Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43753e87-3163-42ab-a7d5-2bd22b5dc5de.roa
File:                     43753e87-3163-42ab-a7d5-2bd22b5dc5de.roa (raw, json)
Hash identifier:          iOWB5wQy53ma1s5IPKhcvm1vurZw0VnK42Jf6PqjWb0=
Subject key identifier:   19:4E:D2:AA:E7:0D:B2:47:9E:27:DF:CD:49:8F:CA:B9:95:0D:A9:D4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       76A2D7AEE67E30EB571AE7C3A2ECCF67AEF27FE8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43753e87-3163-42ab-a7d5-2bd22b5dc5de.roa
Signing time:             Mon 12 Oct 2026 00:30:16 +0000
ROA not before:           Mon 12 Oct 2026 00:30:16 +0000
ROA not after:            Sun 10 Jan 2027 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ff4:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a2:d7:ae:e6:7e:30:eb:57:1a:e7:c3:a2:ec:cf:67:ae:f2:7f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 12 00:30:16 2026 GMT
            Not After : Jan 10 23:59:59 2027 GMT
        Subject: serialNumber=c50805409214468601d6d1a64e86f3179c9562a2c82e71356d63a795f9537d5b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2b:76:ca:9d:13:63:af:53:fe:b7:e5:4c:ed:
                    40:d6:a2:5e:2a:d0:ab:7b:e0:f6:37:8e:01:d1:35:
                    a4:84:26:c2:c3:3d:eb:db:a2:5d:a8:dc:df:d6:c3:
                    1c:32:0c:35:7d:57:1d:ff:03:58:55:95:1a:c0:08:
                    80:59:0d:27:7e:e7:a7:b2:96:7e:ad:e3:a5:1d:f9:
                    08:37:45:3c:cc:10:2d:a1:43:39:e7:c9:bd:97:cf:
                    12:f7:1a:2e:33:20:bb:83:63:28:c9:1d:06:dc:04:
                    20:b4:35:1f:f6:3e:dc:a7:4d:b6:9b:2d:95:22:fc:
                    0d:e2:80:47:8a:56:ce:4b:bb:cc:61:28:42:55:f8:
                    2e:fd:f8:45:c9:2b:0e:17:c6:6e:58:45:74:eb:76:
                    26:ec:9e:0a:e7:ca:26:ad:b3:76:c1:4d:f2:6d:1f:
                    3c:55:15:13:42:16:00:78:04:ab:7f:5e:38:cd:9b:
                    13:aa:37:4c:e8:f6:51:c9:68:68:4d:ad:81:84:84:
                    bb:a6:22:90:e7:74:3e:49:8d:ea:ec:b7:92:69:08:
                    c7:c1:25:58:18:b7:0f:d6:34:c2:3c:03:d1:c6:6e:
                    4a:7b:d5:46:7e:bf:67:fe:b8:3e:be:a3:cf:01:c6:
                    84:a4:fc:77:b1:e8:48:ff:5b:55:f6:a4:08:f4:20:
                    02:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4E:D2:AA:E7:0D:B2:47:9E:27:DF:CD:49:8F:CA:B9:95:0D:A9:D4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43753e87-3163-42ab-a7d5-2bd22b5dc5de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff4:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:eb:a7:55:27:32:5e:5d:56:09:1f:7b:35:17:aa:c4:ce:4f:
         94:ee:53:c1:8d:f6:be:3e:15:f4:97:79:86:b4:f5:51:2e:19:
         23:1b:52:fb:b5:fe:b2:f4:9b:da:c2:6e:87:50:b1:af:0b:3b:
         87:0f:64:3b:8f:0a:53:71:4f:93:05:4f:90:14:5a:f5:a8:a1:
         97:66:38:c2:26:d7:13:08:e5:20:ce:7f:d0:dc:5a:2b:76:94:
         8a:5f:1f:07:5e:5d:a7:80:44:c1:27:5a:ae:d6:e5:cc:36:43:
         b8:dc:e5:60:f8:e8:6d:5d:bc:f3:67:c2:80:45:09:7e:b0:7a:
         23:5e:8f:df:64:18:b8:75:96:17:65:fc:2c:99:58:b3:90:1f:
         2b:69:cc:69:87:7c:a0:5a:ae:a5:90:81:11:af:38:9e:c8:2d:
         d6:9b:0a:fc:1f:4d:b5:1a:e2:5f:f4:c0:bf:54:e8:af:7c:46:
         80:ea:89:3e:3a:6b:a7:4a:cf:db:05:71:25:cc:39:dc:96:a8:
         f4:76:a5:b3:61:17:58:8f:a5:ef:4e:78:df:41:99:00:3b:6f:
         3f:38:f9:2f:e9:a2:1e:2a:56:fd:7a:7e:00:fb:a2:b6:8b:30:
         82:f7:d8:7b:e0:cc:20:2a:6d:e6:08:58:2d:46:0d:44:76:34:
         46:aa:7b:e0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 19 02:38:10 2026 by rpki-client