Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59259747-3e3d-4349-ae04-74ac80ea279e.roa
File:                     59259747-3e3d-4349-ae04-74ac80ea279e.roa (raw, json)
Hash identifier:          MwXwMCDv6Qn/76ChAVHMRo1OO9ixKOm+mBg50sTTmGM=
Subject key identifier:   DC:66:0B:1A:BD:03:6D:5B:F6:09:A1:A6:ED:84:7B:87:28:8E:6E:80
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2A39E395881A9BBB6D26F47C1520CA968715E2AF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59259747-3e3d-4349-ae04-74ac80ea279e.roa
Signing time:             Tue 04 Aug 2026 01:50:09 +0000
ROA not before:           Tue 04 Aug 2026 01:50:09 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:39:e3:95:88:1a:9b:bb:6d:26:f4:7c:15:20:ca:96:87:15:e2:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 01:50:09 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=caea21b74992685472e6dd762b9a77870a1e47b50a78d08e77de59b9a83c404c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:91:3a:be:9a:ac:79:aa:b7:f7:e4:bd:03:09:
                    15:bf:ac:08:c8:d1:e6:77:b3:77:f5:f7:88:40:5c:
                    a0:84:6a:7e:d9:a8:de:7e:ab:68:79:af:ef:af:05:
                    e9:74:2d:42:f5:6d:d0:75:d2:1f:6f:23:7b:70:4a:
                    dd:56:5b:94:81:cd:0c:00:68:06:f1:cb:ac:b5:e2:
                    9f:cd:5f:46:37:35:59:f4:b5:66:da:30:83:6e:fb:
                    4c:67:fe:ee:8d:01:35:d8:a2:c3:96:16:bd:ea:a0:
                    56:41:87:d5:8e:7b:2c:35:e4:0c:a7:af:2a:e4:9d:
                    32:83:31:89:14:11:70:cb:cf:3a:1b:db:8a:d6:f4:
                    c7:ad:da:8f:9c:3c:e5:f4:42:1c:d2:a6:2b:7e:3e:
                    8f:20:03:34:a4:ac:d8:c1:64:6f:24:77:34:1c:0a:
                    25:c3:fe:b4:dc:ae:0e:32:a0:ae:cf:00:59:6a:26:
                    3d:f3:8e:d3:36:33:19:6f:31:2d:9b:52:02:d4:03:
                    a6:04:dc:8c:92:2f:4a:9b:54:87:cc:fe:85:a6:ab:
                    69:b0:32:78:50:e3:18:27:ba:bd:31:9f:d3:be:13:
                    e6:93:ca:d3:f3:66:60:78:69:e2:4e:8e:5f:5a:0e:
                    c5:e8:ef:67:83:00:25:c3:56:5f:fe:9e:6c:44:d0:
                    ed:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:66:0B:1A:BD:03:6D:5B:F6:09:A1:A6:ED:84:7B:87:28:8E:6E:80
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59259747-3e3d-4349-ae04-74ac80ea279e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         78:b7:c9:07:1a:cf:a2:c8:91:12:9c:69:92:26:a4:fa:b7:bf:
         df:f2:43:0d:bf:b8:c2:a9:e6:81:5f:72:fc:6d:da:e2:83:fc:
         3c:57:d4:47:04:f4:41:70:42:c8:fd:34:ac:1c:81:d1:f6:43:
         c2:9f:74:26:fb:01:b2:9b:7a:3e:77:ca:3c:4b:10:b9:90:81:
         7f:ce:08:d1:a8:04:a8:55:64:2d:81:0a:33:a3:8a:07:9b:88:
         bb:8a:08:0b:6d:51:54:26:d6:d3:0b:91:d5:95:ca:1f:80:bc:
         89:20:06:32:5e:55:32:41:64:ce:46:d4:75:bb:61:a0:b7:08:
         30:12:e6:c6:55:01:9d:d4:0d:2f:b1:61:09:7a:f1:1c:92:3d:
         ac:93:ca:f9:cf:ab:a4:c4:b8:a3:ba:30:f1:f8:2b:93:dc:cc:
         c6:cd:4f:79:b0:7f:7e:18:52:91:15:8b:fe:01:a3:c7:1b:76:
         39:f7:a9:36:c3:1a:1c:75:c2:24:2e:c8:ea:ce:65:f9:05:f6:
         fb:c0:5e:ac:ec:7f:de:43:ee:47:44:5a:d0:ce:2e:1c:9a:6d:
         2e:2e:79:5e:7e:4d:d5:ad:f6:4b:24:39:df:23:c2:ce:f4:ab:
         1a:08:ad:02:62:52:8b:f2:bb:b8:09:e8:cf:4f:ff:ab:19:02:
         7e:a6:d7:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 14:11:15 2026 by rpki-client