Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46911f37-9bdc-41b4-a459-8cf84f957313.roa
File:                     46911f37-9bdc-41b4-a459-8cf84f957313.roa (raw, json)
Hash identifier:          dkTK2uZJlTNVn0xPrAtPHpJjwlqfjObHYjO7EhGIWPA=
Subject key identifier:   0A:B9:76:76:19:72:E9:8D:CB:93:22:8F:49:5B:87:F1:47:20:C5:66
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       02D205E2EF3FA1D642C08B7A114BEBE6337CF20D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46911f37-9bdc-41b4-a459-8cf84f957313.roa
Signing time:             Fri 09 Oct 2026 01:10:31 +0000
ROA not before:           Fri 09 Oct 2026 01:10:31 +0000
ROA not after:            Thu 07 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fea:40c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d2:05:e2:ef:3f:a1:d6:42:c0:8b:7a:11:4b:eb:e6:33:7c:f2:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  9 01:10:31 2026 GMT
            Not After : Jan  7 23:59:59 2027 GMT
        Subject: serialNumber=b60fecce4faf7fe2c09f24fabf13472871c6bf0a578a7c0d9017b4ce518d985a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c6:25:4b:f7:1a:b5:07:a1:44:9c:85:e2:b4:
                    f1:b8:a1:db:a4:c2:ca:9b:d1:3f:af:72:93:e3:20:
                    2d:51:ec:42:92:3d:8e:9b:c6:15:19:9b:02:31:d4:
                    9b:34:d0:f3:2f:9d:d4:8a:40:5a:f0:66:3a:b5:0d:
                    5e:13:86:24:ec:81:4e:30:65:ca:f1:d7:7f:1c:b5:
                    9d:62:a3:7c:ee:8c:f4:1d:17:cb:fe:d5:0e:b8:b5:
                    c0:21:6c:4f:f8:08:29:99:9d:4e:d8:2b:b0:ab:74:
                    02:83:7f:74:9d:cb:58:21:f0:9b:03:e0:17:3d:5d:
                    10:ae:91:82:b6:38:80:3d:d6:e3:22:cc:cc:3c:c8:
                    73:0e:c6:52:53:74:3a:d3:7d:fc:1a:81:67:3c:fe:
                    e3:d9:2c:53:fc:10:5b:ad:54:52:73:fd:1e:cf:05:
                    c4:98:e7:26:dd:f5:0c:4c:39:95:cf:13:fd:fc:ba:
                    5d:1b:d0:8a:2e:b5:3e:f8:3a:8b:65:71:91:1b:9b:
                    e8:82:01:57:24:72:26:7e:6b:d7:81:b2:96:2c:88:
                    ac:0a:61:72:2e:68:dc:48:b7:02:1e:f3:27:2b:e8:
                    1f:8b:0d:2c:ae:f4:26:5f:02:e1:95:06:0d:40:ca:
                    7c:4a:bd:57:64:3e:30:74:48:65:a9:b6:3e:73:51:
                    ce:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B9:76:76:19:72:E9:8D:CB:93:22:8F:49:5B:87:F1:47:20:C5:66
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46911f37-9bdc-41b4-a459-8cf84f957313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:40c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:de:af:62:72:27:a2:7c:8d:aa:89:a0:12:f2:7f:18:51:15:
         d6:49:a9:1f:c7:1b:b6:92:59:24:0d:a8:b8:4e:ab:19:0d:20:
         9b:58:e8:43:31:88:3c:0a:49:95:93:c8:68:51:29:b3:99:a0:
         08:d3:76:9f:49:aa:f9:0a:a9:ac:6d:ac:ea:bb:9c:a9:8d:e1:
         f2:6f:7f:09:3f:7e:bf:e3:06:57:16:ef:47:1d:ea:c7:3e:5b:
         b3:12:b9:77:d2:9f:0b:11:7f:47:a0:2d:8a:48:6b:57:2d:08:
         2e:30:3c:57:1b:1e:80:8b:b7:45:c9:7a:43:5a:65:89:3f:a0:
         e4:dc:b2:f9:de:ba:81:2d:6f:66:84:9e:8f:34:85:d9:bc:2e:
         c8:ef:fa:02:79:95:a4:70:3b:e5:cc:89:ff:fe:2c:38:a0:7c:
         29:9b:46:71:a1:39:6a:0d:e6:e6:34:ae:da:bb:80:e9:83:19:
         18:3f:d2:3f:e9:43:9c:c6:d4:15:80:d6:0f:ec:f2:7f:23:94:
         a2:65:d2:8c:55:6f:9b:1e:73:25:f6:7e:cf:c2:e3:d7:9c:00:
         27:55:5c:b1:39:a8:7a:3a:e9:e9:cd:2c:2f:6b:d9:96:99:ed:
         80:4e:b2:87:07:9f:51:dc:7f:9d:81:3a:db:29:a9:15:50:78:
         cc:55:57:38
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 5 05:01:19 2026 by rpki-client