    cf:14:ac:4b:7f:c1:10:88:6e:73:aa:37:49:ce:b7:
                    de:da:5d:19:84:13:2c:a0:a0:01:fb:bb:8e:fc:46:
                    9f:68:f8:32:4b:3f:1f:af:cd:6a:c5:f4:0b:de:d7:
                    32:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2F:C4:45:CC:EE:FA:9A:CF:EB:7C:3A:AF:F1:B9:AF:05:0F:B8:4F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41c9d86a-6da9-4901-b888-4b83d29a1340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1e:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         94:51:df:00:4f:00:fa:39:b4:87:27:44:88:38:63:cf:3a:22:
         17:5c:de:0d:b3:b2:b0:21:2a:a7:18:53:a9:1a:de:7e:5c:32:
         f3:37:73:17:2e:d0:49:a0:c3:6c:2f:72:8a:09:81:2a:d1:b7:
         87:b5:ac:46:c1:ba:3d:b1:97:0c:47:3b:18:5e:51:d7:b6:70:
         6c:3c:7a:ca:cb:32:9a:94:c1:40:9a:2b:5b:63:7f:19:b6:c1:
         f9:7c:22:4d:37:a7:9a:6c:83:5a:be:63:1f:05:ab:3b:bc:d7:
         7a:e9:c0:1b:6c:0b:df:ef:44:70:99:24:ec:8e:59:22:5f:58:
         ae:cc:3e:e7:74:67:44:20:db:ed:7b:46:e7:71:75:de:4c:88:
         05:39:ba:ac:66:1a:35:20:2b:24:85:83:10:5c:5b:31:6d:95:
         60:14:f7:76:6d:1a:fc:e4:d5:f2:93:47:3b:c6:61:49:56:80:
         2e:19:14:3f:39:13:ac:26:2c:54:6d:76:e9:49:f7:3c:7d:a4:
         a6:bc:8f:f8:18:37:36:cf:2c:30:25:fa:8d:60:f9:9b:55:55:
         de:3a:09:9e:32:f0:29:5f:ec:b9:b6:66:1b:28:7f:72:c5:25:
         5b:26:fb:48:dd:0d:39:5c:9e:3c:1a:bd:a6:d4:2e:13:d4:dc:
         0d:1c:0c:35
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:17:10 2026 by rpki-client