Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d72c7d4-be28-4953-b446-ca7eae67ec6d.roa
File:                     4d72c7d4-be28-4953-b446-ca7eae67ec6d.roa (raw, json)
Hash identifier:          LFfeFc2+J+rWX8bwbEbcUw9yAN6Kq8ZGcizYa/LNLtw=
Subject key identifier:   33:45:4B:4B:B9:7C:21:E5:42:CB:32:D4:3E:BB:44:EB:88:8A:53:99
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       07AFEBE58004ACC5B356A8F61CB4E5182DB9DA33
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d72c7d4-be28-4953-b446-ca7eae67ec6d.roa
Signing time:             Wed 05 Aug 2026 00:30:23 +0000
ROA not before:           Wed 05 Aug 2026 00:30:23 +0000
ROA not after:            Tue 03 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fb8:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:af:eb:e5:80:04:ac:c5:b3:56:a8:f6:1c:b4:e5:18:2d:b9:da:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 00:30:23 2026 GMT
            Not After : Nov  3 23:59:59 2026 GMT
        Subject: serialNumber=111a132431f89c5a2e9273dea4da0fd436eb2875595e2e86885430850d317b45, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f7:1d:6f:44:22:90:a1:d3:11:f2:fc:a0:27:
                    44:2c:16:0e:93:99:73:57:70:00:cb:e3:7e:4b:6d:
                    bc:6a:84:be:1d:0e:f3:04:24:e8:9d:a5:9e:c5:6a:
                    24:d3:16:a6:a5:0f:7e:fb:80:d0:61:54:09:fe:9e:
                    34:91:ef:c7:e6:d6:c4:ea:4f:1f:73:96:0d:91:67:
                    a8:90:f6:15:b2:06:a8:34:1d:57:19:29:4f:cc:2f:
                    db:68:c6:2e:a4:7e:b3:ea:74:0f:61:6b:d3:78:6e:
                    35:bc:d0:f2:d8:c6:6c:ac:f6:65:4a:7b:8d:09:92:
                    1d:c1:4f:96:a8:6d:03:91:99:11:11:cc:34:be:13:
                    bf:bf:05:64:9b:88:00:c3:49:8a:bf:dc:66:f2:98:
                    34:ed:27:7a:bc:15:72:90:e1:70:fe:24:eb:95:84:
                    21:76:6c:dd:73:9c:b4:be:22:53:5e:e1:e4:45:78:
                    ea:82:c2:5a:21:c0:a9:04:c4:77:7a:09:31:d7:c3:
                    8b:1a:52:de:62:0b:ff:60:91:a8:c7:5e:1a:bc:5f:
                    b3:8a:7b:00:50:69:50:5c:2d:7a:5d:88:40:1b:af:
                    af:c5:19:67:63:52:08:fa:8a:08:07:dc:01:5d:d7:
                    f0:7a:d6:c8:f8:c5:3c:02:5b:1b:51:d4:56:a9:d7:
                    56:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:45:4B:4B:B9:7C:21:E5:42:CB:32:D4:3E:BB:44:EB:88:8A:53:99
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d72c7d4-be28-4953-b446-ca7eae67ec6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb8:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         47:5e:d9:91:bf:c3:d8:90:61:a4:2e:b8:64:cc:1a:63:ba:85:
         64:03:bf:e3:91:5d:e0:fc:ce:71:a5:b6:72:48:e0:19:59:d7:
         7f:90:5a:75:2c:6c:85:cc:9a:de:cf:b9:f1:21:fa:22:26:fb:
         76:fe:85:f3:c9:38:7e:76:08:0a:14:d2:93:28:19:a8:61:4e:
         76:b0:16:0a:0e:90:3c:21:c0:e3:99:ab:1c:48:3d:74:aa:24:
         f3:ef:45:22:f0:69:2a:48:3b:5e:58:7b:39:15:ae:a2:f1:21:
         1d:7e:df:d1:e7:b7:50:14:8b:5a:eb:5d:6a:67:3b:e3:1f:df:
         0d:e7:76:f4:cf:cd:be:bc:fe:26:77:b9:9a:74:09:e3:ac:c3:
         a1:e7:d6:ec:71:b8:89:48:be:b5:f8:b0:14:5d:4f:09:6a:ab:
         9a:63:bb:89:f8:23:a6:c9:2d:91:98:2b:b3:74:3a:14:50:26:
         fb:a4:52:bc:03:08:5c:98:c7:fb:c3:3b:de:76:91:a8:29:7d:
         85:34:d0:16:9d:fb:48:ae:84:83:b2:ac:f8:c6:4e:0f:fe:95:
         5f:08:4c:41:b4:04:92:27:3f:59:76:34:4d:af:e6:56:0a:e5:
         b7:79:7a:87:ff:46:be:e1:b4:b1:ee:59:15:b3:52:dd:48:72:
         7a:f3:5b:11
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:13:42 2026 by rpki-client