Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/506740f9-ac69-491b-9d13-04fb795eabd7.roa
File:                     506740f9-ac69-491b-9d13-04fb795eabd7.roa (raw, json)
Hash identifier:          cdsRdiCYHqzQyfPzKCgXpg2MEapg7H/z4b5QfvcvVgM=
Subject key identifier:   DA:FA:20:D3:6F:90:C3:58:DA:AC:8B:5A:10:79:F1:C3:75:9A:9A:02
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5AC46C58F0FE24571BB4E679B6B4605D0880CB3B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/506740f9-ac69-491b-9d13-04fb795eabd7.roa
Signing time:             Wed 19 Aug 2026 00:50:09 +0000
ROA not before:           Wed 19 Aug 2026 00:50:09 +0000
ROA not after:            Tue 17 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fba:e080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c4:6c:58:f0:fe:24:57:1b:b4:e6:79:b6:b4:60:5d:08:80:cb:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 19 00:50:09 2026 GMT
            Not After : Nov 17 23:59:59 2026 GMT
        Subject: serialNumber=23b766d02abb315c0a519c0121a8fb104ea083697adaa5dc5d2a39dcc3951375, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ef:00:c3:30:8f:e9:6e:b7:a0:83:2a:8b:bb:
                    39:d7:77:f8:6c:cc:f0:b8:7c:05:2e:6c:b2:ea:9a:
                    f8:f6:b8:10:49:18:b2:ff:91:e3:9e:83:c9:ce:8d:
                    bf:93:59:b6:45:ce:53:77:68:39:e2:32:7f:45:6b:
                    2d:13:dc:77:0f:28:8e:14:d5:7a:29:a5:36:f7:00:
                    76:fc:5b:db:0e:9b:21:a3:ea:fa:3d:89:72:55:77:
                    01:5c:12:b3:78:ec:a2:8b:61:63:8d:39:a1:e2:1f:
                    9e:2a:4c:28:75:79:16:9e:49:b6:6a:e2:88:8c:b0:
                    f6:bc:c8:70:7d:b6:0f:35:43:41:ea:13:37:3c:15:
                    c7:79:c0:d7:12:b3:71:40:d9:aa:c8:1a:e0:a2:f8:
                    e2:97:64:74:10:c1:19:65:3a:17:71:46:21:bd:d9:
                    d9:43:5f:cb:a5:1f:60:9a:13:34:2d:2b:5c:17:bb:
                    e8:0f:cb:2a:6b:c4:5f:04:27:ee:45:c6:5e:92:b8:
                    3b:3e:af:96:94:2f:78:82:0f:46:f7:47:d2:42:39:
                    00:36:4c:11:55:b0:6e:43:12:02:70:09:7f:c1:df:
                    48:e2:21:6a:f3:5f:71:f6:88:b2:13:68:23:b6:15:
                    81:04:8a:ed:f4:e8:ec:cd:e2:5c:bd:ec:0e:26:e2:
                    30:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FA:20:D3:6F:90:C3:58:DA:AC:8B:5A:10:79:F1:C3:75:9A:9A:02
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/506740f9-ac69-491b-9d13-04fb795eabd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fba:e080::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:22:ae:c6:45:5b:26:92:70:75:9d:5e:e4:d0:23:79:b3:f1:
         7e:cf:b5:c2:85:58:3f:08:6d:c3:7c:fa:fe:5c:e3:c1:1e:ea:
         1c:cb:ea:90:6f:94:5a:5e:8d:69:52:6f:a5:dd:37:82:ad:26:
         26:bb:ff:8a:56:e4:51:46:ad:d9:29:fa:b3:3b:82:08:19:96:
         9d:d4:33:02:13:0c:db:f2:9f:e9:74:87:e3:40:99:90:c7:2c:
         00:f8:c2:34:30:0a:26:ab:4e:74:7b:b3:05:e8:2c:d2:16:83:
         ba:08:af:b1:20:47:ed:22:46:33:d1:a2:c2:13:5c:09:bf:a3:
         bd:ec:c9:e5:e5:7d:b5:10:44:75:27:8f:18:af:ee:42:55:4a:
         05:e2:85:56:c7:c6:0a:c5:9d:5d:5f:17:0c:f9:86:7a:f2:eb:
         79:f5:6f:de:50:7b:ca:de:a2:c9:e3:83:0c:fc:33:ec:d1:43:
         c7:67:99:13:43:e1:2e:13:26:a1:fe:b7:f8:b8:25:3a:4e:e2:
         b1:f7:e7:20:57:c3:d4:45:3b:2e:e8:49:0e:35:dc:b3:36:54:
         d0:0b:6f:0b:1e:09:3f:36:1a:bf:65:9f:73:c0:01:06:7a:af:
         35:1b:17:44:55:82:f3:cf:d6:08:a8:4a:39:10:41:18:f0:02:
         f0:3f:3e:d5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 15 12:13:07 2026 by rpki-client